Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-6FxtPZx0hd_dAwlg8zWJft06gk.roa
File: 1-6FxtPZx0hd_dAwlg8zWJft06gk.roa (raw, json)
Hash identifier: 8o9phJeVAanUARQ0qaj8tj3Eg+8E8wJPrQ8Em6OL5Jc=
Subject key identifier: FB:A1:71:B4:F6:71:D2:17:7F:74:0C:25:83:CC:D6:25:FB:74:EA:09
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A5F30228012F97EF8A250DD49450FDEA2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-6FxtPZx0hd_dAwlg8zWJft06gk.roa
Signing time: Mon 04 Sep 2023 07:55:04 +0000
ROA not before: Mon 04 Sep 2023 07:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.83.148.0/22 maxlen: 24
194.33.36.0/22 maxlen: 24
45.83.116.0/22 maxlen: 24
45.83.128.0/22 maxlen: 24
45.83.140.0/22 maxlen: 24
185.161.70.0/23 maxlen: 24
185.161.69.0/24 maxlen: 24
185.106.96.0/22 maxlen: 24
139.28.232.0/22 maxlen: 24
45.86.60.0/22 maxlen: 24
45.86.64.0/22 maxlen: 24
45.86.68.0/22 maxlen: 24
45.86.72.0/22 maxlen: 24
45.86.76.0/22 maxlen: 24
45.92.160.0/22 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/22 maxlen: 24
45.89.96.0/22 maxlen: 24
45.89.100.0/22 maxlen: 24
45.89.104.0/22 maxlen: 24
45.89.108.0/22 maxlen: 24
171.22.136.0/22 maxlen: 24
194.76.136.0/22 maxlen: 24
45.83.84.0/22 maxlen: 24
45.82.244.0/22 maxlen: 24
45.82.248.0/22 maxlen: 24
45.82.252.0/22 maxlen: 24
185.153.180.0/22 maxlen: 24
213.59.112.0/20 maxlen: 24
45.89.196.0/22 maxlen: 24
45.15.176.0/22 maxlen: 24
171.22.108.0/22 maxlen: 24
171.22.112.0/22 maxlen: 24
45.83.20.0/22 maxlen: 24
45.83.24.0/22 maxlen: 24
45.15.184.0/22 maxlen: 24
171.22.116.0/22 maxlen: 24
171.22.124.0/22 maxlen: 24
171.22.120.0/22 maxlen: 24
171.22.128.0/22 maxlen: 24
171.22.132.0/22 maxlen: 24
45.88.160.0/22 maxlen: 24
45.88.168.0/22 maxlen: 24
45.88.176.0/22 maxlen: 24
45.88.180.0/22 maxlen: 24
185.149.20.0/22 maxlen: 24
185.203.4.0/22 maxlen: 24
141.98.160.0/22 maxlen: 24
141.98.164.0/22 maxlen: 24
45.88.148.0/22 maxlen: 24
92.118.228.0/22 maxlen: 24
92.118.232.0/22 maxlen: 24
92.118.236.0/22 maxlen: 24
185.156.108.0/22 maxlen: 24
185.166.152.0/22 maxlen: 24
45.92.124.0/22 maxlen: 24
185.166.160.0/22 maxlen: 24
45.92.140.0/22 maxlen: 24
45.128.56.0/22 maxlen: 24
45.128.52.0/22 maxlen: 24
45.128.72.0/22 maxlen: 24
45.128.48.0/22 maxlen: 24
141.98.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:30:22:80:12:f9:7e:f8:a2:50:dd:49:45:0f:de:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 4 07:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba171b4f671d2177f740c2583ccd625fb74ea09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:87:50:f1:81:1e:7b:1f:bc:89:a0:bc:68:
e6:bd:3e:27:b8:73:b1:22:d7:e2:c1:2e:1d:bb:53:
16:10:78:ca:d8:01:ee:b4:a8:6f:5e:c3:84:18:10:
b7:1f:a8:a3:39:6a:83:47:25:70:52:f7:49:d0:1d:
3e:a6:95:69:23:5c:b0:d1:a6:73:ec:59:a8:ae:b9:
2b:b2:34:c5:24:dc:a6:cc:6b:31:eb:4c:ff:5c:29:
44:fe:82:03:f8:0f:47:b9:31:ed:71:83:81:fe:b6:
23:17:b9:e7:dc:da:4e:ed:b5:06:2b:96:d0:85:ca:
41:84:14:d7:ca:24:60:22:17:8e:f5:8f:30:66:6a:
c1:37:54:f5:21:97:5f:a1:f2:32:d6:1f:44:79:9b:
30:2e:49:8e:bc:75:b4:5f:70:5f:b0:20:6e:b8:a2:
24:0e:3d:05:15:78:9f:31:c2:b3:29:92:76:13:22:
2a:04:09:9e:df:8d:30:1a:ca:35:3b:47:76:cd:79:
af:4b:54:36:1a:65:e1:bb:cf:e0:cd:de:6b:13:09:
14:35:72:e1:84:fe:0f:96:40:5a:fa:e4:15:b6:9c:
c5:27:c6:2a:16:5d:be:8d:88:c1:3a:de:34:4c:d4:
d6:a9:1a:83:eb:70:37:b4:b7:ca:ac:f4:05:43:8f:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A1:71:B4:F6:71:D2:17:7F:74:0C:25:83:CC:D6:25:FB:74:EA:09
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-6FxtPZx0hd_dAwlg8zWJft06gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.176.0/22
45.15.184.0/22
45.82.244.0-45.82.255.255
45.83.20.0-45.83.27.255
45.83.84.0/22
45.83.116.0/22
45.83.128.0/22
45.83.140.0/22
45.83.148.0/22
45.86.60.0-45.86.79.255
45.88.148.0/22
45.88.160.0/22
45.88.168.0/22
45.88.176.0/21
45.89.96.0/20
45.89.196.0/22
45.92.124.0/22
45.92.140.0/22
45.92.160.0/21
45.92.192.0/22
45.128.48.0-45.128.59.255
45.128.72.0/22
92.118.228.0-92.118.239.255
139.28.232.0/22
141.98.132.0/22
141.98.160.0/21
171.22.108.0-171.22.139.255
185.106.96.0/22
185.149.20.0/22
185.153.180.0/22
185.156.108.0/22
185.161.69.0-185.161.71.255
185.166.152.0/22
185.166.160.0/22
185.203.4.0/22
194.33.36.0/22
194.76.136.0/22
213.59.112.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:2b:b1:02:10:c2:c3:80:dc:37:46:68:14:b5:8a:46:19:c4:
dd:7b:14:6b:4e:cc:20:a9:28:33:36:25:93:82:8f:25:45:d1:
4f:2a:97:63:35:a1:8f:98:f2:aa:05:13:f5:53:3f:8b:ab:d3:
9f:b6:eb:6f:77:71:f8:65:85:c0:50:de:25:30:c0:58:34:dd:
1e:57:fa:ba:59:b1:ab:07:19:87:fb:de:f5:7a:c7:f3:da:a0:
51:0b:9c:f6:ef:50:48:33:2a:5b:2f:e0:7e:2a:bf:d3:3d:c7:
40:b0:44:c2:78:e2:e5:c0:f6:39:64:e5:af:b4:b9:59:60:38:
55:d7:4d:93:20:f6:24:86:bc:6c:32:c8:83:62:40:d6:3c:d1:
1a:b4:f6:2b:5f:ff:27:85:c3:fb:3e:d9:1c:9d:26:b3:a9:9f:
e2:b6:fc:a7:69:fa:8c:d8:3c:07:03:fa:bc:56:6a:42:d5:ba:
52:25:11:d4:d9:15:45:5b:37:3b:eb:c3:8a:44:fd:3b:09:c1:
80:f1:77:f0:25:7f:2d:61:85:f2:c4:0a:0e:27:23:33:d7:c1:
03:bc:97:b2:8c:ac:95:39:04:5f:a2:69:b2:b7:6c:16:54:d6:
3a:53:3e:82:48:dc:44:e5:9b:e2:6c:70:42:f6:8d:ff:6c:fe:
9b:48:7d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:05:57 2025 by rpki-client