Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/DuMYD6okoNhnElcsa-kXI1z4u-4.roa
File: DuMYD6okoNhnElcsa-kXI1z4u-4.roa (raw, json)
Hash identifier: iWE+2YeaIsmviSdMqn6fnhNCbAp/f922U7wCNnUqfUk=
Subject key identifier: 0E:E3:18:0F:AA:24:A0:D8:67:12:57:2C:6B:E9:17:23:5C:F8:BB:EE
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01840F0A6C2B5A1E2B4D153A89ABD1131446
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/DuMYD6okoNhnElcsa-kXI1z4u-4.roa
Signing time: Tue 25 Oct 2022 12:07:31 +0000
ROA not before: Tue 25 Oct 2022 12:07:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 171.22.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:0a:6c:2b:5a:1e:2b:4d:15:3a:89:ab:d1:13:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Oct 25 12:07:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ee3180faa24a0d86712572c6be917235cf8bbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:3e:fd:86:a9:b9:c1:f1:a5:07:ce:e8:3b:
ee:a5:3b:ba:01:5a:f7:e0:51:17:82:91:c6:12:4c:
67:95:41:b9:b8:63:d6:a6:31:d7:c4:a6:ac:d0:b8:
8d:80:a4:49:44:91:35:08:0f:82:e7:f4:f1:75:12:
63:a2:ec:c6:c1:9e:54:a3:e9:72:d9:e9:7b:95:1e:
f4:58:25:99:6f:00:30:36:ae:46:cc:c4:7e:08:0c:
0e:f4:20:df:9f:f2:56:b7:e8:d6:bb:8c:a9:b0:c3:
75:1c:58:f6:f9:58:29:bf:31:12:dd:46:e6:45:ed:
a8:cd:d1:ba:69:3c:38:06:a3:42:a7:67:fe:17:58:
dc:12:3b:be:da:0b:1f:d6:00:22:d8:86:0d:c7:f4:
da:ff:4e:83:8d:ad:c0:8b:74:6a:d5:77:e9:45:af:
87:8f:df:2e:01:2f:df:db:1e:03:35:78:c6:ed:d2:
67:58:1a:d4:e6:22:26:cd:8a:fe:34:dc:66:0e:df:
0b:92:7e:bb:43:63:be:b5:ee:0c:cf:94:78:25:f9:
a1:70:55:5b:c3:7c:8d:be:ff:56:6b:f0:f9:ce:38:
c1:a1:a3:d7:30:41:ca:03:10:59:c9:3f:4e:f8:c5:
13:ad:0f:2d:c2:73:1f:93:61:6c:81:af:02:ca:e9:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:18:0F:AA:24:A0:D8:67:12:57:2C:6B:E9:17:23:5C:F8:BB:EE
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/DuMYD6okoNhnElcsa-kXI1z4u-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.147.0/24
Signature Algorithm: sha256WithRSAEncryption
01:df:7b:41:d6:ad:6c:5b:47:9e:ab:29:4c:7f:7f:9d:c4:94:
1c:ea:10:ec:1d:be:51:02:4b:76:72:e0:dd:42:3f:8f:38:40:
18:8f:fd:67:a5:d9:0f:70:7e:7c:be:e5:bd:0a:78:7d:48:79:
82:0b:45:f4:dc:e2:9c:87:b9:64:89:6a:be:26:3a:8c:32:7d:
05:46:9c:77:47:eb:e3:0e:81:82:66:e8:3c:6c:eb:7c:cd:63:
f5:8d:a7:c5:6f:41:70:0d:f5:03:90:b2:e4:2a:5c:8e:75:b7:
bd:a9:f2:1c:9e:65:ae:75:24:df:59:a8:7e:32:6d:7f:cc:d1:
a7:9b:cb:24:c1:42:f6:81:5b:8a:08:1b:8c:b8:5a:ce:97:43:
bb:ff:8e:47:78:c5:e9:e3:28:ce:df:85:62:f8:b6:32:4f:24:
12:54:a2:f6:18:aa:c5:65:3d:7a:50:d5:6b:c2:24:20:e6:e4:
3d:45:e1:aa:34:68:06:14:35:71:6d:d3:53:9f:40:1f:1f:18:
65:c1:1a:ce:80:af:53:33:eb:86:22:b7:75:6c:0e:1f:b7:eb:
dc:57:17:d5:df:78:dc:48:ce:f2:59:3c:18:9f:dc:bd:a6:59:
ee:6f:4b:98:f8:9b:2b:cc:b3:16:ee:f1:94:17:2f:56:72:e3:
55:6a:c4:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQPCmwrWh4rTRU6iavRExRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjIxMDI1MTIwNzMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWUzMTgwZmFhMjRhMGQ4NjcxMjU3MmM2YmU5MTcyMzVjZjhiYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSQ+/YapucHxpQfO6DvupTu6AVr3
4FEXgpHGEkxnlUG5uGPWpjHXxKas0LiNgKRJRJE1CA+C5/TxdRJjouzGwZ5Uo+ly
2el7lR70WCWZbwAwNq5GzMR+CAwO9CDfn/JWt+jWu4ypsMN1HFj2+VgpvzES3Ubm
Re2ozdG6aTw4BqNCp2f+F1jcEju+2gsf1gAi2IYNx/Ta/06Dja3Ai3Rq1XfpRa+H
j98uAS/f2x4DNXjG7dJnWBrU5iImzYr+NNxmDt8Lkn67Q2O+te4Mz5R4JfmhcFVb
w3yNvv9Wa/D5zjjBoaPXMEHKAxBZyT9O+MUTrQ8twnMfk2Fsga8CyulRdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA7jGA+qJKDYZxJXLGvpFyNc+LvuMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvRHVNWUQ2b2tvTmhuRWxjc2Eta1hJMXo0dS00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxaTMA0G
CSqGSIb3DQEBCwUAA4IBAQAB33tB1q1sW0eeqylMf3+dxJQc6hDsHb5RAkt2cuDd
Qj+POEAYj/1npdkPcH58vuW9Cnh9SHmCC0X03OKch7lkiWq+JjqMMn0FRpx3R+vj
DoGCZug8bOt8zWP1jafFb0FwDfUDkLLkKlyOdbe9qfIcnmWudSTfWah+Mm1/zNGn
m8skwUL2gVuKCBuMuFrOl0O7/45HeMXp4yjO34Vi+LYyTyQSVKL2GKrFZT16UNVr
wiQg5uQ9ReGqNGgGFDVxbdNTn0AfHxhlwRrOgK9TM+uGIrd1bA4ft+vcVxfV33jc
SM7yWTwYn9y9plnub0uY+JsrzLMW7vGUFy9WcuNVasSt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org