Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DhkdVA5AXM3xeifO2-nsko4LmcE.roa
File: DhkdVA5AXM3xeifO2-nsko4LmcE.roa (raw, json)
Hash identifier: WvuhGg/TZVEnaajkqGbV5FGVSDGTYL9ZJkPqEP+ATeA=
Subject key identifier: 0E:19:1D:54:0E:40:5C:CD:F1:7A:27:CE:DB:E9:EC:92:8E:0B:99:C1
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 42DAF10D
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DhkdVA5AXM3xeifO2-nsko4LmcE.roa
Signing time: Wed 04 May 2022 07:10:00 +0000
ROA not before: Wed 04 May 2022 07:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50990
IP address blocks: 94.176.180.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121644813 (0x42daf10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 4 07:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e191d540e405ccdf17a27cedbe9ec928e0b99c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:14:c9:e8:1a:cc:1a:8d:0d:8f:3c:a6:43:
71:4d:0d:20:d8:8f:5c:fe:f8:40:54:1f:77:5f:56:
28:30:c8:96:20:08:1f:35:23:90:de:e4:14:20:07:
05:4a:f9:b6:eb:a1:02:2f:61:74:e0:99:55:a5:02:
78:4a:44:c1:d1:5b:4d:da:10:00:3a:0f:22:75:8e:
ec:c0:f7:71:44:8a:20:18:10:02:5d:bd:28:05:d8:
23:85:3e:f9:aa:0e:6b:14:33:3e:5c:d8:9f:fd:5f:
42:96:7f:92:1b:7c:1e:6a:8f:84:cd:d7:54:83:1f:
94:46:bc:2d:1e:30:f5:59:c8:e9:d6:e9:50:02:e0:
8b:ff:06:ca:82:92:86:26:bf:c3:5b:72:f1:eb:0c:
4e:30:ef:96:cc:2f:37:b3:d9:5f:15:a6:66:36:33:
ab:08:8d:b4:5d:9c:6f:75:20:02:b2:d4:13:89:ae:
32:f9:e6:41:eb:c4:3c:c2:68:af:b1:82:6e:71:d7:
91:2f:b8:59:7f:a1:91:8c:3e:df:be:a1:d3:e0:74:
37:bf:d4:79:e5:f8:65:a7:3c:aa:d3:5f:2c:37:49:
cd:65:4b:06:c8:ae:f2:8f:a1:f0:7e:89:18:1a:b0:
7d:c6:c6:29:fa:8e:56:69:f7:5e:4f:f8:e7:56:47:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:19:1D:54:0E:40:5C:CD:F1:7A:27:CE:DB:E9:EC:92:8E:0B:99:C1
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DhkdVA5AXM3xeifO2-nsko4LmcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.180.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:75:f8:ed:cb:25:52:3b:98:23:a2:c4:b3:75:d6:bf:db:41:
a3:02:f6:5c:3f:4b:07:43:f3:38:26:6b:6a:97:a6:6f:0b:5d:
17:c3:cd:f0:7a:b1:50:87:c0:10:39:3a:4d:e4:33:3c:72:bd:
08:b1:6b:7a:a6:a6:69:12:b6:d2:32:dd:ca:89:f1:54:b0:a1:
bc:de:34:fc:3e:8c:67:f0:47:09:f7:33:06:c1:03:53:b7:86:
2c:90:80:93:46:16:df:60:7d:0e:07:4e:f6:04:72:ad:a2:38:
be:e9:71:62:ff:0c:aa:28:25:e5:f4:94:8e:4c:c7:3b:c2:62:
79:65:ce:88:d0:6f:68:c3:2b:73:4f:44:00:07:3e:33:33:1e:
5e:5f:d8:d5:b8:51:09:08:b0:38:e3:03:26:98:33:b0:0d:67:
08:98:8f:1d:f8:87:03:92:e6:2b:18:a0:d8:50:44:4b:6d:58:
66:e2:b0:3a:0d:00:75:50:6e:fc:15:e0:5a:db:a4:e3:2c:9f:
63:e2:60:8f:3a:8d:9a:58:42:db:66:37:1a:7f:b8:f1:4f:2a:
9a:00:ca:c9:1a:d7:41:75:c3:53:d6:78:6a:52:c7:96:48:04:
d8:4c:1f:62:25:41:53:32:54:6f:c5:87:7b:e3:62:73:70:54:
44:fa:7f:05
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEQtrxDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
OGU2MjYzNGUxYmQ1MTMzYTlkZTQ1MTJhZTk4Y2FkMWIyMjE5YjU5MB4XDTIyMDUw
NDA3MTAwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGUxOTFkNTQwZTQw
NWNjZGYxN2EyN2NlZGJlOWVjOTI4ZTBiOTljMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTqFMnoGswajQ2PPKZDcU0NINiPXP74QFQfd19WKDDIliAI
HzUjkN7kFCAHBUr5tuuhAi9hdOCZVaUCeEpEwdFbTdoQADoPInWO7MD3cUSKIBgQ
Al29KAXYI4U++aoOaxQzPlzYn/1fQpZ/kht8HmqPhM3XVIMflEa8LR4w9VnI6dbp
UALgi/8GyoKShia/w1ty8esMTjDvlswvN7PZXxWmZjYzqwiNtF2cb3UgArLUE4mu
MvnmQevEPMJor7GCbnHXkS+4WX+hkYw+376h0+B0N7/UeeX4Zac8qtNfLDdJzWVL
Bsiu8o+h8H6JGBqwfcbGKfqOVmn3Xk/451ZHSMsCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBQOGR1UDkBczfF6J87b6eySjguZwTAfBgNVHSMEGDAWgBT45iY04b1RM6ne
RRKumMrRsiGbWTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEv
MS9EaGtkVkE1QVhNM3hlaWZPMi1uc2tvNExtY0Uucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4
L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYzMzEvMS8xLU9ZbU5PRzlV
VE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXrC0MA0GCSqGSIb3DQEBCwUA
A4IBAQAedfjtyyVSO5gjosSzdda/20GjAvZcP0sHQ/M4Jmtql6ZvC10Xw83werFQ
h8AQOTpN5DM8cr0IsWt6pqZpErbSMt3KifFUsKG83jT8Poxn8EcJ9zMGwQNTt4Ys
kICTRhbfYH0OB072BHKtoji+6XFi/wyqKCXl9JSOTMc7wmJ5Zc6I0G9owytzT0QA
Bz4zMx5eX9jVuFEJCLA44wMmmDOwDWcImI8d+IcDkuYrGKDYUERLbVhm4rA6DQB1
UG78FeBa26TjLJ9j4mCPOo2aWELbZjcaf7jxTyqaAMrJGtdBdcNT1nhqUseWSATY
TB9iJUFTMlRvxYd742JzcFRE+n8F
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:21 2025 by rpki-client