Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/DjCDlo61XQYKo3r-a4dflgAZLOA.roa
File: DjCDlo61XQYKo3r-a4dflgAZLOA.roa (raw, json)
Hash identifier: Oviftxs+tm2unsNxPa1PY6RdUd3iogBb0wvsbg7ZhxQ=
Subject key identifier: 0E:30:83:96:8E:B5:5D:06:0A:A3:7A:FE:6B:87:5F:96:00:19:2C:E0
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 039E6BDD
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/DjCDlo61XQYKo3r-a4dflgAZLOA.roa
Signing time: Mon 25 Apr 2022 12:45:04 +0000
ROA not before: Mon 25 Apr 2022 12:45:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.85.204.0/22 maxlen: 22
45.134.92.0/22 maxlen: 22
45.90.48.0/22 maxlen: 22
45.131.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60713949 (0x39e6bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Apr 25 12:45:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e3083968eb55d060aa37afe6b875f9600192ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:ce:9d:77:98:aa:7b:1d:da:17:9e:d8:f5:
1f:96:8f:fa:1f:d6:67:0e:6d:b1:7d:09:d4:16:03:
06:a6:60:7e:aa:db:d4:da:ab:ba:99:c9:7a:11:09:
94:b7:e7:7b:82:ee:0f:2a:48:1c:a5:54:6e:4d:8c:
dc:2e:9b:75:98:51:ad:39:d8:fe:2b:90:89:28:b3:
d4:33:94:79:d3:aa:41:c2:5f:5c:f9:1d:17:0c:e5:
52:5a:c8:c3:64:14:80:dd:1c:4e:9d:38:9c:a6:bb:
18:60:9f:c3:ff:f3:c1:9b:b6:9b:f4:6b:d5:a0:a6:
92:60:9d:e6:34:59:74:c4:9d:2e:c4:78:ed:cb:79:
d3:f4:db:13:ec:81:26:22:b9:15:07:39:59:d3:a7:
f7:17:c6:81:ab:2c:1f:5a:8a:b4:32:c6:90:3e:f5:
a3:b2:6f:67:fd:53:fe:bf:da:fb:29:c4:db:e1:7c:
e2:2d:35:92:38:c4:bc:96:c6:36:e1:3c:c3:c9:d0:
af:bf:8f:0d:dc:02:29:71:26:38:8a:c8:d0:12:21:
51:47:6f:9a:11:bc:03:6a:fd:9c:68:13:db:21:76:
65:ca:60:a6:18:24:8d:04:25:d8:c6:f5:b5:68:1c:
50:a4:73:c2:02:ad:80:7a:7f:ee:2b:23:88:d2:56:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:30:83:96:8E:B5:5D:06:0A:A3:7A:FE:6B:87:5F:96:00:19:2C:E0
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/DjCDlo61XQYKo3r-a4dflgAZLOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
45.90.48.0/22
45.131.12.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
28:c7:03:72:b2:5f:eb:5d:e0:ff:23:fc:ae:a9:5d:f7:55:c1:
f4:6d:6f:5b:c7:70:53:7e:37:c0:b8:cb:b5:48:24:01:e4:60:
de:48:68:1b:c2:05:ee:ce:19:02:ef:93:8d:ee:2f:da:42:1a:
70:1a:67:d3:cc:f5:18:11:98:14:0a:ee:c1:7e:8c:87:0b:64:
de:a3:5e:97:a1:c2:2f:6e:bd:cd:ad:21:eb:cb:34:84:fe:e4:
b9:e3:e8:d1:3f:d8:02:82:d9:e4:9b:c9:d9:0c:04:3e:e5:d5:
01:de:1c:ad:30:e0:a8:72:97:52:13:b8:df:f5:27:29:00:31:
a6:d3:3a:92:cf:52:c8:28:ec:81:bf:31:ac:ec:4c:d4:6b:bb:
38:c3:e1:a9:98:55:b2:be:1f:c2:b5:c5:59:2a:ad:80:52:b5:
36:79:a6:e1:e1:df:86:32:f7:2f:e3:8b:ee:d7:9a:a2:1e:f0:
89:ad:f3:06:61:ec:27:6e:23:0d:16:f7:8b:2e:d4:ff:fa:f7:
be:18:e3:a1:42:57:50:3d:84:88:18:aa:e7:8f:d4:31:a2:e7:
f3:f3:32:40:bd:ba:6c:2f:ef:ee:b8:d8:01:b5:7c:7a:0b:0e:
5b:e8:93:9b:b1:58:96:00:fd:87:1b:0e:e7:5c:fb:f4:61:91:
71:bb:54:b6
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEA55r3TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NzA0ODNkM2Q2MmYxOWMwODM1NzQ2ZGNiNzIxYzg4MzJjM2I3OTI2MB4XDTIyMDQy
NTEyNDUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGUzMDgzOTY4ZWI1
NWQwNjBhYTM3YWZlNmI4NzVmOTYwMDE5MmNlMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMAFzp13mKp7HdoXntj1H5aP+h/WZw5tsX0J1BYDBqZgfqrb
1NqrupnJehEJlLfne4LuDypIHKVUbk2M3C6bdZhRrTnY/iuQiSiz1DOUedOqQcJf
XPkdFwzlUlrIw2QUgN0cTp04nKa7GGCfw//zwZu2m/Rr1aCmkmCd5jRZdMSdLsR4
7ct50/TbE+yBJiK5FQc5WdOn9xfGgassH1qKtDLGkD71o7JvZ/1T/r/a+ynE2+F8
4i01kjjEvJbGNuE8w8nQr7+PDdwCKXEmOIrI0BIhUUdvmhG8A2r9nGgT2yF2Zcpg
phgkjQQl2Mb1tWgcUKRzwgKtgHp/7isjiNJWVIMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQOMIOWjrVdBgqjev5rh1+WABks4DAfBgNVHSMEGDAWgBQHBIPT1i8ZwINX
Rty3IciDLDt5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0J3U0QwOVl2R2NDRFYwYmN0eUhJZ3l3N2VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTkvNjQ1MWMxLTJiY2QtNDQ2My1hNzAwLWQ0NDJjNGY5ZTliZC8x
L0RqQ0RsbzYxWFFZS28zci1hNGRmbGdBWkxPQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkv
NjQ1MWMxLTJiY2QtNDQ2My1hNzAwLWQ0NDJjNGY5ZTliZC8xL0J3U0QwOVl2R2ND
RFYwYmN0eUhJZ3l3N2VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAi1VzAMEAi1aMAMEAi2DDAMEAi2G
XDANBgkqhkiG9w0BAQsFAAOCAQEAKMcDcrJf613g/yP8rqld91XB9G1vW8dwU343
wLjLtUgkAeRg3khoG8IF7s4ZAu+Tje4v2kIacBpn08z1GBGYFAruwX6Mhwtk3qNe
l6HCL269za0h68s0hP7kuePo0T/YAoLZ5JvJ2QwEPuXVAd4crTDgqHKXUhO43/Un
KQAxptM6ks9SyCjsgb8xrOxM1Gu7OMPhqZhVsr4fwrXFWSqtgFK1Nnmm4eHfhjL3
L+OL7teaoh7wia3zBmHsJ24jDRb3iy7U//r3vhjjoUJXUD2EiBiq54/UMaLn8/My
QL26bC/v7rjYAbV8egsOW+iTm7FYlgD9hxsO51z79GGRcbtUtg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:00 2024 by rpki-client on console-ams.rpki-client.org