Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/pTpnE9tylHdqS8ztSoaJmyZKghQ.roa
File: pTpnE9tylHdqS8ztSoaJmyZKghQ.roa (raw, json)
Hash identifier: OI6pJTqE4+cWJi1PpsfcYG5ET1Zyios7YZ6V172BnYQ=
Subject key identifier: A5:3A:67:13:DB:72:94:77:6A:4B:CC:ED:4A:86:89:9B:26:4A:82:14
Certificate issuer: /CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Certificate serial: 4460E0
Authority key identifier: 83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/pTpnE9tylHdqS8ztSoaJmyZKghQ.roa
Signing time: Sat 01 Jan 2022 00:56:13 +0000
ROA not before: Sat 01 Jan 2022 00:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60503
IP address blocks: 185.30.165.0/24 maxlen: 24
185.30.164.0/22 maxlen: 22
185.30.164.0/24 maxlen: 24
185.30.166.0/24 maxlen: 24
185.30.167.0/24 maxlen: 24
93.158.236.0/22 maxlen: 22
93.158.236.0/24 maxlen: 24
93.158.238.0/24 maxlen: 24
93.158.237.0/24 maxlen: 24
93.158.239.0/24 maxlen: 24
2a00:aee3::/32 maxlen: 32
2a00:aee7::/32 maxlen: 32
2a00:aee0::/32 maxlen: 32
2a00:aee6::/32 maxlen: 32
2a00:aee5::/32 maxlen: 32
2a00:aee1::/32 maxlen: 32
2a00:aee4::/32 maxlen: 32
2a00:aee2::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4481248 (0x4460e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83023b39705b345a86eff3f14ef6b1e4db45939e
Validity
Not Before: Jan 1 00:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a53a6713db7294776a4bcced4a86899b264a8214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:fa:9f:9a:41:23:46:0c:a1:2f:84:d8:55:
68:27:6d:15:f2:0a:b6:4a:f4:9b:e2:ac:0e:23:90:
d0:1a:41:34:f2:3a:15:d9:8e:e4:ed:98:25:5b:9a:
15:70:8b:ef:dd:bd:5e:26:7b:50:87:c3:f7:4d:b8:
81:40:9c:dc:c4:14:87:c4:00:3c:88:f0:26:57:bd:
c5:59:51:73:60:8a:c2:e5:8d:00:c3:29:73:fe:04:
75:09:cc:81:2f:17:2c:42:49:2a:60:31:73:aa:3a:
97:d5:43:8f:57:4e:a1:ff:74:91:28:25:15:11:cf:
b4:95:40:a7:2e:c0:f8:ae:5a:1f:9e:93:4a:18:d2:
e1:09:e5:07:c9:36:61:50:2f:8f:cd:2e:68:cd:cd:
31:08:8f:57:d7:b4:45:49:9d:02:83:9e:d3:ec:6d:
67:a0:c3:cc:48:80:fc:27:72:5a:66:50:cc:db:1c:
b7:2e:da:dc:a2:dd:c5:fe:df:70:00:dd:42:65:87:
5d:23:f2:6b:c5:f1:26:52:9b:31:39:f6:d1:72:17:
3f:29:7c:4c:98:77:59:f0:9f:c9:53:d0:73:35:4b:
bf:1b:85:2a:46:3f:ca:28:56:33:49:85:dd:b4:83:
f9:45:76:f9:e0:dc:3c:3d:ea:f4:81:dd:00:73:40:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3A:67:13:DB:72:94:77:6A:4B:CC:ED:4A:86:89:9B:26:4A:82:14
X509v3 Authority Key Identifier:
keyid:83:02:3B:39:70:5B:34:5A:86:EF:F3:F1:4E:F6:B1:E4:DB:45:93:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwI7OXBbNFqG7_PxTvax5NtFk54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/pTpnE9tylHdqS8ztSoaJmyZKghQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ae3042-ca98-4dda-95a6-3b8fbfff5342/1/gwI7OXBbNFqG7_PxTvax5NtFk54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.158.236.0/22
185.30.164.0/22
IPv6:
2a00:aee0::/29
Signature Algorithm: sha256WithRSAEncryption
35:1f:46:74:ac:ec:89:00:86:8a:85:75:07:fe:b1:5f:39:65:
d6:ae:72:5b:4c:03:77:2e:71:1d:a0:40:4b:5d:90:7c:37:b8:
d3:bc:da:76:a1:f9:04:84:b0:9f:fa:0f:9a:2e:dd:a7:2a:48:
fc:d0:60:e6:73:c8:2e:93:aa:f7:99:ef:56:12:63:f2:14:a4:
f9:29:63:ca:93:62:7e:25:41:59:76:1d:a2:ec:a4:40:96:0a:
c3:3a:d1:c7:b8:44:41:8b:a9:65:8f:68:e8:91:49:16:ac:a5:
3a:76:70:d5:20:78:25:4e:a5:06:dd:ef:08:2e:ee:8f:73:5b:
88:bb:41:8b:12:85:f2:ba:b1:48:b8:ae:93:9f:ae:88:1f:6e:
8f:0f:46:c6:59:fa:c7:48:5b:b3:7d:78:4b:ad:d7:bd:cf:a6:
73:bd:a9:8f:6e:e4:71:6c:01:a9:27:65:05:1c:fe:19:2b:96:
9e:da:46:f2:d8:a2:a2:02:63:93:17:0d:8e:cb:6a:be:f5:e0:
35:b8:a5:c8:79:21:bc:02:ca:91:ed:cc:76:f2:63:01:27:76:
f7:95:a4:95:cd:58:d3:e8:d4:16:2f:78:30:2e:34:7b:2b:c7:
a1:31:9c:51:dc:10:cf:a4:62:1b:4f:55:8f:cd:03:99:6a:ec:
d0:2c:a5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:01 2024 by rpki-client on console-ams.rpki-client.org