Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/dzusGrDA833oIxMg_Iet_dLWyyo.roa
File: dzusGrDA833oIxMg_Iet_dLWyyo.roa (raw, json)
Hash identifier: fUKtDai9nKpZXO9tMLr2imqOoXRKoDA6KBa/XxwaT80=
Subject key identifier: 77:3B:AC:1A:B0:C0:F3:7D:E8:23:13:20:FC:87:AD:FD:D2:D6:CB:2A
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018408B9614A09B307C85AD9DD07851E8125
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/dzusGrDA833oIxMg_Iet_dLWyyo.roa
Signing time: Mon 24 Oct 2022 06:41:17 +0000
ROA not before: Mon 24 Oct 2022 06:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204916
IP address blocks: 84.54.36.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
83.171.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:b9:61:4a:09:b3:07:c8:5a:d9:dd:07:85:1e:81:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 24 06:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=773bac1ab0c0f37de8231320fc87adfdd2d6cb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:58:ac:54:6d:fa:8d:b2:c7:ad:db:b4:c2:
64:b8:84:06:16:85:a9:e7:81:96:4b:94:3c:04:df:
b7:47:58:84:35:95:f6:16:e7:c2:6a:24:89:f5:f4:
67:63:16:7f:a7:2a:2f:ca:8b:5a:14:88:4e:49:9f:
2f:19:71:93:2e:a4:35:4d:7c:5a:85:f8:5f:79:10:
72:58:7a:cf:36:92:2c:16:8f:46:5f:b4:40:17:20:
11:48:08:b9:38:13:41:02:97:f9:bc:21:84:46:34:
c4:3d:b6:44:f7:b9:51:39:e4:d9:e2:f3:fc:5e:a1:
1f:30:43:7c:0e:f4:bf:2d:7a:b2:44:20:7e:03:1d:
b7:18:3f:9a:85:e6:f6:c3:99:b3:19:35:7b:0e:f2:
73:38:7e:47:f0:d7:98:45:b2:6e:11:f0:56:74:fe:
5c:28:27:51:9a:fc:d3:17:e3:54:c3:2e:dd:86:bb:
47:40:26:98:b3:3d:0f:57:bb:89:db:5f:43:9b:73:
77:de:1b:18:cb:04:f8:b2:7c:53:87:c6:53:98:1b:
e3:89:6c:24:70:d4:35:f9:23:64:d7:dc:b8:e8:41:
8d:76:d6:c7:5b:70:36:1c:60:27:32:06:33:56:bd:
95:eb:1c:ce:2a:f3:bf:3c:f1:33:e0:c2:b3:ba:27:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3B:AC:1A:B0:C0:F3:7D:E8:23:13:20:FC:87:AD:FD:D2:D6:CB:2A
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/dzusGrDA833oIxMg_Iet_dLWyyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.136.0/22
83.171.240.0/22
84.54.36.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4e:88:e5:03:fa:c0:ed:5d:c3:e1:bc:87:97:45:13:7c:8b:
64:9c:fd:56:f1:a1:24:4d:37:e4:60:96:f8:a2:f4:d2:bb:6b:
8b:99:1f:31:8e:18:24:28:8e:3a:a9:8d:66:06:bf:4a:c6:12:
49:77:c0:f7:b9:f4:29:60:f8:73:56:77:c4:f8:ee:f8:d6:82:
73:f8:9e:09:52:6c:29:27:9c:2a:ca:c7:4f:af:1d:9b:c4:37:
e9:c3:26:53:dd:76:47:da:ee:2d:c2:4e:4e:00:66:08:08:40:
73:1b:de:25:a0:dc:01:3d:20:18:40:3b:f2:cd:20:a1:43:85:
8d:d1:7d:7a:37:94:ad:59:7a:2a:f2:33:80:8e:dc:b8:70:92:
04:f7:d9:7b:81:13:d5:88:2d:53:a1:46:20:54:16:10:db:fa:
a3:7c:25:46:d6:26:33:2f:d3:76:94:55:9e:98:3a:2d:f3:99:
3e:31:51:cd:0a:cb:18:98:2b:d4:a5:43:67:bb:3f:80:4d:b3:
fc:7a:f0:66:5b:79:c7:34:a4:b5:90:20:a2:e2:b3:61:41:33:
a9:01:3f:3d:99:01:f3:d7:67:dc:5f:f0:35:86:36:9d:e8:16:
30:66:b7:bf:d5:81:39:51:9d:03:4e:60:ce:b2:66:17:38:b4:
8f:a2:dd:80
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYQIuWFKCbMHyFrZ3QeFHoElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjIxMDI0MDY0MTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzNiYWMxYWIwYzBmMzdkZTgyMzEzMjBmYzg3YWRmZGQyZDZjYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU9YrFRt+o2yx63btMJkuIQGFoWp
54GWS5Q8BN+3R1iENZX2FufCaiSJ9fRnYxZ/pyovyotaFIhOSZ8vGXGTLqQ1TXxa
hfhfeRByWHrPNpIsFo9GX7RAFyARSAi5OBNBApf5vCGERjTEPbZE97lROeTZ4vP8
XqEfMEN8DvS/LXqyRCB+Ax23GD+aheb2w5mzGTV7DvJzOH5H8NeYRbJuEfBWdP5c
KCdRmvzTF+NUwy7dhrtHQCaYsz0PV7uJ219Dm3N33hsYywT4snxTh8ZTmBvjiWwk
cNQ1+SNk19y46EGNdtbHW3A2HGAnMgYzVr2V6xzOKvO/PPEz4MKzuif7YwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHc7rBqwwPN96CMTIPyHrf3S1ssqMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvZHp1c0dyREE4MzNvSXhNZ19JZXRfZExXeXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZeIAwQC
U6vwAwQAVDYkMA0GCSqGSIb3DQEBCwUAA4IBAQCITojlA/rA7V3D4byHl0UTfItk
nP1W8aEkTTfkYJb4ovTSu2uLmR8xjhgkKI46qY1mBr9KxhJJd8D3ufQpYPhzVnfE
+O741oJz+J4JUmwpJ5wqysdPrx2bxDfpwyZT3XZH2u4twk5OAGYICEBzG94loNwB
PSAYQDvyzSChQ4WN0X16N5StWXoq8jOAjty4cJIE99l7gRPViC1ToUYgVBYQ2/qj
fCVG1iYzL9N2lFWemDot85k+MVHNCssYmCvUpUNnuz+ATbP8evBmW3nHNKS1kCCi
4rNhQTOpAT89mQHz12fcX/A1hjad6BYwZre/1YE5UZ0DTmDOsmYXOLSPot2A
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:34 2025 by rpki-client