Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/YHs0SmUthyKBQj-dP5Z7ajal0yg.roa
File: YHs0SmUthyKBQj-dP5Z7ajal0yg.roa (raw, json)
Hash identifier: HPeyaC7hdon5jLg8EQp9PBGAKsv8XMv8w9OnuKi/Mdc=
Subject key identifier: 60:7B:34:4A:65:2D:87:22:81:42:3F:9D:3F:96:7B:6A:36:A5:D3:28
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 08EBF982
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/YHs0SmUthyKBQj-dP5Z7ajal0yg.roa
Signing time: Sat 01 Jan 2022 08:05:18 +0000
ROA not before: Sat 01 Jan 2022 08:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51660
IP address blocks: 185.40.166.0/24 maxlen: 24
185.40.164.0/23 maxlen: 24
95.158.150.0/24 maxlen: 24
46.35.172.0/22 maxlen: 24
185.18.228.0/23 maxlen: 24
95.158.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149682562 (0x8ebf982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 08:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=607b344a652d872281423f9d3f967b6a36a5d328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:56:82:3c:9d:5b:f2:02:f2:bd:09:ec:98:
ee:88:27:2a:8d:73:8f:2d:3c:b5:87:ce:bb:13:09:
3a:2b:38:cd:82:ac:93:1f:b6:8e:ec:80:aa:06:d0:
fd:57:55:37:60:6d:51:63:e5:0c:35:20:b0:5f:66:
97:b0:8f:3e:47:78:48:c4:77:2f:f2:3f:0f:5d:f4:
c7:ed:db:bd:12:6d:a8:75:06:dc:03:85:40:10:45:
12:21:9b:12:6e:74:9c:9f:8a:9e:a2:68:07:96:7d:
24:a2:80:b4:40:71:fd:02:1e:66:cf:b0:20:a7:07:
f7:c7:3f:db:10:4f:fa:51:c8:e3:a1:54:ce:db:21:
f9:70:eb:f4:30:25:07:64:36:be:8c:3f:4e:03:b7:
fa:c7:c6:7d:fb:81:18:f0:8a:6f:86:39:bd:ec:12:
d4:fd:e7:30:49:a4:aa:81:24:4d:66:71:ef:cb:87:
47:76:86:06:93:ed:dc:b8:24:56:b5:f1:eb:26:80:
2f:60:22:c7:3e:9f:9c:3c:2a:ae:df:9a:68:2b:4f:
8f:f3:b6:af:c0:38:3c:a3:17:49:2d:68:2b:a3:aa:
36:1c:eb:95:40:50:62:6d:92:fe:35:19:1c:d5:d0:
b2:71:f6:93:a3:e4:6d:bd:a8:99:8d:54:de:21:bc:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:34:4A:65:2D:87:22:81:42:3F:9D:3F:96:7B:6A:36:A5:D3:28
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/YHs0SmUthyKBQj-dP5Z7ajal0yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.172.0/22
95.158.132.0/24
95.158.150.0/24
185.18.228.0/23
185.40.164.0-185.40.166.255
Signature Algorithm: sha256WithRSAEncryption
59:71:d5:92:89:a6:f0:c3:a6:ce:e0:18:40:cc:5d:8e:5b:3b:
f9:72:67:23:a8:45:2d:2d:8d:f4:80:13:81:e1:5f:86:21:39:
1d:a7:ed:7b:db:15:2b:59:41:f7:3e:cf:ea:cf:ca:36:7a:9e:
e8:9e:d7:b8:89:04:90:4c:a4:ad:49:41:b1:c2:19:a1:bf:10:
23:b4:06:81:5b:06:3a:99:d6:e3:46:4f:9a:b7:20:18:3b:1c:
8d:2b:52:ee:b3:55:46:d1:55:ae:fd:6c:95:9b:83:50:5f:86:
4a:94:7c:96:06:fa:e3:8d:92:08:e9:85:e2:47:fa:d9:17:7d:
12:7a:10:39:bd:cf:b2:2c:99:5a:c0:6b:15:fd:4b:5a:94:8d:
66:50:cb:50:08:67:73:ae:6c:99:41:79:33:97:66:1b:62:a5:
ed:73:c2:2c:ab:9e:30:ff:f8:b2:d5:61:d3:3e:23:85:a3:8c:
d4:ce:c0:de:03:ef:4a:87:d2:a0:fa:64:a4:aa:2b:d6:63:e6:
9a:90:bd:c2:bc:e2:40:d8:a6:bc:7e:1d:f9:7d:34:2b:8b:23:
13:33:35:54:d6:b9:32:e4:38:31:5c:46:e9:fa:09:41:9f:de:
f2:4c:b7:90:3a:29:c8:17:aa:02:81:f7:be:4c:01:56:ca:0c:
7d:04:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org