Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/DX5IEaKxWjqAFdlJYx6W2CHU-H8.roa
File: DX5IEaKxWjqAFdlJYx6W2CHU-H8.roa (raw, json)
Hash identifier: 3UiMu9DDQU2nLTyd0SSRWAkQVytoJWagXbB82Mnz7aM=
Subject key identifier: 0D:7E:48:11:A2:B1:5A:3A:80:15:D9:49:63:1E:96:D8:21:D4:F8:7F
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 012C458B
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/DX5IEaKxWjqAFdlJYx6W2CHU-H8.roa
Signing time: Sat 01 Jan 2022 06:52:28 +0000
ROA not before: Sat 01 Jan 2022 06:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31543
IP address blocks: 176.121.56.0/22 maxlen: 24
176.104.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19678603 (0x12c458b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Jan 1 06:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d7e4811a2b15a3a8015d949631e96d821d4f87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:b0:ea:10:84:b4:d6:97:46:6f:76:08:1b:
fa:cf:e9:f1:28:4a:e4:a7:44:40:42:35:5e:f6:4d:
80:c8:ec:f9:a9:f0:9a:f4:4c:9f:fb:51:90:cc:1a:
5b:57:5b:a4:71:e0:4b:95:b6:ba:32:eb:c0:bb:5d:
d3:31:f8:fd:ed:5c:cf:ad:91:0f:26:2a:be:62:7d:
d6:eb:8d:40:1e:4c:d8:24:1e:8d:ef:81:31:97:7b:
f8:a7:ac:49:88:17:f7:33:7c:e6:25:f5:3c:43:1b:
1c:90:00:89:01:52:c6:0b:7a:d2:72:e7:ba:14:31:
e0:56:95:6c:8b:81:98:c0:8e:37:b2:59:04:de:66:
a8:fc:b3:02:12:1d:6a:97:f8:b5:f2:67:65:75:fd:
94:e4:4f:c4:35:9c:94:62:c5:1b:cf:50:64:ce:e3:
f6:5d:8d:fe:28:c4:eb:0b:b3:43:b5:df:57:a5:08:
7b:51:40:ab:b8:0a:83:59:97:e0:26:4c:73:f5:5e:
4e:43:96:61:85:74:60:d2:62:c1:64:31:f5:4b:b0:
51:ec:c1:ad:9e:07:eb:13:63:24:b2:da:c7:b5:b4:
0f:94:c4:91:80:0b:b2:dc:2a:07:3d:0f:b2:12:e1:
8c:00:95:ea:95:d1:80:39:75:5d:be:09:20:0a:35:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7E:48:11:A2:B1:5A:3A:80:15:D9:49:63:1E:96:D8:21:D4:F8:7F
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/DX5IEaKxWjqAFdlJYx6W2CHU-H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.104.224.0/20
176.121.56.0/22
Signature Algorithm: sha256WithRSAEncryption
13:57:d2:70:e6:97:c7:c1:36:1c:61:c2:5c:23:2c:e2:7e:e4:
4f:ee:f5:b7:d1:93:19:e9:b8:f9:ca:a7:54:bc:79:fd:b8:21:
5e:ca:f1:63:fe:48:4a:3f:0f:41:1e:18:df:25:20:e4:7d:45:
ef:e8:1e:49:ca:1e:78:a6:15:8f:cc:0f:82:84:95:ce:3a:0d:
cd:3c:65:cc:99:5a:90:6a:43:ee:a1:4c:c3:27:8a:cd:a9:29:
25:72:3b:93:5b:ea:a9:2e:cf:84:45:2b:fb:21:57:54:03:2e:
d4:a1:c9:7d:ef:1e:d2:55:90:de:22:52:f7:09:c1:6c:0d:9d:
00:3d:bc:63:07:9b:03:68:d7:a5:3e:7f:ba:f9:2e:18:ec:04:
aa:55:20:8d:cf:39:33:83:cb:d1:8a:f1:bd:85:3c:cc:af:89:
aa:21:9e:5e:2b:22:9f:7c:ed:86:4c:32:4a:51:4f:0b:18:ee:
b2:d1:c2:83:b7:fb:bb:9e:60:46:2e:1f:97:79:22:84:e2:a8:
72:e9:a0:c3:f2:dd:7f:83:35:69:34:12:80:47:ea:ac:e8:ac:
2b:ed:d2:2f:78:9c:41:61:7f:93:af:65:e3:c2:f0:c2:b4:4e:
b2:2e:9b:8a:db:b0:c8:9e:d7:4a:89:44:68:61:9a:9b:73:59:
ea:53:e7:0d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEASxFizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NWRjZGUyMTI1ZjA0MDU4YWQ0ZjQ3OGUxNzg4ODQxNDJjZjJkYWQwMB4XDTIyMDEw
MTA2NTIyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQ3ZTQ4MTFhMmIx
NWEzYTgwMTVkOTQ5NjMxZTk2ZDgyMWQ0Zjg3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMVKsOoQhLTWl0Zvdggb+s/p8ShK5KdEQEI1XvZNgMjs+anw
mvRMn/tRkMwaW1dbpHHgS5W2ujLrwLtd0zH4/e1cz62RDyYqvmJ91uuNQB5M2CQe
je+BMZd7+KesSYgX9zN85iX1PEMbHJAAiQFSxgt60nLnuhQx4FaVbIuBmMCON7JZ
BN5mqPyzAhIdapf4tfJnZXX9lORPxDWclGLFG89QZM7j9l2N/ijE6wuzQ7XfV6UI
e1FAq7gKg1mX4CZMc/VeTkOWYYV0YNJiwWQx9UuwUezBrZ4H6xNjJLLax7W0D5TE
kYALstwqBz0PshLhjACV6pXRgDl1Xb4JIAo1njECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQNfkgRorFaOoAV2UljHpbYIdT4fzAfBgNVHSMEGDAWgBTV3N4hJfBAWK1P
R44XiIQULPLa0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFkemVJU1h3UUZpdFQwZU9GNGlFRkN6eTJ0QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjcvNTkxNWM4LTAwM2MtNGQ5OC04MjQzLWNmZGFkYmRjNDhlYy8x
L0RYNUlFYUt4V2pxQUZkbEpZeDZXMkNIVS1IOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcv
NTkxNWM4LTAwM2MtNGQ5OC04MjQzLWNmZGFkYmRjNDhlYy8xLzFkemVJU1h3UUZp
dFQwZU9GNGlFRkN6eTJ0QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBLBo4AMEArB5ODANBgkqhkiG9w0B
AQsFAAOCAQEAE1fScOaXx8E2HGHCXCMs4n7kT+71t9GTGem4+cqnVLx5/bghXsrx
Y/5ISj8PQR4Y3yUg5H1F7+geScoeeKYVj8wPgoSVzjoNzTxlzJlakGpD7qFMwyeK
zakpJXI7k1vqqS7PhEUr+yFXVAMu1KHJfe8e0lWQ3iJS9wnBbA2dAD28YwebA2jX
pT5/uvkuGOwEqlUgjc85M4PL0YrxvYU8zK+JqiGeXisin3zthkwySlFPCxjustHC
g7f7u55gRi4fl3kihOKocumgw/Ldf4M1aTQSgEfqrOisK+3SL3icQWF/k69l48Lw
wrROsi6bituwyJ7XSolEaGGam3NZ6lPnDQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:10 2024 by rpki-client on console-ams.rpki-client.org