Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/DeL7yGGs_2qmxNe0wnl-EpY3Jlk.roa
File: DeL7yGGs_2qmxNe0wnl-EpY3Jlk.roa (raw, json)
Hash identifier: ruokHwlKtCaw0VvkWstLG9+cyaYAgc5HlfV6zV1waRg=
Subject key identifier: 0D:E2:FB:C8:61:AC:FF:6A:A6:C4:D7:B4:C2:79:7E:12:96:37:26:59
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19E57525
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/DeL7yGGs_2qmxNe0wnl-EpY3Jlk.roa
Signing time: Sat 01 Jan 2022 15:56:49 +0000
ROA not before: Sat 01 Jan 2022 15:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 185.51.192.0/24 maxlen: 24
45.86.201.0/24 maxlen: 24
2a01:b2e0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434468133 (0x19e57525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0de2fbc861acff6aa6c4d7b4c2797e1296372659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0a:8c:2f:c5:5b:7a:90:b0:98:ce:f0:f6:06:
71:d4:7f:96:3c:1e:e0:3b:0a:9a:a9:77:2d:e4:b8:
b6:53:00:a8:41:f7:66:0b:ac:bf:93:3c:4a:48:03:
37:a7:1d:5f:57:79:28:ee:55:bc:f3:3f:5e:ce:a7:
1c:33:6b:be:72:37:fe:44:7e:ce:63:77:e2:7c:4a:
1c:e1:2e:6b:06:d2:00:29:95:ac:a3:27:f4:80:43:
93:9f:0f:dd:ba:35:a7:86:c7:7b:e0:2f:cb:24:64:
7b:be:87:be:d4:2d:a6:b2:7a:86:f2:8a:c3:34:6f:
53:b0:49:50:b0:53:bb:9e:bc:69:07:ff:db:c1:9f:
41:60:1a:f0:36:46:4c:e8:ec:91:08:24:5f:25:f3:
3e:4f:13:5a:c4:26:1c:38:70:66:8f:75:a8:67:8d:
a0:41:9c:f8:76:46:c7:df:e1:8d:f7:19:71:45:ec:
2b:6f:e8:dd:c8:8e:a1:f7:d2:ea:04:b5:57:8a:5f:
ca:04:7e:f5:e5:00:f2:ac:4b:57:53:a8:1a:a2:df:
04:1f:ee:40:b2:21:67:b6:04:46:23:99:91:99:65:
98:15:b5:04:86:8d:10:94:0a:49:e5:b1:ff:5b:51:
22:8d:05:21:ee:da:d9:42:7a:ec:8b:8a:d3:71:91:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E2:FB:C8:61:AC:FF:6A:A6:C4:D7:B4:C2:79:7E:12:96:37:26:59
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/DeL7yGGs_2qmxNe0wnl-EpY3Jlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.201.0/24
185.51.192.0/24
IPv6:
2a01:b2e0::/29
Signature Algorithm: sha256WithRSAEncryption
25:00:2b:4b:0f:db:09:89:94:9e:9f:9b:3d:0e:cb:7f:70:cf:
af:e4:2b:d3:3d:ee:d2:c1:69:89:bf:98:dc:49:f9:7a:1d:fc:
b2:d0:ad:14:db:3e:ab:6b:61:75:fd:11:c0:b8:d0:0e:2a:88:
23:b6:5e:59:df:de:cb:c5:61:76:d9:e8:17:26:0d:d2:cd:23:
69:52:9a:2c:50:f3:bd:dd:19:99:b7:6a:38:2a:1e:c6:1e:0d:
71:01:0e:fd:90:2e:6d:ab:a6:9e:af:8e:00:78:44:a5:5e:40:
f7:51:a7:c6:cc:48:05:87:28:e3:7f:0d:c0:68:5f:c2:4f:77:
bc:32:b2:5d:d6:38:1e:3a:29:4c:87:8c:44:99:06:0b:d6:a4:
66:07:ce:4d:88:b6:da:fb:de:a7:8a:b2:82:02:17:42:55:ee:
6a:d2:c8:88:45:12:1e:ef:6d:b7:b3:76:d6:4d:63:ad:0d:a8:
dd:e9:dd:70:28:97:71:2a:a9:75:4f:ed:d3:2d:19:d4:9d:24:
7d:a7:d7:00:80:e1:39:71:3f:49:82:c8:32:20:ae:d0:46:a5:
e9:4e:c3:b1:38:14:02:0d:e2:c4:d3:16:a9:38:25:5e:62:8a:
13:1b:76:66:47:4c:af:5c:a3:aa:f8:06:8a:24:38:21:a1:15:
ff:6e:fe:35
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEGeV1JTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDEw
MTE1NTY0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGRlMmZiYzg2MWFj
ZmY2YWE2YzRkN2I0YzI3OTdlMTI5NjM3MjY1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPQKjC/FW3qQsJjO8PYGcdR/ljwe4DsKmql3LeS4tlMAqEH3
Zgusv5M8SkgDN6cdX1d5KO5VvPM/Xs6nHDNrvnI3/kR+zmN34nxKHOEuawbSACmV
rKMn9IBDk58P3bo1p4bHe+AvyyRke76HvtQtprJ6hvKKwzRvU7BJULBTu568aQf/
28GfQWAa8DZGTOjskQgkXyXzPk8TWsQmHDhwZo91qGeNoEGc+HZGx9/hjfcZcUXs
K2/o3ciOoffS6gS1V4pfygR+9eUA8qxLV1OoGqLfBB/uQLIhZ7YERiOZkZllmBW1
BIaNEJQKSeWx/1tRIo0FIe7a2UJ67IuK03GRXQkCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQN4vvIYaz/aqbE17TCeX4SljcmWTAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
L0RlTDd5R0dzXzJxbXhOZTB3bmwtRXBZM0psay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAC1WyQMEALkzwDANBAIAAjAHAwUD
KgGy4DANBgkqhkiG9w0BAQsFAAOCAQEAJQArSw/bCYmUnp+bPQ7Lf3DPr+Qr0z3u
0sFpib+Y3En5eh38stCtFNs+q2thdf0RwLjQDiqII7ZeWd/ey8VhdtnoFyYN0s0j
aVKaLFDzvd0ZmbdqOCoexh4NcQEO/ZAubaumnq+OAHhEpV5A91GnxsxIBYco438N
wGhfwk93vDKyXdY4HjopTIeMRJkGC9akZgfOTYi22vvep4qyggIXQlXuatLIiEUS
Hu9tt7N21k1jrQ2o3endcCiXcSqpdU/t0y0Z1J0kfafXAIDhOXE/SYLIMiCu0Eal
6U7DsTgUAg3ixNMWqTglXmKKExt2ZkdMr1yjqvgGiiQ4IaEV/27+NQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org