Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/BTvwmRZPhoeqj3EzlIUUeqLX4OM.roa
File: BTvwmRZPhoeqj3EzlIUUeqLX4OM.roa (raw, json)
Hash identifier: Pxt2BHKPS5tiXlNfD1QzwusIViaI5lyRsNVLh3tqpiw=
Subject key identifier: 05:3B:F0:99:16:4F:86:87:AA:8F:71:33:94:85:14:7A:A2:D7:E0:E3
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0184AA4F90158F758250F125FF63B73B292D
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/BTvwmRZPhoeqj3EzlIUUeqLX4OM.roa
Signing time: Thu 24 Nov 2022 15:44:11 +0000
ROA not before: Thu 24 Nov 2022 15:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31515
IP address blocks: 161.30.33.0/24 maxlen: 24
161.30.40.0/23 maxlen: 23
161.30.5.0/24 maxlen: 24
161.30.7.0/24 maxlen: 24
161.30.12.0/22 maxlen: 22
161.30.16.0/22 maxlen: 22
161.30.22.0/23 maxlen: 23
161.30.237.0/24 maxlen: 24
161.30.238.0/24 maxlen: 24
161.30.236.0/22 maxlen: 24
2a11:ae00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:4f:90:15:8f:75:82:50:f1:25:ff:63:b7:3b:29:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Nov 24 15:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=053bf099164f8687aa8f71339485147aa2d7e0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:03:28:25:f5:f1:e8:e9:e3:cb:a8:ab:51:
96:b0:0d:9c:80:e3:49:69:a7:0f:40:06:78:2d:ae:
63:c7:0f:7f:26:f2:c9:a6:e1:fe:5b:15:87:93:cc:
b2:df:b0:01:e1:74:a3:da:cb:87:3b:4a:38:97:4c:
97:43:6b:0c:28:92:11:17:26:58:37:e1:d8:ec:b0:
b2:cf:fb:9a:7a:bf:81:cc:76:02:3c:00:21:5d:11:
54:69:b3:4d:a6:64:8e:5a:a1:b5:03:3a:5b:7f:2d:
de:c6:ca:dd:29:d7:b6:54:00:60:39:db:cf:90:24:
60:de:81:a9:56:38:5c:c6:ca:8d:14:0f:a1:40:8b:
b1:9c:aa:39:f8:19:e8:7d:aa:80:84:34:0b:01:2e:
fd:76:93:1b:7b:70:6f:d4:1e:57:c3:90:50:2e:13:
9e:f3:ba:c5:fb:fa:05:b9:4b:2f:88:c1:3f:8d:da:
ea:3f:dd:46:cf:e7:4b:2f:ec:c9:ac:6d:07:59:72:
5d:32:02:45:4b:9b:cc:a9:f6:2f:54:5b:b4:e3:e3:
36:02:44:52:1c:9c:40:36:00:44:d0:14:36:f8:69:
9a:21:0a:46:be:e1:5c:f2:22:1a:16:49:e0:d3:a4:
ad:e1:52:41:ec:f6:7a:6e:e6:ac:19:56:1d:65:35:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:F0:99:16:4F:86:87:AA:8F:71:33:94:85:14:7A:A2:D7:E0:E3
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/BTvwmRZPhoeqj3EzlIUUeqLX4OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.30.5.0/24
161.30.7.0/24
161.30.12.0-161.30.19.255
161.30.22.0/23
161.30.33.0/24
161.30.40.0/23
161.30.236.0/22
IPv6:
2a11:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
05:c0:70:51:08:f5:29:26:16:8b:e6:2e:a8:8c:c4:60:be:75:
92:16:e0:c7:23:e8:8e:2f:a6:d8:f9:a9:be:49:79:d6:39:34:
74:f2:53:17:03:8b:ff:22:dd:c7:fe:29:05:48:69:18:9c:ca:
41:f7:c8:a8:3e:cd:50:15:13:af:7b:1d:3f:8d:6c:31:8f:8d:
58:dc:c0:1e:7a:67:ad:44:7c:49:89:37:f8:b6:6b:37:c4:01:
2d:d1:93:45:96:d7:4f:ee:26:58:39:5f:13:77:b5:8c:ce:9f:
30:d9:58:a3:b6:fe:fc:17:5e:71:94:f0:08:8d:86:1f:d8:57:
d1:8e:61:3e:81:19:6e:4a:35:74:e6:69:88:25:54:1a:17:df:
2e:d7:e2:dc:7d:36:ed:64:4b:68:9c:a8:64:f0:bf:bb:9d:43:
53:bf:1e:d4:5c:ed:5f:ba:26:33:42:79:9f:b8:f5:05:e9:a8:
4f:ee:7e:4c:a9:6d:74:6a:b9:a8:18:2e:f3:03:6e:09:02:0b:
b9:3b:37:0a:0b:ee:81:f9:68:b7:2a:67:bc:0c:e5:6b:aa:fd:
f1:70:ab:9e:9a:26:d7:00:3f:c4:a9:df:9e:73:53:eb:ce:b1:
43:84:b7:0b:67:7c:b9:3c:6b:13:49:2b:25:94:bf:a3:50:dd:
15:54:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org