Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/dLKs0zjJcca4_sU-ElaEr5vFFMs.roa
File: dLKs0zjJcca4_sU-ElaEr5vFFMs.roa (raw, json)
Hash identifier: AJ+uZhNDclQELzl04+vMoavY1h/i+zijjYT5Go5pI4A=
Subject key identifier: 74:B2:AC:D3:38:C9:71:C6:B8:FE:C5:3E:12:56:84:AF:9B:C5:14:CB
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 076BF24B
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/dLKs0zjJcca4_sU-ElaEr5vFFMs.roa
Signing time: Sat 01 Jan 2022 00:50:35 +0000
ROA not before: Sat 01 Jan 2022 00:50:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201281
IP address blocks: 45.154.62.0/24 maxlen: 24
2a0f:b100:200::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124514891 (0x76bf24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 1 00:50:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74b2acd338c971c6b8fec53e125684af9bc514cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:c2:28:98:c6:a2:f2:68:b2:8b:31:8e:bd:
3d:c6:ec:75:99:e6:57:ad:8e:14:72:4f:12:fc:cf:
16:22:1a:69:73:de:08:57:6d:ee:15:56:ce:9a:04:
d4:b1:85:51:ef:04:d6:03:ec:07:33:0b:dd:f8:12:
d8:f6:2f:9c:78:5c:51:a1:73:4c:ff:ad:1e:cf:15:
c4:83:a8:1c:1a:7b:ac:5d:04:af:54:4f:44:90:d6:
21:3e:4a:8d:04:61:9e:2f:f0:b5:98:fd:1a:3e:94:
fe:af:4d:dc:47:b4:fd:00:59:62:bd:10:a8:e8:cf:
b3:73:d5:0b:37:c1:f9:95:7e:cc:c9:95:65:17:73:
61:83:8b:49:b9:d0:7f:db:19:76:74:a8:51:6e:4d:
72:fd:f4:34:a9:b0:0b:73:4d:b5:77:f1:ed:0a:99:
4c:22:7f:07:3e:86:0c:ad:38:37:20:4d:79:4b:b0:
39:16:f2:27:8a:94:0d:22:cd:28:80:16:80:37:5f:
c7:5d:93:98:17:bd:a0:d6:b0:cf:50:e1:3d:d1:b0:
fe:e0:cd:64:b3:f2:93:95:5f:04:15:c6:87:54:81:
d9:98:cf:68:b3:c5:d1:5c:58:e3:72:57:ab:07:ee:
38:08:74:0b:37:1c:84:8c:bc:ef:5e:7f:02:0b:95:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:AC:D3:38:C9:71:C6:B8:FE:C5:3E:12:56:84:AF:9B:C5:14:CB
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/dLKs0zjJcca4_sU-ElaEr5vFFMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.62.0/24
IPv6:
2a0f:b100:200::/40
Signature Algorithm: sha256WithRSAEncryption
9e:87:bb:74:25:08:90:4c:5a:2f:12:0b:b8:7d:10:62:8e:55:
61:49:94:e2:4d:68:56:f9:1e:1f:e2:94:ac:7f:74:f6:27:32:
54:75:bd:42:1e:a5:0d:e5:08:4e:6b:cb:7b:2f:8d:20:8e:f4:
1c:25:33:83:16:32:2a:95:8d:ad:84:bd:3d:52:81:8b:05:51:
dc:46:60:71:2c:0e:f6:ea:60:58:cb:1c:0b:e5:38:17:40:f1:
85:ff:35:dd:63:4a:3d:06:77:4f:64:c4:ad:e9:27:63:92:17:
46:16:4e:0d:fb:83:92:70:15:69:e2:b4:11:a2:bd:a0:d8:ef:
9c:da:3c:14:78:67:f7:50:ac:3d:f7:84:eb:ba:1a:05:95:27:
67:bd:b9:4e:3a:c1:4c:f0:de:f3:93:85:77:7c:6e:fa:62:0c:
e7:f9:05:6d:cb:23:a3:34:5b:22:16:9c:54:33:fc:cc:1b:68:
b4:f8:d6:21:25:f7:38:88:40:c9:2f:8f:83:44:02:71:f7:1f:
6d:63:9e:8d:d9:7b:04:f6:3d:db:b7:0d:39:5e:49:ff:b4:4a:
08:7e:8a:de:10:72:d2:af:5c:c8:ab:2c:48:15:e8:0a:1a:dd:
65:2d:d4:8f:9b:31:cc:13:44:9a:92:f4:55:50:24:2d:e4:62:
6b:8a:f4:18
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIEB2vySzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NjU2MmQwODY5NDgwZGMxMWI3NGE1NTJjZDE2N2I2ZjYzMzljOGJhMB4XDTIyMDEw
MTAwNTAzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzRiMmFjZDMzOGM5
NzFjNmI4ZmVjNTNlMTI1Njg0YWY5YmM1MTRjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlkwiiYxqLyaLKLMY69PcbsdZnmV62OFHJPEvzPFiIaaXPe
CFdt7hVWzpoE1LGFUe8E1gPsBzML3fgS2PYvnHhcUaFzTP+tHs8VxIOoHBp7rF0E
r1RPRJDWIT5KjQRhni/wtZj9Gj6U/q9N3Ee0/QBZYr0QqOjPs3PVCzfB+ZV+zMmV
ZRdzYYOLSbnQf9sZdnSoUW5Ncv30NKmwC3NNtXfx7QqZTCJ/Bz6GDK04NyBNeUuw
ORbyJ4qUDSLNKIAWgDdfx12TmBe9oNawz1DhPdGw/uDNZLPyk5VfBBXGh1SB2ZjP
aLPF0VxY43JXqwfuOAh0CzcchIy8715/AguV4J8CAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBR0sqzTOMlxxrj+xT4SVoSvm8UUyzAfBgNVHSMEGDAWgBSmVi0IaUgNwRt0
pVLNFntvYznIujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BsWXRDR2xJRGNFYmRLVlN6Ulo3YjJNNXlMby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTcvMjEyZGQyLWRhOGQtNDA0OC05MTZhLTQ1YThmZWQzYTJhNS8x
L2RMS3MwempKY2NhNF9zVS1FbGFFcjV2RkZNcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcv
MjEyZGQyLWRhOGQtNDA0OC05MTZhLTQ1YThmZWQzYTJhNS8xL3BsWXRDR2xJRGNF
YmRLVlN6Ulo3YjJNNXlMby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAC2aPjAOBAIAAjAIAwYAKg+xAAIw
DQYJKoZIhvcNAQELBQADggEBAJ6Hu3QlCJBMWi8SC7h9EGKOVWFJlOJNaFb5Hh/i
lKx/dPYnMlR1vUIepQ3lCE5ry3svjSCO9BwlM4MWMiqVja2EvT1SgYsFUdxGYHEs
DvbqYFjLHAvlOBdA8YX/Nd1jSj0Gd09kxK3pJ2OSF0YWTg37g5JwFWnitBGivaDY
75zaPBR4Z/dQrD33hOu6GgWVJ2e9uU46wUzw3vOThXd8bvpiDOf5BW3LI6M0WyIW
nFQz/MwbaLT41iEl9ziIQMkvj4NEAnH3H21jno3ZewT2Pdu3DTleSf+0Sgh+it4Q
ctKvXMirLEgV6Aoa3WUt1I+bMcwTRJqS9FVQJC3kYmuK9Bg=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:42 2025 by rpki-client