Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/DRqFkXVQpYwmSfGwp4_uWxFlOlk.roa
File: DRqFkXVQpYwmSfGwp4_uWxFlOlk.roa (raw, json)
Hash identifier: qUAeSQueVmONY9lYrR7GavHSuRukXhFsnCKf42lz+bk=
Subject key identifier: 0D:1A:85:91:75:50:A5:8C:26:49:F1:B0:A7:8F:EE:5B:11:65:3A:59
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01845C8B00464FA72B6CE13DEC0E06B39394
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/DRqFkXVQpYwmSfGwp4_uWxFlOlk.roa
Signing time: Wed 09 Nov 2022 13:18:44 +0000
ROA not before: Wed 09 Nov 2022 13:18:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212822
IP address blocks: 185.216.210.0/24 maxlen: 24
45.95.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:8b:00:46:4f:a7:2b:6c:e1:3d:ec:0e:06:b3:93:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Nov 9 13:18:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d1a85917550a58c2649f1b0a78fee5b11653a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:15:15:2e:6f:fe:d9:34:04:54:1d:76:bc:
07:0c:4e:81:63:78:46:e1:51:03:15:c0:73:e6:b0:
d9:95:a0:7d:ca:87:1e:d6:f6:1f:af:a5:72:40:23:
d7:f5:03:53:6d:5d:2f:d9:90:e7:5c:4d:38:b3:54:
c0:d0:0c:61:0c:13:bf:b9:58:3b:8f:d3:93:3e:20:
45:ab:77:c5:54:7e:f6:8c:51:fb:3e:87:25:1e:0b:
2d:71:dd:79:30:4f:20:8a:3f:54:c7:53:24:9a:c2:
8f:66:cd:a8:f5:44:bb:eb:7e:e7:4c:0a:ec:49:69:
7e:96:f2:8e:c9:ce:13:24:cd:d5:8a:65:8f:1e:37:
66:be:e9:bc:1a:a2:f5:a0:f0:da:86:5a:d2:ac:9a:
a8:93:7f:27:09:80:3b:82:d8:47:29:19:33:06:51:
fd:83:19:75:9c:c4:13:37:9c:75:73:d6:e0:f0:b7:
dc:1b:fa:e9:b0:3c:15:7c:9d:70:05:8d:a8:78:6c:
ab:72:3a:03:b3:9d:f2:c7:57:e5:f0:a6:7e:96:30:
bc:1f:89:dd:f1:a5:84:3a:92:04:58:0a:61:a9:16:
38:35:4e:ad:28:b7:a1:56:d1:8a:90:6f:d8:87:78:
17:41:f1:2e:93:17:9b:4e:c8:88:26:42:e3:e3:b7:
63:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:85:91:75:50:A5:8C:26:49:F1:B0:A7:8F:EE:5B:11:65:3A:59
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/DRqFkXVQpYwmSfGwp4_uWxFlOlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.34.0/24
185.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
35:41:f5:0b:64:e6:52:4f:f9:06:bc:1b:7d:00:13:9f:02:52:
04:44:a1:2d:60:6d:42:fe:0c:af:06:f2:f0:27:08:4f:bc:ba:
1a:a2:ec:87:3b:3e:9f:0f:72:04:b7:77:2c:4e:e6:3f:dc:65:
75:c4:95:3c:41:1d:d6:f6:31:38:07:b6:5a:d5:5b:bb:31:59:
8a:db:dd:dc:16:74:ca:f2:2a:58:06:f8:15:91:bd:19:6a:49:
86:92:9c:50:e3:a1:f7:c3:7c:c9:b6:4d:57:75:66:d0:ec:a2:
9c:72:54:6f:5f:30:ca:68:fe:e9:9e:0f:f6:b8:28:ba:cb:84:
0a:2c:66:af:eb:c2:5a:be:e4:f7:d8:9c:ff:91:d3:da:71:89:
51:d6:3f:2b:34:94:52:af:1c:76:e9:d3:5c:5d:c7:40:f1:d2:
82:01:92:83:1f:e8:07:3a:94:0e:9c:48:61:67:8b:7c:4e:f3:
eb:35:d5:6e:dc:48:dd:1f:a5:10:5c:a5:90:1e:e5:4e:51:0c:
99:6a:d1:d4:aa:89:24:e5:06:0d:db:56:22:25:26:5b:57:33:
48:1e:51:5d:86:84:32:58:5b:f0:40:52:9c:f2:d0:b9:b8:66:
4e:2f:f0:0e:3e:74:a3:7d:d9:56:44:41:89:7c:cb:aa:b2:0c:
02:a7:3c:e0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRciwBGT6crbOE97A4Gs5OUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjIxMTA5MTMxODQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDFhODU5MTc1NTBhNThjMjY0OWYxYjBhNzhmZWU1YjExNjUzYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts0VFS5v/tk0BFQddrwHDE6BY3hG
4VEDFcBz5rDZlaB9yoce1vYfr6VyQCPX9QNTbV0v2ZDnXE04s1TA0AxhDBO/uVg7
j9OTPiBFq3fFVH72jFH7PoclHgstcd15ME8gij9Ux1MkmsKPZs2o9US7637nTArs
SWl+lvKOyc4TJM3VimWPHjdmvum8GqL1oPDahlrSrJqok38nCYA7gthHKRkzBlH9
gxl1nMQTN5x1c9bg8LfcG/rpsDwVfJ1wBY2oeGyrcjoDs53yx1fl8KZ+ljC8H4nd
8aWEOpIEWAphqRY4NU6tKLehVtGKkG/Yh3gXQfEukxebTsiIJkLj47djwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA0ahZF1UKWMJknxsKeP7lsRZTpZMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvRFJxRmtYVlFwWXdtU2ZHd3A0X3VXeEZsT2xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV8iAwQA
udjSMA0GCSqGSIb3DQEBCwUAA4IBAQA1QfULZOZST/kGvBt9ABOfAlIERKEtYG1C
/gyvBvLwJwhPvLoaouyHOz6fD3IEt3csTuY/3GV1xJU8QR3W9jE4B7Za1Vu7MVmK
293cFnTK8ipYBvgVkb0ZakmGkpxQ46H3w3zJtk1XdWbQ7KKcclRvXzDKaP7png/2
uCi6y4QKLGav68JavuT32Jz/kdPacYlR1j8rNJRSrxx26dNcXcdA8dKCAZKDH+gH
OpQOnEhhZ4t8TvPrNdVu3EjdH6UQXKWQHuVOUQyZatHUqokk5QYN21YiJSZbVzNI
HlFdhoQyWFvwQFKc8tC5uGZOL/AOPnSjfdlWREGJfMuqsgwCpzzg
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org