Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/VDnRDLwTsgvWcDSnCk8gWEwD3jA.roa
File: VDnRDLwTsgvWcDSnCk8gWEwD3jA.roa (raw, json)
Hash identifier: Pxw/LqByevDUSWJ9SzDo95b5W4w05jIN2Jxu3jcy4To=
Subject key identifier: 54:39:D1:0C:BC:13:B2:0B:D6:70:34:A7:0A:4F:20:58:4C:03:DE:30
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 067AEC3F
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/VDnRDLwTsgvWcDSnCk8gWEwD3jA.roa
Signing time: Sat 01 Jan 2022 07:00:52 +0000
ROA not before: Sat 01 Jan 2022 07:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.154.158.0/24 maxlen: 24
45.154.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108719167 (0x67aec3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 07:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5439d10cbc13b20bd67034a70a4f20584c03de30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8b:33:bc:83:ed:c5:45:70:5d:57:91:6a:59:
9f:9a:f1:f3:8e:dc:56:4a:6f:9e:82:9f:1b:b4:bc:
ab:26:51:1a:57:5a:9b:89:c1:95:cd:0a:e6:8d:0f:
cd:34:6c:61:59:c7:43:c8:fe:37:17:cd:38:ec:bc:
94:2d:aa:67:10:d7:10:0f:c8:ec:ff:98:b0:80:2d:
6d:80:26:ff:ff:17:4e:14:e4:45:31:f2:f5:17:9d:
6c:71:72:03:67:14:83:6e:7c:52:e3:b9:6c:42:16:
aa:10:48:32:4a:b8:7f:5d:c6:c7:6f:82:aa:48:50:
09:5d:95:12:0d:39:9e:29:33:01:15:d1:b5:21:11:
f3:cf:58:e0:13:57:a5:12:ee:6a:46:86:ba:2e:a0:
fe:b9:d4:52:09:52:67:cb:eb:f6:2b:2b:5d:e3:a3:
b6:41:12:d1:83:45:2d:5b:d5:ba:d4:8e:60:06:3b:
eb:45:5d:54:2f:38:18:50:21:cf:3c:b6:09:08:8d:
97:03:c6:e9:71:55:e0:ac:2a:ba:47:44:82:8a:1c:
07:02:58:e6:7c:40:ad:35:7a:9b:57:e3:27:f4:61:
44:25:a2:4d:bb:62:1c:19:ba:5e:da:d5:ed:a0:8b:
8c:02:4b:93:e8:a3:52:00:fc:ac:b8:61:05:f5:98:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:39:D1:0C:BC:13:B2:0B:D6:70:34:A7:0A:4F:20:58:4C:03:DE:30
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/VDnRDLwTsgvWcDSnCk8gWEwD3jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.158.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:f9:77:4f:81:a6:a0:72:3e:3f:14:b9:39:28:1e:c1:4d:b7:
c5:bb:c2:55:45:f3:52:6f:ec:9a:f9:e3:10:99:f7:dd:01:06:
39:f5:f3:2b:89:5f:dd:7e:11:d7:47:02:df:a6:5f:a4:26:c1:
41:9d:53:8f:c9:fe:9b:45:d5:e1:df:47:e0:b4:39:a9:16:c8:
20:ca:fe:bf:61:9d:99:e5:6c:99:09:ea:09:77:39:ba:41:e2:
b8:f2:ec:b5:98:95:95:81:ac:22:f4:e9:eb:01:d4:5f:b9:f3:
5f:cf:ed:5f:83:07:d2:6a:11:21:3a:02:f5:9d:a9:02:f8:b0:
f0:62:df:8a:9d:15:8c:75:8a:3c:45:7a:ab:ff:54:fe:2e:cc:
9b:e5:fc:02:51:6f:3c:29:21:c8:d7:66:91:0d:d5:d9:45:cb:
09:f1:44:9a:34:03:2e:42:0c:be:f2:32:85:cc:65:2d:fe:0f:
c7:4b:d7:b3:a6:13:28:4e:3c:61:78:9a:f7:20:a5:95:89:a7:
28:a2:78:c9:a3:fe:3a:3d:c6:2f:29:3b:dd:23:1e:0c:c7:de:
92:13:31:f3:52:38:4a:8a:78:6f:7c:f2:1b:05:08:18:f1:bb:
f8:4a:e6:78:82:c5:95:e2:19:24:72:d6:c9:2c:d8:82:78:9f:
64:5e:52:93
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBnrsPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTNkYTIwMTk5MDlkOWZjMzc4MjlmZDllYzI5ZDk0OGVjZmY3YzkyMB4XDTIyMDEw
MTA3MDA1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTQzOWQxMGNiYzEz
YjIwYmQ2NzAzNGE3MGE0ZjIwNTg0YzAzZGUzMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOyLM7yD7cVFcF1XkWpZn5rx847cVkpvnoKfG7S8qyZRGlda
m4nBlc0K5o0PzTRsYVnHQ8j+NxfNOOy8lC2qZxDXEA/I7P+YsIAtbYAm//8XThTk
RTHy9RedbHFyA2cUg258UuO5bEIWqhBIMkq4f13Gx2+CqkhQCV2VEg05nikzARXR
tSER889Y4BNXpRLuakaGui6g/rnUUglSZ8vr9isrXeOjtkES0YNFLVvVutSOYAY7
60VdVC84GFAhzzy2CQiNlwPG6XFV4KwqukdEgoocBwJY5nxArTV6m1fjJ/RhRCWi
TbtiHBm6XtrV7aCLjAJLk+ijUgD8rLhhBfWYcPECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRUOdEMvBOyC9ZwNKcKTyBYTAPeMDAfBgNVHSMEGDAWgBTZPaIBmQnZ/DeC
n9nsKdlI7P98kjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJUMmlBWmtKMmZ3M2dwX1o3Q25aU096X2ZKSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzIvNDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8x
L1ZEblJETHdUc2d2V2NEU25DazhnV0V3RDNqQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIv
NDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8xLzJUMmlBWmtKMmZ3
M2dwX1o3Q25aU096X2ZKSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2anjANBgkqhkiG9w0BAQsFAAOC
AQEAbfl3T4GmoHI+PxS5OSgewU23xbvCVUXzUm/smvnjEJn33QEGOfXzK4lf3X4R
10cC36ZfpCbBQZ1Tj8n+m0XV4d9H4LQ5qRbIIMr+v2GdmeVsmQnqCXc5ukHiuPLs
tZiVlYGsIvTp6wHUX7nzX8/tX4MH0moRIToC9Z2pAviw8GLfip0VjHWKPEV6q/9U
/i7Mm+X8AlFvPCkhyNdmkQ3V2UXLCfFEmjQDLkIMvvIyhcxlLf4Px0vXs6YTKE48
YXia9yCllYmnKKJ4yaP+Oj3GLyk73SMeDMfekhMx81I4Sop4b3zyGwUIGPG7+Erm
eILFleIZJHLWySzYgnifZF5Skw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org