Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/DutikL4GytGJDf6ib4V2xogJV_c.roa
File: DutikL4GytGJDf6ib4V2xogJV_c.roa (raw, json)
Hash identifier: 3Jeg23+lmnAFHMu34hugpMWnV9sXil44rzine43fpjU=
Subject key identifier: 0E:EB:62:90:BE:06:CA:D1:89:0D:FE:A2:6F:85:76:C6:88:09:57:F7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 092667F2
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/DutikL4GytGJDf6ib4V2xogJV_c.roa
Signing time: Sat 01 Jan 2022 08:54:44 +0000
ROA not before: Sat 01 Jan 2022 08:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35066
IP address blocks: 185.95.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153511922 (0x92667f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Jan 1 08:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0eeb6290be06cad1890dfea26f8576c6880957f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:20:53:7d:2f:a5:ce:1c:26:82:2e:a1:75:
04:43:ae:5b:e9:b8:57:65:c3:d4:f5:7a:55:da:ce:
4b:a7:e2:ed:15:a0:b9:e5:17:2f:ec:91:ca:39:e6:
1d:b1:bf:1f:bb:d4:e9:18:7a:b1:7c:9e:5f:32:3c:
fb:07:e4:d5:fb:ff:5a:9e:6a:da:b1:55:c9:3a:d5:
64:af:9e:97:dc:f1:90:3d:0d:05:da:17:36:97:ee:
7c:9a:b5:c1:06:56:e7:3e:0b:92:bb:c3:a0:8d:6d:
23:d8:a2:e4:45:fe:b5:84:8d:f6:b8:39:da:98:5a:
41:c8:08:8d:1f:8e:7a:12:f2:cd:dd:4d:19:ee:fd:
e4:5b:16:12:fe:92:5b:4b:2c:1c:fb:38:ab:c1:d4:
ba:b9:d9:1a:8d:71:19:90:22:13:70:48:6c:86:d9:
67:8d:b7:f1:a6:c6:29:a7:3f:98:f8:b4:7c:24:71:
96:d8:5a:8c:6e:b8:92:44:95:b5:c5:e0:c8:e7:b9:
fa:29:cd:d7:2e:ce:b5:b1:fe:60:2b:d7:57:cd:0a:
8f:cf:da:2f:66:db:15:f4:94:9c:76:f3:58:1a:38:
e5:9d:33:0f:2a:eb:a4:12:e5:4e:d9:c2:19:bc:12:
d9:25:d0:f9:fe:b3:fd:c3:2a:fa:04:d8:55:a3:c1:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:62:90:BE:06:CA:D1:89:0D:FE:A2:6F:85:76:C6:88:09:57:F7
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/DutikL4GytGJDf6ib4V2xogJV_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.144.0/22
Signature Algorithm: sha256WithRSAEncryption
61:a2:f0:e4:64:e1:4c:e1:52:ea:77:99:1b:d8:83:65:75:21:
02:35:1f:fb:08:ae:67:c9:88:71:75:e3:3b:5b:78:2e:5b:64:
86:a0:98:ef:44:d4:9a:41:dc:10:9c:e4:2c:63:56:ed:e7:0e:
ac:28:70:96:27:39:f4:06:32:8f:1b:48:21:ea:a8:19:b7:74:
24:12:a5:12:ac:e0:25:80:20:c2:b2:ec:93:f0:45:c8:0f:77:
c8:17:4a:82:32:63:fd:17:7c:b3:e2:2b:1a:0e:16:25:f5:a1:
ec:9b:12:b5:6e:cf:a5:5a:77:20:2b:b5:71:23:c6:41:90:c6:
d5:d9:de:c3:d4:00:82:de:88:f2:0b:fb:9e:01:d7:e0:19:b3:
9b:4b:f7:4c:20:5b:2f:c8:b9:d2:0c:d5:ee:54:1c:ef:df:bc:
e1:83:99:de:9a:fa:17:5d:1c:ae:f7:70:e2:e7:63:0a:b9:44:
bc:20:21:de:6d:5f:07:0d:db:f8:0e:fe:f1:e9:6e:72:2a:0e:
61:94:49:97:c8:a3:33:1c:f1:71:9c:3b:b8:77:ed:3d:4b:25:
86:3e:2f:68:fb:53:01:b1:e5:ae:d5:cb:c7:36:ec:e0:e6:32:
c0:ba:c2:54:a3:84:08:07:3c:1e:33:24:dd:af:68:00:b0:b6:
41:ad:47:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECSZn8jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjhjN2JkMGM0NDg2YmEwNzNjZTJkZTUzYmEwNzRkNzBlNDViNWU3MB4XDTIyMDEw
MTA4NTQ0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGVlYjYyOTBiZTA2
Y2FkMTg5MGRmZWEyNmY4NTc2YzY4ODA5NTdmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOayIFN9L6XOHCaCLqF1BEOuW+m4V2XD1PV6VdrOS6fi7RWg
ueUXL+yRyjnmHbG/H7vU6Rh6sXyeXzI8+wfk1fv/Wp5q2rFVyTrVZK+el9zxkD0N
BdoXNpfufJq1wQZW5z4LkrvDoI1tI9ii5EX+tYSN9rg52phaQcgIjR+OehLyzd1N
Ge795FsWEv6SW0ssHPs4q8HUurnZGo1xGZAiE3BIbIbZZ4238abGKac/mPi0fCRx
lthajG64kkSVtcXgyOe5+inN1y7OtbH+YCvXV80Kj8/aL2bbFfSUnHbzWBo45Z0z
DyrrpBLlTtnCGbwS2SXQ+f6z/cMq+gTYVaPBE0UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQO62KQvgbK0YkN/qJvhXbGiAlX9zAfBgNVHSMEGDAWgBRLjHvQxEhroHPO
LeU7oHTXDkW15zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1M0eDcwTVJJYTZCenppM2xPNkIwMXc1RnRlYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvMGI1OGFiLWY3MDctNGFiNi05YWU4LTAyNDBlNzQ0NzZhNy8x
L0R1dGlrTDRHeXRHSkRmNmliNFYyeG9nSlZfYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
MGI1OGFiLWY3MDctNGFiNi05YWU4LTAyNDBlNzQ0NzZhNy8xL1M0eDcwTVJJYTZC
enppM2xPNkIwMXc1RnRlYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlfkDANBgkqhkiG9w0BAQsFAAOC
AQEAYaLw5GThTOFS6neZG9iDZXUhAjUf+wiuZ8mIcXXjO1t4LltkhqCY70TUmkHc
EJzkLGNW7ecOrChwlic59AYyjxtIIeqoGbd0JBKlEqzgJYAgwrLsk/BFyA93yBdK
gjJj/Rd8s+IrGg4WJfWh7JsStW7PpVp3ICu1cSPGQZDG1dnew9QAgt6I8gv7ngHX
4Bmzm0v3TCBbL8i50gzV7lQc79+84YOZ3pr6F10crvdw4udjCrlEvCAh3m1fBw3b
+A7+8elucioOYZRJl8ijMxzxcZw7uHftPUslhj4vaPtTAbHlrtXLxzbs4OYywLrC
VKOECAc8HjMk3a9oALC2Qa1HqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:48 2024 by rpki-client on console-ams.rpki-client.org