Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/t3CO14Va8j1MDAUUZ1KhWFc6kWY.roa
File: t3CO14Va8j1MDAUUZ1KhWFc6kWY.roa (raw, json)
Hash identifier: sc7UPu8Jmf6KjuCY3ORJD1G6Q5WG3UxrZih8d50IhXs=
Subject key identifier: B7:70:8E:D7:85:5A:F2:3D:4C:0C:05:14:67:52:A1:58:57:3A:91:66
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 01964F45
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/t3CO14Va8j1MDAUUZ1KhWFc6kWY.roa
Signing time: Thu 03 Feb 2022 13:49:21 +0000
ROA not before: Thu 03 Feb 2022 13:49:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31515
IP address blocks: 161.30.238.0/24 maxlen: 24
161.30.236.0/22 maxlen: 24
2a11:ae00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26627909 (0x1964f45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Feb 3 13:49:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7708ed7855af23d4c0c05146752a158573a9166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:5a:7d:58:78:48:18:f8:4c:25:b7:7e:3c:
4a:cf:76:d5:57:5b:6c:81:0d:5d:ee:ab:55:ad:46:
0d:e1:bf:08:8a:74:c2:29:c8:d9:ee:25:ac:e9:59:
9e:92:57:83:2d:52:92:da:fa:2f:ea:02:78:bc:eb:
13:23:6d:db:21:79:95:c1:0e:b0:c0:91:ad:ce:40:
80:7d:67:5b:a7:e7:ea:3b:88:23:61:40:0c:db:9d:
3c:fd:0a:f8:3c:a0:4d:f7:1d:81:04:a1:f5:ef:5c:
81:92:a5:14:be:a0:c0:64:2f:da:3f:79:22:ac:93:
42:28:dc:ec:91:84:c4:b5:36:e0:21:c8:46:21:2d:
5f:30:ba:a2:91:f6:96:9b:3b:5e:34:96:a6:f0:fe:
a5:9e:6d:dd:35:57:c1:90:73:2d:c3:de:42:f2:3b:
e8:d6:10:e1:46:77:48:c7:35:5b:12:6f:57:6c:94:
5a:89:9b:13:db:fc:c7:76:27:4b:2f:38:e5:1a:9e:
b3:bb:b2:27:96:32:0d:58:8e:d2:61:0d:91:dc:2b:
25:bb:13:e7:7d:5e:aa:ea:95:b8:46:a1:e7:6a:b5:
72:fc:45:43:51:7b:3f:1f:77:a3:34:0a:4b:07:28:
51:21:81:18:a8:44:d4:46:c8:48:89:67:7b:cf:35:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:70:8E:D7:85:5A:F2:3D:4C:0C:05:14:67:52:A1:58:57:3A:91:66
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/t3CO14Va8j1MDAUUZ1KhWFc6kWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.30.236.0/22
IPv6:
2a11:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
4b:ee:f0:8e:83:29:73:89:b8:7c:db:06:0b:80:83:e6:52:80:
f0:f6:95:81:ee:40:c1:6f:89:a2:bf:0e:5f:f5:0c:a9:ab:12:
42:7b:85:eb:aa:82:50:51:86:44:3c:12:4a:be:1c:65:8b:fa:
8e:7b:fd:d8:13:2f:6a:b0:d4:f6:ea:c4:5c:c7:1c:c0:0c:81:
e1:62:3f:5c:cb:8f:b5:42:3a:bf:d0:07:26:39:9a:68:4e:9c:
b6:81:5a:21:5c:52:fe:a9:73:dd:23:a1:af:fa:c4:ea:9a:9e:
1f:dc:1c:8e:ab:88:60:b4:63:00:95:5c:ab:9f:63:4b:ad:2c:
32:01:b5:7b:5d:be:65:13:04:04:57:18:50:26:76:e4:c6:d0:
79:54:8b:89:ce:76:e0:de:0b:49:5d:a6:83:72:7e:c5:0d:bd:
dc:3c:c6:20:11:2a:a5:07:83:02:2e:0e:92:87:93:e5:86:b3:
11:e3:31:e3:3a:90:62:e6:58:64:a6:e8:12:d4:ef:20:58:52:
14:12:ef:1f:d3:4f:ff:5c:56:95:b6:2d:6a:48:6f:d4:5e:d1:
aa:f0:35:02:05:f8:0a:d9:3d:42:c4:b4:a9:f5:96:0a:3b:e4:
fc:c7:0b:23:80:55:bc:ad:5f:ce:6a:a1:b3:ac:5f:c5:f4:41:
9b:e7:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org