Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/DjMG7fSo4upRTmnp62utr38TZPo.roa
File: DjMG7fSo4upRTmnp62utr38TZPo.roa (raw, json)
Hash identifier: IxhY0wErCx+1PKsmQaApCs7gLzrl15bp6FkG7zMDwWA=
Subject key identifier: 0E:33:06:ED:F4:A8:E2:EA:51:4E:69:E9:EB:6B:AD:AF:7F:13:64:FA
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 03170834
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/DjMG7fSo4upRTmnp62utr38TZPo.roa
Signing time: Sat 01 Jan 2022 13:59:19 +0000
ROA not before: Sat 01 Jan 2022 13:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55933
IP address blocks: 45.153.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51841076 (0x3170834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 13:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e3306edf4a8e2ea514e69e9eb6badaf7f1364fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:5f:4e:7d:b6:56:43:ff:a2:50:ab:a6:b2:
0c:3c:90:6f:c2:7a:2d:46:a8:c7:5e:e8:63:b7:25:
25:43:07:44:63:96:f0:ae:c2:92:9d:d5:92:55:bc:
5a:31:43:cf:a1:66:81:b0:26:8b:e1:54:32:d1:5b:
87:ce:fd:1b:93:97:16:f7:36:11:d1:bc:51:81:25:
34:1d:1d:a2:a0:da:ac:48:cc:84:11:99:3c:da:32:
36:ef:87:ce:31:63:f4:0c:5a:96:96:62:70:8d:8e:
e5:c4:61:41:49:a6:29:bf:f8:5b:32:ac:d5:ac:a8:
f0:1f:51:12:b2:a5:54:9a:07:4f:d6:b9:c1:8e:61:
4c:50:69:3e:97:08:c9:c9:e3:53:ba:e5:85:fa:f0:
d1:5b:dd:a1:ff:bc:1e:53:2f:00:18:38:86:eb:bc:
34:20:47:d6:07:48:ec:1a:84:3c:72:ad:96:94:60:
11:1e:a6:ea:f8:88:84:42:ac:bc:d1:83:6c:58:88:
ee:53:17:5e:4a:f2:ad:c5:d8:d3:dc:84:fb:ff:a7:
24:51:2d:84:45:ae:d9:83:ec:d3:81:8f:47:98:3e:
c1:5f:d2:e3:14:df:6f:67:db:f5:f4:70:38:61:d0:
a3:ec:4b:32:42:4e:78:0a:8f:5d:70:14:ca:02:84:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:33:06:ED:F4:A8:E2:EA:51:4E:69:E9:EB:6B:AD:AF:7F:13:64:FA
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/DjMG7fSo4upRTmnp62utr38TZPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.128.0/22
Signature Algorithm: sha256WithRSAEncryption
57:96:38:9c:6d:33:5d:03:d9:5d:b6:b2:04:5a:ad:39:d1:c7:
72:d7:a6:cd:2a:34:0b:2b:70:fa:02:99:66:f6:43:d6:39:60:
6d:e8:31:ae:5d:e0:01:7e:9a:62:e0:11:8f:bd:87:38:5e:3a:
61:18:c9:f2:6f:ce:16:84:23:aa:10:75:76:7f:b5:7f:6f:03:
30:58:bc:b6:f3:a3:8d:bf:56:35:b0:97:9e:53:03:52:d4:8d:
47:c7:61:01:15:d2:83:44:13:be:e9:98:49:ba:39:e8:a1:04:
c4:64:17:5b:73:49:e1:b4:b2:f8:f1:fb:4b:ce:13:b8:8c:56:
58:eb:a1:6a:4b:5d:c8:cd:99:28:e8:17:34:81:af:50:cd:ae:
f3:43:79:c1:1c:76:1a:f7:00:6f:09:38:3a:62:03:e3:4f:cb:
c1:79:88:7e:b6:ee:d9:d2:fb:37:84:2d:1d:26:cc:f5:8e:61:
78:32:df:66:a6:f9:d2:f3:d6:f0:ac:63:2f:e2:8c:31:94:33:
16:64:97:e4:fc:ad:1f:b2:b4:3e:2c:a3:4d:5a:75:c2:f7:f8:
6a:6b:b7:1d:0e:10:a5:8a:16:99:96:27:4e:e3:21:f2:13:34:
f6:99:2b:ee:36:76:33:20:9c:e4:c0:d7:5e:d6:c1:ea:25:31:
d8:9b:28:7b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAxcINDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDdiNDg3ODQ4ZmZmNjM1MzNkODdjMzI0ZWNjNTFjMmMzZWEyYWRiMB4XDTIyMDEw
MTEzNTkxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGUzMzA2ZWRmNGE4
ZTJlYTUxNGU2OWU5ZWI2YmFkYWY3ZjEzNjRmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJTKX059tlZD/6JQq6ayDDyQb8J6LUaox17oY7clJUMHRGOW
8K7Ckp3VklW8WjFDz6FmgbAmi+FUMtFbh879G5OXFvc2EdG8UYElNB0doqDarEjM
hBGZPNoyNu+HzjFj9AxalpZicI2O5cRhQUmmKb/4WzKs1ayo8B9RErKlVJoHT9a5
wY5hTFBpPpcIycnjU7rlhfrw0Vvdof+8HlMvABg4huu8NCBH1gdI7BqEPHKtlpRg
ER6m6viIhEKsvNGDbFiI7lMXXkryrcXY09yE+/+nJFEthEWu2YPs04GPR5g+wV/S
4xTfb2fb9fRwOGHQo+xLMkJOeAqPXXAUygKE43ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQOMwbt9Kji6lFOaenra62vfxNk+jAfBgNVHSMEGDAWgBQ0e0h4SP/2NTPY
fDJOzFHCw+oq2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05IdEllRWpfOWpVejJId3lUc3hSd3NQcUt0cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvYmM3MTIyLTRkMWItNDZhNy1hZWNiLTIzMGIzYjcyYTE3NS8x
L0RqTUc3ZlNvNHVwUlRtbnA2MnV0cjM4VFpQby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
YmM3MTIyLTRkMWItNDZhNy1hZWNiLTIzMGIzYjcyYTE3NS8xL05IdEllRWpfOWpV
ejJId3lUc3hSd3NQcUt0cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2ZgDANBgkqhkiG9w0BAQsFAAOC
AQEAV5Y4nG0zXQPZXbayBFqtOdHHctemzSo0Cytw+gKZZvZD1jlgbegxrl3gAX6a
YuARj72HOF46YRjJ8m/OFoQjqhB1dn+1f28DMFi8tvOjjb9WNbCXnlMDUtSNR8dh
ARXSg0QTvumYSbo56KEExGQXW3NJ4bSy+PH7S84TuIxWWOuhaktdyM2ZKOgXNIGv
UM2u80N5wRx2GvcAbwk4OmID40/LwXmIfrbu2dL7N4QtHSbM9Y5heDLfZqb50vPW
8KxjL+KMMZQzFmSX5PytH7K0PiyjTVp1wvf4amu3HQ4QpYoWmZYnTuMh8hM09pkr
7jZ2MyCc5MDXXtbB6iUx2Jsoew==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:19 2023 by rpki-client on console-ams.rpki-client.org