Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/PEGfaa3Aql8olcYOHcIhsEliOT4.roa
File: PEGfaa3Aql8olcYOHcIhsEliOT4.roa (raw, json)
Hash identifier: 0msoVShVjAUtvEJ3xLLJHBODwMuMfwXzNnWKmzYfjGQ=
Subject key identifier: 3C:41:9F:69:AD:C0:AA:5F:28:95:C6:0E:1D:C2:21:B0:49:62:39:3E
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 404AC53D
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/PEGfaa3Aql8olcYOHcIhsEliOT4.roa
Signing time: Sat 01 Jan 2022 12:03:10 +0000
ROA not before: Sat 01 Jan 2022 12:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42160
IP address blocks: 164.138.104.0/21 maxlen: 21
91.230.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078641981 (0x404ac53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Jan 1 12:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c419f69adc0aa5f2895c60e1dc221b04962393e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:3b:26:71:c6:f0:14:62:9d:df:6d:8a:39:
4a:4d:71:76:3d:93:6f:98:dc:7d:74:85:6c:a7:f0:
e8:ef:5b:78:bd:4c:bf:86:c8:04:12:e6:70:4f:63:
16:9e:05:52:e5:39:4b:f0:f4:86:0c:a1:aa:98:53:
46:d3:02:12:27:5e:64:aa:89:de:24:cb:fb:22:98:
c3:1b:c0:89:9f:d1:ea:73:13:4f:81:01:b6:c0:d8:
09:20:9f:78:0c:d8:f1:a9:c2:75:9b:57:8b:23:ed:
e0:ca:4a:84:33:e4:59:70:33:98:5b:44:bc:b9:dc:
e6:37:a2:f3:38:82:ec:84:c3:97:80:cf:2e:05:dc:
0a:37:75:cd:47:34:32:78:25:6e:50:36:00:56:be:
9d:4c:67:ea:df:db:33:99:4b:23:da:12:23:18:2e:
d1:bd:5a:77:87:87:8a:64:ca:64:f1:f0:a5:cc:39:
42:04:f8:f0:3f:c9:c6:e0:43:de:71:00:64:fa:51:
8f:8b:10:52:23:c5:bf:de:0f:31:98:c8:11:e3:8f:
22:78:8c:4f:65:29:f8:5b:dd:a8:2d:59:2e:41:99:
1f:5a:fb:0f:ab:4d:c7:81:2c:f3:fc:38:f3:73:8b:
8a:8f:ed:e5:e5:12:08:77:86:2f:3b:9b:d6:df:d0:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:9F:69:AD:C0:AA:5F:28:95:C6:0E:1D:C2:21:B0:49:62:39:3E
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/PEGfaa3Aql8olcYOHcIhsEliOT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.64.0/24
164.138.104.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:33:83:2a:74:ab:3b:f8:3c:01:a5:55:89:15:e4:9d:1b:b8:
4b:03:6e:42:ba:9f:76:ca:9f:95:97:9e:91:64:96:92:d1:6f:
bc:eb:9f:d3:ad:90:a4:17:fb:31:56:7a:19:35:9f:57:11:e1:
e5:d5:3c:8f:68:51:28:4a:f8:24:df:f9:da:20:e8:d3:de:ff:
ef:be:f0:d0:c5:8a:6a:a5:c3:e5:13:77:b3:ce:af:fc:e3:2c:
dc:ec:1f:be:cc:82:eb:94:6c:c0:ed:1f:0f:28:e0:21:72:50:
56:e3:46:b3:7d:fa:8c:b5:60:0a:ad:ad:07:fb:3a:d9:d2:59:
94:78:ef:8a:e9:e3:c8:95:8d:3e:27:63:75:a3:43:e0:d4:41:
d3:3f:0e:9f:dd:6a:20:de:f2:e4:e1:c3:8b:45:5f:7b:5e:37:
9b:11:ab:a3:17:4a:f8:23:22:02:bf:5a:41:f3:1d:92:96:63:
d9:c1:c5:ee:72:be:60:a6:ea:63:98:98:c3:fb:a0:d9:1c:24:
70:ef:23:86:02:ca:f3:c6:50:71:05:2d:17:6a:0a:e8:9c:a5:
a3:54:47:21:8f:e2:08:8e:b7:6c:46:d9:a8:8f:a6:81:1d:48:
8f:b8:84:ec:8b:be:32:c7:8d:3f:6b:a8:e1:b4:57:c4:ac:c5:
e0:90:9f:02
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEQErFPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YzMwZDk1MDQ2MzMxYmRjZTMwMThiN2ZmZTBmMTNkYmY5ZmM3MThkMB4XDTIyMDEw
MTEyMDMxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2M0MTlmNjlhZGMw
YWE1ZjI4OTVjNjBlMWRjMjIxYjA0OTYyMzkzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANz6OyZxxvAUYp3fbYo5Sk1xdj2Tb5jcfXSFbKfw6O9beL1M
v4bIBBLmcE9jFp4FUuU5S/D0hgyhqphTRtMCEideZKqJ3iTL+yKYwxvAiZ/R6nMT
T4EBtsDYCSCfeAzY8anCdZtXiyPt4MpKhDPkWXAzmFtEvLnc5jei8ziC7ITDl4DP
LgXcCjd1zUc0MnglblA2AFa+nUxn6t/bM5lLI9oSIxgu0b1ad4eHimTKZPHwpcw5
QgT48D/JxuBD3nEAZPpRj4sQUiPFv94PMZjIEeOPIniMT2Up+FvdqC1ZLkGZH1r7
D6tNx4Es8/w483OLio/t5eUSCHeGLzub1t/QXOECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ8QZ9prcCqXyiVxg4dwiGwSWI5PjAfBgNVHSMEGDAWgBRcMNlQRjMb3OMB
i3/+DxPb+fxxjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hERFpVRVl6Rzl6akFZdF9fZzhUMl9uOGNZMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvODk4M2FmLTVjMTgtNGJjOC1hM2Y1LTA3NTA5MTkxZjk1My8x
L1BFR2ZhYTNBcWw4b2xjWU9IY0loc0VsaU9UNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
ODk4M2FmLTVjMTgtNGJjOC1hM2Y1LTA3NTA5MTkxZjk1My8xL1hERFpVRVl6Rzl6
akFZdF9fZzhUMl9uOGNZMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvmQAMEA6SKaDANBgkqhkiG9w0B
AQsFAAOCAQEAjjODKnSrO/g8AaVViRXknRu4SwNuQrqfdsqflZeekWSWktFvvOuf
062QpBf7MVZ6GTWfVxHh5dU8j2hRKEr4JN/52iDo097/777w0MWKaqXD5RN3s86v
/OMs3OwfvsyC65RswO0fDyjgIXJQVuNGs336jLVgCq2tB/s62dJZlHjviunjyJWN
PidjdaND4NRB0z8On91qIN7y5OHDi0Vfe143mxGroxdK+CMiAr9aQfMdkpZj2cHF
7nK+YKbqY5iYw/ug2RwkcO8jhgLK88ZQcQUtF2oK6Jylo1RHIY/iCI63bEbZqI+m
gR1Ij7iE7Iu+MseNP2uo4bRXxKzF4JCfAg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:53 2024 by rpki-client on console-fra.rpki-client.org