Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/lt9rEoxPGmQMvJpQ2bWdiWxZqgs.roa
File: lt9rEoxPGmQMvJpQ2bWdiWxZqgs.roa (raw, json)
Hash identifier: CvMDc1qunQchmyQ1TzNOKefl2WZmuss5g+qmoGkqaDA=
Subject key identifier: 96:DF:6B:12:8C:4F:1A:64:0C:BC:9A:50:D9:B5:9D:89:6C:59:AA:0B
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 09CF6BAC
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/lt9rEoxPGmQMvJpQ2bWdiWxZqgs.roa
Signing time: Tue 05 Apr 2022 21:07:33 +0000
ROA not before: Tue 05 Apr 2022 21:07:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58079
IP address blocks: 95.158.153.0/24 maxlen: 24
46.35.180.0/23 maxlen: 24
46.35.184.0/22 maxlen: 24
46.35.188.0/22 maxlen: 24
95.158.184.0/22 maxlen: 24
93.152.243.0/24 maxlen: 24
93.152.242.0/24 maxlen: 24
93.152.241.0/24 maxlen: 24
93.152.245.0/24 maxlen: 24
93.152.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164588460 (0x9cf6bac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Apr 5 21:07:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96df6b128c4f1a640cbc9a50d9b59d896c59aa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:df:59:1b:bf:17:03:36:0b:b8:99:53:9b:
80:d7:5a:15:f9:f8:d3:a9:d8:cb:99:a8:93:69:8d:
8c:c9:3c:2c:6f:5b:39:8c:49:41:ca:17:54:49:b9:
e0:a7:34:e3:f0:d1:77:2f:ce:be:46:54:bd:5d:0e:
08:51:6d:70:7c:65:e8:14:47:de:97:8f:ba:49:1b:
27:97:3e:b6:e5:57:ba:cd:5d:c1:49:59:6b:15:85:
2d:92:8b:cb:c5:d6:fe:bb:9a:a9:e1:e1:aa:49:ee:
7f:48:30:86:ca:39:5d:6f:ff:2f:81:31:82:d6:de:
a2:de:9f:cb:ce:a7:93:b4:f1:43:e9:f4:33:a8:a7:
38:54:84:b9:1e:f3:ca:e8:45:b5:5d:0c:91:e5:b6:
d8:7d:9a:c2:42:f8:c6:34:72:80:bf:69:75:f5:ec:
25:f7:97:34:b8:d5:3f:42:57:63:95:ac:79:5a:93:
4c:86:cc:8a:65:aa:6a:31:a7:55:ff:a6:d6:35:89:
cd:23:7e:c4:9e:97:34:4e:3b:e0:e2:e2:e1:cd:e2:
d4:86:72:df:62:46:52:4a:3e:96:27:b8:15:bb:42:
05:59:63:ea:3a:aa:0a:30:4f:bc:c3:91:3f:a3:2c:
7d:a9:9a:3f:84:b4:b4:de:29:3d:bd:de:01:66:fb:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DF:6B:12:8C:4F:1A:64:0C:BC:9A:50:D9:B5:9D:89:6C:59:AA:0B
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/lt9rEoxPGmQMvJpQ2bWdiWxZqgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.180.0/23
46.35.184.0/21
93.152.241.0-93.152.245.255
95.158.153.0/24
95.158.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:64:14:0a:72:e1:92:37:c6:30:e7:9f:89:bb:34:92:e8:8c:
88:ee:43:2f:48:72:af:16:94:8c:02:00:f6:33:50:ff:32:5d:
7a:8e:fc:1b:08:48:41:ec:36:12:b4:17:a9:eb:a9:8d:09:84:
ea:87:c0:c0:bf:f5:53:00:8e:f0:35:99:55:b0:6b:f2:ad:64:
f4:1d:1c:6b:41:a1:17:73:02:1b:6d:9b:48:49:00:31:41:53:
e5:7d:dd:d7:48:ea:da:4b:b8:04:02:63:d3:11:d9:0b:f6:02:
05:f8:27:a2:43:aa:36:2b:2a:35:df:9c:f2:ce:7d:02:5c:2c:
2f:82:25:b9:56:07:28:31:12:fb:ad:bd:9a:b6:1d:c4:84:c5:
23:1a:1a:d3:0e:e1:eb:e7:c8:1a:9e:c3:59:40:c3:cf:76:2c:
ab:33:9b:2d:3d:69:0d:b2:06:c8:53:6b:46:1b:df:c0:a9:37:
1a:db:e0:18:45:3a:9d:2b:a0:c0:20:09:d2:54:06:0f:3b:f9:
8d:66:82:12:94:37:26:3e:04:62:a5:8c:ed:79:4c:7c:a2:4c:
65:0f:df:8b:a5:ef:35:e0:98:45:20:94:e9:e8:16:c9:70:39:
7f:80:5b:15:a3:bf:a6:f0:2a:47:0d:01:56:5d:2f:5d:65:0a:
a5:f4:fd:03
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIECc9rrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YmVjOTAzMGM3MGEzZDQxOTJkNTljMjhkY2M4ZDU0NzY5NDM0MGIzMB4XDTIyMDQw
NTIxMDczM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTZkZjZiMTI4YzRm
MWE2NDBjYmM5YTUwZDliNTlkODk2YzU5YWEwYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALIB31kbvxcDNgu4mVObgNdaFfn406nYy5mok2mNjMk8LG9b
OYxJQcoXVEm54Kc04/DRdy/OvkZUvV0OCFFtcHxl6BRH3pePukkbJ5c+tuVXus1d
wUlZaxWFLZKLy8XW/ruaqeHhqknuf0gwhso5XW//L4Exgtbeot6fy86nk7TxQ+n0
M6inOFSEuR7zyuhFtV0MkeW22H2awkL4xjRygL9pdfXsJfeXNLjVP0JXY5WseVqT
TIbMimWqajGnVf+m1jWJzSN+xJ6XNE474OLi4c3i1IZy32JGUko+lie4FbtCBVlj
6jqqCjBPvMORP6MsfamaP4S0tN4pPb3eAWb7+70CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBSW32sSjE8aZAy8mlDZtZ2JbFmqCzAfBgNVHSMEGDAWgBTr7JAwxwo9QZLV
nCjcyNVHaUNAszAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYteVFNTWNLUFVHUzFad28zTWpWUjJsRFFMTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8x
L2x0OXJFb3hQR21RTXZKcFEyYldkaVd4WnFncy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
MzcyYjg3LTk1ZjQtNGM5OC1hNmY0LTRhNmY4NjgzMjY1Yy8xLzYteVFNTWNLUFVH
UzFad28zTWpWUjJsRFFMTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAS4jtAMEAy4juDAMAwQAXZjxAwQB
XZj0AwQAX56ZAwQCX564MA0GCSqGSIb3DQEBCwUAA4IBAQA/ZBQKcuGSN8Yw55+J
uzSS6IyI7kMvSHKvFpSMAgD2M1D/Ml16jvwbCEhB7DYStBep66mNCYTqh8DAv/VT
AI7wNZlVsGvyrWT0HRxrQaEXcwIbbZtISQAxQVPlfd3XSOraS7gEAmPTEdkL9gIF
+CeiQ6o2Kyo135zyzn0CXCwvgiW5VgcoMRL7rb2ath3EhMUjGhrTDuHr58gansNZ
QMPPdiyrM5stPWkNsgbIU2tGG9/AqTca2+AYRTqdK6DAIAnSVAYPO/mNZoISlDcm
PgRipYzteUx8okxlD9+Lpe814JhFIJTp6BbJcDl/gFsVo7+m8CpHDQFWXS9dZQql
9P0D
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-ams.rpki-client.org