Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/DPVaTsGQoVjGvUiLZ_9R-lKfuzs.roa
File: DPVaTsGQoVjGvUiLZ_9R-lKfuzs.roa (raw, json)
Hash identifier: YlOn6N47OiSMEXaKI0LzNt0uCEd3cdGRX/2P0mFNKRI=
Subject key identifier: 0C:F5:5A:4E:C1:90:A1:58:C6:BD:48:8B:67:FF:51:FA:52:9F:BB:3B
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 018248B2F2A9A5B90A453AFE4B8A288D870F
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/DPVaTsGQoVjGvUiLZ_9R-lKfuzs.roa
Signing time: Fri 29 Jul 2022 06:44:23 +0000
ROA not before: Fri 29 Jul 2022 06:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29467
IP address blocks: 45.67.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:b2:f2:a9:a5:b9:0a:45:3a:fe:4b:8a:28:8d:87:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Jul 29 06:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cf55a4ec190a158c6bd488b67ff51fa529fbb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cf:8f:09:3f:e9:28:00:55:d5:21:ae:2b:25:
d4:c4:ff:3f:d1:dc:34:6d:21:93:65:18:38:a5:65:
a7:8b:af:ea:5c:53:d1:c2:23:07:1e:61:63:a9:36:
7b:9a:1c:92:2c:bc:ac:3e:e2:2a:55:cc:83:70:d2:
1d:38:b3:70:02:7a:29:5b:1f:db:b9:79:a1:0a:b6:
5f:f5:7b:e6:11:1d:80:dc:8e:e0:52:3e:ee:fd:f5:
6d:cd:49:58:be:f2:ae:2b:5c:ca:d2:05:3d:92:05:
bc:c6:ff:19:45:b7:90:68:0a:70:8a:ab:51:0b:23:
68:e0:f6:ad:13:1c:21:a4:f1:ac:20:9f:37:d6:24:
3b:bc:b1:7a:5b:32:c3:8d:ff:62:ab:18:e1:94:6e:
2e:f6:cf:5d:f3:c3:84:95:45:ee:b8:30:8b:5b:d2:
85:7f:69:99:af:0a:9a:8d:17:24:22:a2:4e:2a:d2:
03:ce:ab:4f:79:41:f8:a3:91:b0:ff:5e:2c:b2:ef:
d0:80:f3:da:33:ae:d8:68:eb:a5:ea:d1:68:dc:85:
3c:39:35:f9:a2:7c:c1:d4:2d:55:d2:1a:a5:ee:fc:
35:6d:e6:6f:19:85:c1:2f:a1:d0:55:97:bf:cf:2d:
64:55:63:01:fc:a4:3a:66:cc:aa:5d:9d:39:de:3d:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:5A:4E:C1:90:A1:58:C6:BD:48:8B:67:FF:51:FA:52:9F:BB:3B
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/DPVaTsGQoVjGvUiLZ_9R-lKfuzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.255.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5c:da:a7:70:27:bf:6a:57:fc:7e:9a:c1:98:56:ee:f3:af:
7a:fe:5a:a1:1e:86:04:b9:01:ad:79:61:bf:dd:6c:31:7b:3b:
fa:a6:f9:3d:52:7e:53:ab:a3:46:c0:03:43:e0:41:ef:cb:42:
bc:15:84:f1:c6:c2:48:73:66:c3:cb:87:a4:e2:6f:32:a1:c5:
ab:e9:a0:0f:88:09:b9:3e:dd:ef:eb:5f:f5:18:f9:c3:a0:91:
78:6a:53:8f:2b:b8:5f:09:be:d9:30:cc:a9:1a:da:86:3c:91:
7d:0b:7a:b5:7b:98:ad:00:99:80:2e:b1:c0:83:3d:f2:42:bb:
ce:5c:82:39:48:4f:0e:b6:70:11:ec:c0:ed:5c:47:98:d4:0a:
d6:8f:6a:65:69:e5:73:c0:44:70:94:8d:a8:9a:7b:b5:e1:36:
f7:01:f7:c4:c5:62:86:bf:35:5d:31:92:b6:e1:ff:7c:c6:16:
82:70:eb:03:50:11:ec:bc:49:aa:94:cd:72:a7:72:2f:78:01:
7b:d7:79:11:bb:31:55:37:6e:b6:7c:dd:35:b9:0c:f6:12:f2:
06:16:53:60:c4:7b:0b:b4:15:bf:5f:e2:87:3f:b1:0e:d7:fd:
86:2b:9b:2d:26:f2:a1:84:44:7e:e7:85:de:63:7d:78:7c:77:
66:ab:aa:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJIsvKppbkKRTr+S4oojYcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWI0OTQzZTdkNmI0YjBlMWRlODVjOWJjMzhiODU3NTU0
ZGQ0N2QwHhcNMjIwNzI5MDY0NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2Y1NWE0ZWMxOTBhMTU4YzZiZDQ4OGI2N2ZmNTFmYTUyOWZiYjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs+PCT/pKABV1SGuKyXUxP8/0dw0
bSGTZRg4pWWni6/qXFPRwiMHHmFjqTZ7mhySLLysPuIqVcyDcNIdOLNwAnopWx/b
uXmhCrZf9XvmER2A3I7gUj7u/fVtzUlYvvKuK1zK0gU9kgW8xv8ZRbeQaApwiqtR
CyNo4PatExwhpPGsIJ831iQ7vLF6WzLDjf9iqxjhlG4u9s9d88OElUXuuDCLW9KF
f2mZrwqajRckIqJOKtIDzqtPeUH4o5Gw/14ssu/QgPPaM67YaOul6tFo3IU8OTX5
onzB1C1V0hql7vw1beZvGYXBL6HQVZe/zy1kVWMB/KQ6ZsyqXZ053j1vpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAz1Wk7BkKFYxr1Ii2f/UfpSn7s7MB8GA1UdIwQY
MBaAFKObSUPn1rSw4d6Fybw4uFdVTdR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUt
NjkzYmY2N2U2MWYzLzEvRFBWYVRzR1FvVmpHdlVpTFpfOVItbEtmdXpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUtNjkzYmY2N2U2MWYz
LzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUP/MA0G
CSqGSIb3DQEBCwUAA4IBAQAlXNqncCe/alf8fprBmFbu8696/lqhHoYEuQGteWG/
3Wwxezv6pvk9Un5Tq6NGwAND4EHvy0K8FYTxxsJIc2bDy4ek4m8yocWr6aAPiAm5
Pt3v61/1GPnDoJF4alOPK7hfCb7ZMMypGtqGPJF9C3q1e5itAJmALrHAgz3yQrvO
XII5SE8OtnAR7MDtXEeY1ArWj2plaeVzwERwlI2omnu14Tb3AffExWKGvzVdMZK2
4f98xhaCcOsDUBHsvEmqlM1yp3IveAF713kRuzFVN262fN01uQz2EvIGFlNgxHsL
tBW/X+KHP7EO1/2GK5stJvKhhER+54XeY314fHdmq6qK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:52 2024 by rpki-client on console-ams.rpki-client.org