Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DkcMAEJrOLxfquMi2QgDf97_yuA.roa
File: DkcMAEJrOLxfquMi2QgDf97_yuA.roa (raw, json)
Hash identifier: MjGMsULpPe2j9YnzQGVUyvkONW4gtq+JwxmrPJqgd9k=
Subject key identifier: 0E:47:0C:00:42:6B:38:BC:5F:AA:E3:22:D9:08:03:7F:DE:FF:CA:E0
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01822BEBB3046496DE6A6508489BDA2EBB31
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DkcMAEJrOLxfquMi2QgDf97_yuA.roa
Signing time: Sat 23 Jul 2022 16:37:23 +0000
ROA not before: Sat 23 Jul 2022 16:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 266044
IP address blocks: 141.136.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2b:eb:b3:04:64:96:de:6a:65:08:48:9b:da:2e:bb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 23 16:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e470c00426b38bc5faae322d908037fdeffcae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:b9:7e:23:64:fa:d7:0a:53:69:e0:98:ed:
52:58:41:dc:4b:81:24:4c:01:ca:5c:97:9d:be:03:
89:46:66:ba:6e:76:33:81:98:12:96:60:73:b2:0f:
b9:24:86:76:14:fa:47:74:53:28:53:0b:0d:91:8a:
cf:19:01:f4:77:f9:21:fe:34:20:39:0a:e9:67:9b:
6e:62:18:a8:3b:52:88:c2:59:7e:19:08:07:c0:58:
58:ac:21:81:b3:e3:00:49:02:c7:31:15:90:7b:5e:
da:f5:ec:94:48:79:3c:3c:76:58:08:9f:d2:0a:85:
87:f2:44:d3:83:a1:3a:b2:76:bb:90:25:ab:49:ed:
c1:ad:e9:25:3b:62:44:97:e7:15:fb:16:e3:56:01:
f1:4d:3c:cb:c4:3a:3e:c3:d2:ed:de:3a:41:7f:2b:
2f:b4:d2:f1:87:86:e1:c1:ed:53:b7:70:b8:97:be:
84:6b:46:97:ec:42:f2:55:c2:16:26:7b:08:2b:b6:
48:ed:4a:aa:52:e3:ab:f2:bd:90:0d:d1:da:4a:9c:
04:24:68:87:0d:4c:e0:ce:0c:8a:f2:a7:d1:42:dd:
80:23:d9:ca:61:07:d3:29:3b:3f:83:6c:91:39:f6:
f4:66:72:71:4f:9c:f8:63:ed:bd:05:71:9a:61:c6:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:47:0C:00:42:6B:38:BC:5F:AA:E3:22:D9:08:03:7F:DE:FF:CA:E0
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DkcMAEJrOLxfquMi2QgDf97_yuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:cd:66:7c:6b:63:af:6e:8f:91:cf:b5:07:e7:28:79:75:5b:
3b:ce:96:f1:22:9b:3f:d1:5c:2b:01:30:1b:05:e9:a9:ed:d8:
e7:28:af:32:d5:5a:ab:bd:b3:4e:98:d2:3c:28:03:af:ba:a9:
45:60:64:68:a0:4a:30:24:6d:15:b4:0f:ad:fc:ef:e1:ca:31:
ad:dd:e6:7e:06:c8:d9:fb:14:58:92:d8:55:4e:8f:cd:57:6e:
6f:1a:1b:70:2c:ef:a4:e1:3d:20:c1:64:f9:8e:8b:18:b3:a7:
0e:0c:6e:e6:2f:9e:f4:f9:09:f5:85:c1:c5:df:68:b6:45:1a:
ef:00:d5:4b:a0:ab:21:ea:c8:09:93:cc:d6:8d:bb:4b:60:90:
02:a4:25:04:b2:71:19:89:aa:93:ff:11:15:df:1a:d4:d8:e1:
92:f9:e5:3f:d6:26:a9:ed:9f:f3:91:2c:27:07:a8:c4:96:4e:
1d:aa:88:eb:35:8e:05:40:80:be:d4:98:8f:62:24:34:7c:ed:
00:82:5f:91:ff:a8:52:ae:1e:b4:38:98:a5:f7:48:45:0e:59:
4f:4c:16:bd:b2:8c:15:c5:58:ed:fc:2d:28:3f:fd:10:f7:c4:
5f:98:bd:f9:f0:73:c3:8a:b8:3e:92:8b:08:61:38:04:24:04:
a2:0f:14:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIr67MEZJbeamUISJvaLrsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjIwNzIzMTYzNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTQ3MGMwMDQyNmIzOGJjNWZhYWUzMjJkOTA4MDM3ZmRlZmZjYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoK5fiNk+tcKU2ngmO1SWEHcS4Ek
TAHKXJedvgOJRma6bnYzgZgSlmBzsg+5JIZ2FPpHdFMoUwsNkYrPGQH0d/kh/jQg
OQrpZ5tuYhioO1KIwll+GQgHwFhYrCGBs+MASQLHMRWQe17a9eyUSHk8PHZYCJ/S
CoWH8kTTg6E6sna7kCWrSe3BreklO2JEl+cV+xbjVgHxTTzLxDo+w9Lt3jpBfysv
tNLxh4bhwe1Tt3C4l76Ea0aX7ELyVcIWJnsIK7ZI7UqqUuOr8r2QDdHaSpwEJGiH
DUzgzgyK8qfRQt2AI9nKYQfTKTs/g2yROfb0ZnJxT5z4Y+29BXGaYcbZ1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA5HDABCazi8X6rjItkIA3/e/8rgMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvRGtjTUFFSnJPTHhmcXVNaTJRZ0RmOTdfeXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYg+MA0G
CSqGSIb3DQEBCwUAA4IBAQCgzWZ8a2Ovbo+Rz7UH5yh5dVs7zpbxIps/0VwrATAb
Bemp7djnKK8y1VqrvbNOmNI8KAOvuqlFYGRooEowJG0VtA+t/O/hyjGt3eZ+BsjZ
+xRYkthVTo/NV25vGhtwLO+k4T0gwWT5josYs6cODG7mL570+Qn1hcHF32i2RRrv
ANVLoKsh6sgJk8zWjbtLYJACpCUEsnEZiaqT/xEV3xrU2OGS+eU/1iap7Z/zkSwn
B6jElk4dqojrNY4FQIC+1JiPYiQ0fO0Agl+R/6hSrh60OJil90hFDllPTBa9sowV
xVjt/C0oP/0Q98RfmL358HPDirg+kosIYTgEJASiDxQf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org