Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/dlbdv_zRnMRBqsXNsuESjuW3qns.roa
File: dlbdv_zRnMRBqsXNsuESjuW3qns.roa (raw, json)
Hash identifier: vGJyMngbPl6MPSmHur5qvBl6/iBczZDcO5a1/MeyL/s=
Subject key identifier: 76:56:DD:BF:FC:D1:9C:C4:41:AA:C5:CD:B2:E1:12:8E:E5:B7:AA:7B
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 018530231E058E245576A1F9DFDDF0C0D88E
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/dlbdv_zRnMRBqsXNsuESjuW3qns.roa
Signing time: Tue 20 Dec 2022 15:24:45 +0000
ROA not before: Tue 20 Dec 2022 15:24:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34947
IP address blocks: 45.89.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:23:1e:05:8e:24:55:76:a1:f9:df:dd:f0:c0:d8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Dec 20 15:24:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7656ddbffcd19cc441aac5cdb2e1128ee5b7aa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:52:db:d5:82:50:78:f1:d6:e0:ae:01:73:
ae:ed:e3:74:0a:44:86:fa:1d:0f:b2:06:16:38:66:
8b:b0:b5:d4:40:a7:dc:07:cb:9c:5d:3d:fb:12:9d:
8a:11:77:0a:fc:e6:a8:a0:69:01:68:1c:d4:a7:66:
8f:15:60:2d:98:15:cb:65:ca:5f:2b:4c:6d:cd:ab:
f6:7e:50:81:eb:d8:ed:17:84:35:ff:8a:ad:8f:ac:
8f:f5:28:f7:a6:11:03:9a:e6:d4:c8:1f:f8:da:04:
dc:53:2e:f1:44:e1:55:48:ea:94:e6:c1:48:eb:bb:
7d:47:e9:17:cf:02:77:c8:16:10:9c:aa:a0:7e:8d:
19:50:41:bd:17:b2:a9:0b:0a:0a:02:85:dc:c4:d6:
c9:12:11:4b:e6:3c:59:e1:ef:3a:e2:03:ec:93:e4:
25:b8:99:8a:bc:eb:e9:80:43:52:11:30:1a:8d:58:
7d:6d:4d:98:a3:9e:41:65:3f:4e:8e:c2:f4:3e:49:
1b:71:c7:f3:8d:cf:98:ef:17:80:26:a9:e5:78:b8:
35:24:f0:0a:60:ff:65:f8:23:89:da:24:88:e0:a4:
57:09:41:8e:7f:c5:f6:11:8c:d0:94:c9:c9:58:1c:
5e:bd:2e:43:f2:f9:7d:fb:00:bc:44:52:3a:6f:55:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:56:DD:BF:FC:D1:9C:C4:41:AA:C5:CD:B2:E1:12:8E:E5:B7:AA:7B
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/dlbdv_zRnMRBqsXNsuESjuW3qns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:cc:b3:88:8d:82:7b:0b:3f:09:17:58:32:e1:89:a5:6c:0f:
c3:ad:bf:0e:0b:0d:87:74:f0:e0:a2:70:ab:44:f8:97:79:65:
a4:4b:e7:35:01:3c:ce:47:72:45:67:ab:c5:9d:be:91:16:57:
e0:38:4a:65:7e:cc:97:6c:29:68:d2:d4:dd:47:05:9f:f6:8a:
98:2d:8e:32:a6:9f:9b:ba:b3:95:3c:eb:1a:57:2e:1f:6d:05:
a9:6f:ca:8f:f2:1f:87:2e:47:e5:a2:aa:ec:15:30:60:90:3d:
b3:7c:52:d6:45:00:b5:be:bb:5f:8e:eb:5d:df:df:3f:b8:aa:
40:fe:ce:96:0d:d3:3a:a9:e7:96:0b:fa:0d:11:1d:46:f2:2c:
1c:fd:28:e3:57:67:b0:2c:e3:bd:76:dc:c9:dc:0f:08:c3:f5:
9b:42:15:84:d9:a7:79:f1:a7:73:35:2f:66:4b:b6:88:5b:93:
c1:e1:7d:48:5f:2e:b6:c4:d2:8a:82:02:2e:f5:ac:52:34:88:
ee:17:0b:5b:2c:38:c3:b2:ea:96:39:34:f6:79:a0:1b:f4:c0:
12:16:40:04:9b:76:10:33:23:2d:32:bf:90:f2:0b:0d:07:97:
5a:58:93:06:48:0d:39:c3:1d:4d:cf:4b:5d:d5:47:9e:5f:87:
0f:ac:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:43 2025 by rpki-client