Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/ath00eE4SFR4zkc4DvxhrTDMcOA.roa
File: ath00eE4SFR4zkc4DvxhrTDMcOA.roa (raw, json)
Hash identifier: Y6JDOCos67W/EOi2dQiBqjygUX1xzCqD6vnv/h49TWc=
Subject key identifier: 6A:D8:74:D1:E1:38:48:54:78:CE:47:38:0E:FC:61:AD:30:CC:70:E0
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 0182C97E5DBEAD371DFF436C83539ADE59A8
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/ath00eE4SFR4zkc4DvxhrTDMcOA.roa
Signing time: Tue 23 Aug 2022 06:57:57 +0000
ROA not before: Tue 23 Aug 2022 06:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35394
IP address blocks: 185.220.44.0/22 maxlen: 22
185.196.56.0/22 maxlen: 22
185.186.28.0/22 maxlen: 22
185.172.168.0/22 maxlen: 22
185.236.168.0/22 maxlen: 22
185.93.152.0/22 maxlen: 22
193.27.246.0/23 maxlen: 23
193.27.248.0/23 maxlen: 23
185.245.176.0/24 maxlen: 24
185.245.176.0/22 maxlen: 22
80.67.44.0/22 maxlen: 22
185.245.177.0/24 maxlen: 24
185.245.178.0/24 maxlen: 24
185.245.179.0/24 maxlen: 24
213.217.24.0/22 maxlen: 22
185.79.36.0/22 maxlen: 22
45.85.136.0/22 maxlen: 22
185.72.44.0/22 maxlen: 22
185.143.96.0/22 maxlen: 22
185.240.232.0/22 maxlen: 22
130.185.88.0/21 maxlen: 21
193.161.220.0/22 maxlen: 22
194.61.16.0/22 maxlen: 22
185.93.44.0/22 maxlen: 22
185.217.204.0/22 maxlen: 22
2a03:3d60::/29 maxlen: 29
2a0c:8f80::/29 maxlen: 29
2a09:5000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:7e:5d:be:ad:37:1d:ff:43:6c:83:53:9a:de:59:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Aug 23 06:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ad874d1e138485478ce47380efc61ad30cc70e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:c2:d9:84:62:67:61:cb:f4:f2:6d:2f:31:
6b:0d:dc:56:08:28:0c:83:3f:f5:ee:da:3c:21:ac:
2b:fe:06:a1:3d:5d:90:2d:2d:53:ee:a3:51:c0:93:
95:25:93:aa:8e:ba:0c:f9:41:6f:f6:68:e9:93:b4:
dc:ac:97:46:82:c4:f4:d6:4c:e9:a5:3e:b7:89:5d:
95:a4:21:77:55:b7:00:68:91:8a:2e:c2:70:e7:35:
28:6c:66:4b:e7:49:b2:c3:42:23:7d:5a:69:3b:85:
0f:9e:11:78:00:41:0c:44:19:32:c7:0a:62:3d:63:
ea:8a:8f:63:0c:b1:c6:e5:8b:3b:2c:c9:95:7e:a1:
0a:5a:b8:c4:0d:e1:31:8d:04:1d:33:a5:57:69:39:
47:d0:ec:4e:fb:5f:57:57:0c:66:77:79:33:e9:db:
a1:99:94:3b:cd:33:f8:7b:8d:2c:19:cb:41:f9:5f:
b4:56:83:ef:0c:18:38:83:af:dd:52:07:f2:30:a7:
a0:f1:68:cc:f6:16:71:60:1a:2c:af:41:d8:12:a0:
7a:b1:90:cb:2b:1b:d5:02:ce:ab:19:29:63:96:10:
79:e3:58:94:ad:75:c5:c3:ce:9a:cb:b3:c3:33:85:
a8:f6:29:e0:7b:1f:83:73:75:22:01:28:6b:43:f2:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D8:74:D1:E1:38:48:54:78:CE:47:38:0E:FC:61:AD:30:CC:70:E0
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/ath00eE4SFR4zkc4DvxhrTDMcOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.136.0/22
80.67.44.0/22
130.185.88.0/21
185.72.44.0/22
185.79.36.0/22
185.93.44.0/22
185.93.152.0/22
185.143.96.0/22
185.172.168.0/22
185.186.28.0/22
185.196.56.0/22
185.217.204.0/22
185.220.44.0/22
185.236.168.0/22
185.240.232.0/22
185.245.176.0/22
193.27.246.0-193.27.249.255
193.161.220.0/22
194.61.16.0/22
213.217.24.0/22
IPv6:
2a03:3d60::/29
2a09:5000::/29
2a0c:8f80::/29
Signature Algorithm: sha256WithRSAEncryption
83:f7:69:f8:d9:80:b8:3a:cc:36:07:c6:77:08:0d:8c:9f:07:
89:9b:46:bd:6d:1f:68:c1:f0:7c:a1:45:45:47:32:43:26:4c:
dc:85:a2:04:92:b1:43:ea:ee:a2:f6:19:d2:9c:6e:52:ed:08:
17:9b:f6:d5:a2:da:44:4d:47:c9:a0:f0:42:c0:d9:50:55:2e:
d6:aa:d4:c0:ad:4e:df:60:a4:b7:f4:fc:b7:cd:15:f8:a4:25:
9b:4e:ae:73:38:26:b9:9b:23:85:9a:76:88:f2:91:f7:f7:18:
f5:e8:a0:9b:c6:81:64:40:3f:3c:49:b7:50:79:a4:c9:70:31:
39:ad:c5:bd:37:b7:f5:f8:61:9d:c6:e3:22:6b:dd:eb:fb:02:
55:0b:e0:4e:2d:08:8a:d8:c0:54:30:88:fc:94:5c:5e:c4:7c:
d1:30:17:05:42:42:fc:4b:36:85:cf:c3:67:16:f6:ed:72:ce:
34:de:ea:92:e9:fc:05:b4:74:2a:e9:d5:d1:e6:72:39:9a:62:
4f:d2:2f:de:c4:ea:58:dd:aa:20:3e:d7:2e:79:ba:6b:a7:f4:
67:f4:a6:ff:a4:94:20:06:83:c5:e0:bd:05:82:13:56:be:b5:
5a:c0:2e:1a:59:f4:ad:a1:39:0b:fd:09:1f:31:99:8e:74:74:
35:ac:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:32 2024 by rpki-client on console-ams.rpki-client.org