Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/dKmmIAcCwABBOc56F1KYRzwUdnA.roa
File: dKmmIAcCwABBOc56F1KYRzwUdnA.roa (raw, json)
Hash identifier: DxlgYQWr+AUIiWgpcbAKwznUEQcgABCE2fWbjg3FjTE=
Subject key identifier: 74:A9:A6:20:07:02:C0:00:41:39:CE:7A:17:52:98:47:3C:14:76:70
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 033DF839
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/dKmmIAcCwABBOc56F1KYRzwUdnA.roa
Signing time: Sat 01 Jan 2022 00:57:57 +0000
ROA not before: Sat 01 Jan 2022 00:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49612
IP address blocks: 45.140.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54392889 (0x33df839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 00:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74a9a6200702c0004139ce7a175298473c147670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:1e:38:74:62:fc:c8:31:43:90:b4:94:08:
bc:2d:da:d8:ac:a1:f5:17:29:ec:0d:b4:fe:a3:0b:
e0:db:e1:d5:4f:35:4f:81:4f:0a:7f:97:d1:95:89:
17:9e:5c:f8:1f:86:ea:37:59:50:c3:30:d6:c2:90:
ac:a6:1f:9d:ad:ec:bb:40:31:1f:36:9e:db:77:cf:
d7:2a:90:9d:7f:35:ea:ae:00:40:65:e2:b5:bf:48:
63:6f:d2:ca:5f:72:c4:87:34:11:4f:6a:87:56:9d:
a6:a2:1c:13:82:43:25:63:70:df:19:2d:3b:f6:96:
ed:12:b4:0b:aa:74:29:24:d4:91:81:37:e3:ec:cc:
00:40:01:8d:f0:89:c0:e3:42:5d:a6:09:7c:51:05:
f5:b5:18:2d:ab:cc:71:c8:e6:de:38:7a:00:04:0c:
29:d3:05:18:5c:ea:2c:6a:1b:ff:9e:70:49:ec:44:
4e:2d:b7:e9:bd:21:3a:91:01:cf:0e:b8:73:e6:7b:
19:c0:6e:a1:86:30:7c:b1:87:52:d7:d1:0c:8c:78:
3f:50:a4:92:e9:8d:3f:bd:e2:da:5d:c6:4f:5c:31:
71:38:7f:e6:9d:67:26:ec:89:b2:3b:3b:42:f6:a3:
07:8a:40:a3:ae:6f:7d:fd:2b:bd:75:bf:cb:68:ae:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:A6:20:07:02:C0:00:41:39:CE:7A:17:52:98:47:3C:14:76:70
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/dKmmIAcCwABBOc56F1KYRzwUdnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:16:78:a4:e7:68:27:4e:2e:bc:34:98:09:60:09:43:3b:23:
59:74:d7:cc:58:df:ae:c5:e6:67:f3:cb:f5:43:f8:8f:4e:d3:
e6:7c:2c:2c:2e:24:ab:06:5a:94:20:54:96:0e:d8:e2:80:8f:
0b:11:cf:85:e7:66:6f:64:61:31:f0:25:59:80:06:41:bd:e5:
dd:8f:ea:c8:d2:07:c1:17:58:b8:57:34:6f:d3:18:f1:63:c4:
f6:4e:99:b7:3d:bb:7b:e6:7c:a7:67:e6:b1:3e:74:c1:af:f6:
11:22:ff:8e:0a:83:f7:07:3a:2d:5b:85:79:cf:92:ae:a3:b2:
1f:3d:70:ca:f5:41:c9:5c:88:f9:27:d4:f0:f7:35:36:f8:df:
48:db:52:8f:51:ed:84:84:20:77:89:41:77:bc:05:77:15:67:
26:85:2e:e7:b2:5d:22:f6:cb:e2:ee:a7:41:09:76:72:7f:e7:
fc:2e:9a:fc:2e:5c:3c:d2:12:29:ee:f6:88:d5:b8:a6:5a:19:
38:d3:d7:24:5e:52:ef:df:4b:4b:bf:a1:7f:bf:9b:42:6b:b4:
a1:6a:a1:b2:fd:0c:e7:f6:10:01:87:a4:d4:16:2c:14:b8:34:
1a:35:38:3f:c0:c7:31:e8:0e:b2:d7:5a:dc:9d:69:4f:f2:8b:
ba:8f:65:e6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAz34OTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
Zjg0MTEzNTQ1ZDkwMDA3NjBmNjYwNjJhNDIyMTkzM2EyZTk1OWQ4MB4XDTIyMDEw
MTAwNTc1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzRhOWE2MjAwNzAy
YzAwMDQxMzljZTdhMTc1Mjk4NDczYzE0NzY3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMxGHjh0YvzIMUOQtJQIvC3a2Kyh9Rcp7A20/qML4Nvh1U81
T4FPCn+X0ZWJF55c+B+G6jdZUMMw1sKQrKYfna3su0AxHzae23fP1yqQnX816q4A
QGXitb9IY2/Syl9yxIc0EU9qh1adpqIcE4JDJWNw3xktO/aW7RK0C6p0KSTUkYE3
4+zMAEABjfCJwONCXaYJfFEF9bUYLavMccjm3jh6AAQMKdMFGFzqLGob/55wSexE
Ti236b0hOpEBzw64c+Z7GcBuoYYwfLGHUtfRDIx4P1CkkumNP73i2l3GT1wxcTh/
5p1nJuyJsjs7QvajB4pAo65vff0rvXW/y2iuo/8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR0qaYgBwLAAEE5znoXUphHPBR2cDAfBgNVHSMEGDAWgBS/hBE1RdkAB2D2
YGKkIhkzoulZ2DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y0UVJOVVhaQUFkZzltQmlwQ0laTTZMcFdkZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjUvMzBkYzg1LTJkZDgtNGIxYy1iMTUxLTRiZDYzYWRjNzM1NC8x
L2RLbW1JQWNDd0FCQk9jNTZGMUtZUnp3VWRuQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUv
MzBkYzg1LTJkZDgtNGIxYy1iMTUxLTRiZDYzYWRjNzM1NC8xL3Y0UVJOVVhaQUFk
ZzltQmlwQ0laTTZMcFdkZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2MkTANBgkqhkiG9w0BAQsFAAOC
AQEAHRZ4pOdoJ04uvDSYCWAJQzsjWXTXzFjfrsXmZ/PL9UP4j07T5nwsLC4kqwZa
lCBUlg7Y4oCPCxHPhedmb2RhMfAlWYAGQb3l3Y/qyNIHwRdYuFc0b9MY8WPE9k6Z
tz27e+Z8p2fmsT50wa/2ESL/jgqD9wc6LVuFec+SrqOyHz1wyvVByVyI+SfU8Pc1
NvjfSNtSj1HthIQgd4lBd7wFdxVnJoUu57JdIvbL4u6nQQl2cn/n/C6a/C5cPNIS
Ke72iNW4ploZONPXJF5S799LS7+hf7+bQmu0oWqhsv0M5/YQAYek1BYsFLg0GjU4
P8DHMegOstda3J1pT/KLuo9l5g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-fra.rpki-client.org