Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/DkyjOu19OmfKmuXv6g2WHgoTYoc.roa
File: DkyjOu19OmfKmuXv6g2WHgoTYoc.roa (raw, json)
Hash identifier: W8IMFpJoD418IzgLVBoiEivTiHCNvLC3KWeXjvqhBR4=
Subject key identifier: 0E:4C:A3:3A:ED:7D:3A:67:CA:9A:E5:EF:EA:0D:96:1E:0A:13:62:87
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0184CC992A949F034F15F2DB7D020B640AC2
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/DkyjOu19OmfKmuXv6g2WHgoTYoc.roa
Signing time: Thu 01 Dec 2022 07:31:40 +0000
ROA not before: Thu 01 Dec 2022 07:31:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 45.158.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:99:2a:94:9f:03:4f:15:f2:db:7d:02:0b:64:0a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Dec 1 07:31:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e4ca33aed7d3a67ca9ae5efea0d961e0a136287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:55:51:70:22:5c:86:30:63:1a:d4:90:c7:
67:bc:d8:8b:86:09:46:7f:46:a9:81:41:db:1d:11:
79:49:8b:cc:c4:5b:1d:d5:a8:a4:4a:cc:bc:54:ba:
a6:5b:10:c7:cb:45:2d:8d:99:e1:0c:93:10:7a:9b:
51:47:79:c9:c4:ab:d2:93:93:3e:48:c8:00:d2:dd:
6b:17:09:ea:b5:f1:21:6f:99:4e:1d:f2:31:28:6d:
53:69:cf:77:80:63:2b:57:de:01:2f:f8:96:d3:e5:
a1:82:5d:28:4f:6e:b3:4e:81:6f:71:b6:85:b4:a8:
48:07:6a:8e:cf:51:d9:af:8f:cd:09:01:a0:67:a9:
7f:4f:64:fb:31:35:57:6b:07:76:c4:25:a5:96:21:
01:ac:98:b3:c0:07:19:7c:c8:d0:5e:52:0a:cc:60:
7d:69:8e:5f:bb:e1:47:d1:4d:91:e7:a9:eb:63:12:
b7:67:ea:4c:14:46:22:92:7e:07:4d:01:2a:6a:53:
4d:2c:ff:4f:32:3e:13:54:7e:c8:6a:00:87:7c:9c:
0c:ae:b9:64:c6:63:41:a0:08:97:6a:2d:ee:70:20:
07:4b:f9:f0:18:5b:7e:87:ad:cc:a0:29:6a:18:2b:
43:16:b6:b0:ea:71:58:1e:db:bc:dd:0c:54:dd:a1:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4C:A3:3A:ED:7D:3A:67:CA:9A:E5:EF:EA:0D:96:1E:0A:13:62:87
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/DkyjOu19OmfKmuXv6g2WHgoTYoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.127.0/24
Signature Algorithm: sha256WithRSAEncryption
12:63:58:7e:a1:6b:be:d9:23:e6:e9:6b:8f:a7:8e:99:fb:b8:
86:76:27:e8:3f:5d:31:77:47:7b:ad:c3:7a:90:fe:66:77:65:
56:3a:13:0b:1e:83:f9:9f:0e:22:b2:ee:0b:97:55:dd:2e:3d:
38:e7:67:2f:44:07:4f:9b:29:5e:c7:2a:c6:fa:e0:ed:6d:0e:
9b:e7:12:c7:b3:0e:90:8b:4f:b6:2a:ab:4d:24:99:d5:ae:d6:
38:a2:eb:cd:43:4f:84:90:86:43:89:44:37:f3:9f:bb:12:e4:
82:18:e9:3c:a9:04:70:8b:dd:c0:02:fa:54:b0:31:fa:75:47:
c8:46:46:72:82:7f:e2:9c:af:9d:72:fe:ab:a3:c6:bd:1e:fb:
45:a4:57:cd:cd:cc:b6:2f:79:2a:ab:74:54:f5:88:94:04:eb:
12:f7:c9:57:b9:b9:7d:3d:a1:89:d9:59:0d:4f:3e:8e:a3:2c:
78:21:3a:d5:f2:c7:1a:14:b2:94:ac:ea:fb:e5:61:da:db:b5:
5a:0b:40:21:fe:69:51:92:48:09:72:79:cf:27:51:0c:df:b2:
ed:f5:c1:b3:bd:93:64:17:c2:5e:d7:fa:81:7e:d6:28:76:76:
86:2c:8d:76:f7:f4:32:a4:01:41:24:12:09:14:0d:36:ed:60:
de:ad:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:00 2024 by rpki-client on console-ams.rpki-client.org