Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/0LML6jy7Fg5N2mY0rXkYtptJMiU.roa
File: 0LML6jy7Fg5N2mY0rXkYtptJMiU.roa (raw, json)
Hash identifier: AnaU9cV9EJpn1xwvVXx3qZJHPRZAWyRwvWnv0uXzlNM=
Subject key identifier: D0:B3:0B:EA:3C:BB:16:0E:4D:DA:66:34:AD:79:18:B6:9B:49:32:25
Certificate issuer: /CN=dd82de4f1304339fde527ba06033ca9e511171bd
Certificate serial: 059019B8
Authority key identifier: DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/0LML6jy7Fg5N2mY0rXkYtptJMiU.roa
Signing time: Sat 01 Jan 2022 15:00:32 +0000
ROA not before: Sat 01 Jan 2022 15:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212900
IP address blocks: 45.159.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93329848 (0x59019b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd82de4f1304339fde527ba06033ca9e511171bd
Validity
Not Before: Jan 1 15:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0b30bea3cbb160e4dda6634ad7918b69b493225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:d3:b1:56:aa:20:64:3a:93:41:ca:ef:4c:
54:37:c2:6d:09:95:4f:8a:70:73:81:49:8b:a7:02:
3f:a1:42:05:e7:1a:be:43:b8:2f:1d:b2:39:57:d1:
c6:73:9d:5a:f0:87:3c:b3:26:d8:4a:5d:d1:73:ed:
fd:9f:da:a8:48:d5:d9:e9:fe:02:a9:d7:6b:65:cc:
10:62:0c:96:3b:62:b3:2d:73:72:ae:dd:58:cf:5e:
fd:bc:11:08:b2:64:be:62:c5:7f:aa:d6:d2:ce:9e:
62:d7:61:3d:af:2e:31:fc:59:ce:40:bb:06:91:2a:
5a:91:ec:38:fb:6e:51:9e:ae:ea:bc:55:d2:78:e8:
aa:ff:78:ca:ab:26:59:fd:42:73:66:3d:8a:c3:95:
79:65:29:f2:1f:72:a8:0c:c0:e3:08:7d:e7:99:37:
02:bf:84:f1:39:0c:21:1e:7b:58:7f:6d:35:af:77:
49:ea:a2:1f:f1:15:59:87:9a:03:b2:c2:a3:2b:e4:
e0:52:de:32:a3:e7:d1:b3:f3:4e:5c:20:67:48:25:
fa:ff:7d:0c:b7:cc:3f:fe:5c:7f:03:b1:87:5d:6a:
bf:35:17:03:4e:bf:c3:c8:15:27:a3:39:6b:a0:de:
1c:0f:78:3b:63:ea:95:49:cb:cc:87:fa:f5:81:0c:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B3:0B:EA:3C:BB:16:0E:4D:DA:66:34:AD:79:18:B6:9B:49:32:25
X509v3 Authority Key Identifier:
keyid:DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/0LML6jy7Fg5N2mY0rXkYtptJMiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:83:4a:91:31:30:47:7f:50:4c:99:6a:5f:e0:d8:cb:e9:1f:
97:e5:98:3f:df:ab:97:c0:49:ee:65:44:2f:b6:b3:02:d9:39:
b7:9e:df:4c:a6:ac:1b:40:fc:d4:40:32:17:2a:bb:8f:9f:7d:
38:34:75:c8:65:db:76:74:9a:83:a4:fe:4f:00:43:a6:be:96:
93:52:60:2d:fc:a6:eb:61:94:ed:59:11:d6:24:31:0a:2d:39:
42:a5:76:37:8d:ad:d3:06:53:1a:e7:b7:75:27:8f:01:56:f4:
6a:a3:f9:98:42:a4:0d:7c:14:42:a4:49:b5:3b:40:62:22:a2:
24:45:f5:81:cd:de:82:9d:4b:3d:31:42:b0:d9:cd:2e:7d:10:
40:83:ae:5b:b6:84:24:a7:1f:7a:b1:3c:03:01:08:8c:4b:3e:
82:6d:ea:be:3e:08:a6:40:66:59:35:fa:bd:d1:7d:7c:e9:4a:
4e:91:7a:67:1a:cd:a4:67:9d:35:1b:b6:db:12:e2:c9:f5:db:
c5:57:e1:e2:25:b0:21:68:71:f8:fe:54:6a:cb:31:e5:a6:e9:
66:5b:00:e0:66:78:31:31:9c:90:19:ec:25:c4:04:4b:6b:17:
b3:75:dc:01:b7:d4:5d:5c:0d:59:56:40:f0:17:50:94:79:56:
6b:37:7d:59
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBZAZuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ZDgyZGU0ZjEzMDQzMzlmZGU1MjdiYTA2MDMzY2E5ZTUxMTE3MWJkMB4XDTIyMDEw
MTE1MDAzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDBiMzBiZWEzY2Ji
MTYwZTRkZGE2NjM0YWQ3OTE4YjY5YjQ5MzIyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL8b07FWqiBkOpNByu9MVDfCbQmVT4pwc4FJi6cCP6FCBeca
vkO4Lx2yOVfRxnOdWvCHPLMm2Epd0XPt/Z/aqEjV2en+AqnXa2XMEGIMljtisy1z
cq7dWM9e/bwRCLJkvmLFf6rW0s6eYtdhPa8uMfxZzkC7BpEqWpHsOPtuUZ6u6rxV
0njoqv94yqsmWf1Cc2Y9isOVeWUp8h9yqAzA4wh955k3Ar+E8TkMIR57WH9tNa93
SeqiH/EVWYeaA7LCoyvk4FLeMqPn0bPzTlwgZ0gl+v99DLfMP/5cfwOxh11qvzUX
A06/w8gVJ6M5a6DeHA94O2PqlUnLzIf69YEMTmcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTQswvqPLsWDk3aZjSteRi2m0kyJTAfBgNVHSMEGDAWgBTdgt5PEwQzn95S
e6BgM8qeURFxvTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNZTGVUeE1FTTVfZVVudWdZRFBLbmxFUmNiMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvZjhiYjFiLWQ2ZmQtNDlhMS05NjUzLWZmMTU3YmVmMDYyMS8x
LzBMTUw2ank3Rmc1TjJtWTByWGtZdHB0Sk1pVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
ZjhiYjFiLWQ2ZmQtNDlhMS05NjUzLWZmMTU3YmVmMDYyMS8xLzNZTGVUeE1FTTVf
ZVVudWdZRFBLbmxFUmNiMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2fxDANBgkqhkiG9w0BAQsFAAOC
AQEAbINKkTEwR39QTJlqX+DYy+kfl+WYP9+rl8BJ7mVEL7azAtk5t57fTKasG0D8
1EAyFyq7j599ODR1yGXbdnSag6T+TwBDpr6Wk1JgLfym62GU7VkR1iQxCi05QqV2
N42t0wZTGue3dSePAVb0aqP5mEKkDXwUQqRJtTtAYiKiJEX1gc3egp1LPTFCsNnN
Ln0QQIOuW7aEJKcferE8AwEIjEs+gm3qvj4IpkBmWTX6vdF9fOlKTpF6ZxrNpGed
NRu22xLiyfXbxVfh4iWwIWhx+P5Uassx5abpZlsA4GZ4MTGckBnsJcQES2sXs3Xc
AbfUXVwNWVZA8BdQlHlWazd9WQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-ams.rpki-client.org