Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/dmdaL-lI2dWhmOrgEZqvkonKz3Y.roa
File: dmdaL-lI2dWhmOrgEZqvkonKz3Y.roa (raw, json)
Hash identifier: er2vdY+QN1wFTdtU/aG3EC/hltUyVoLSRAMrR/TbAbI=
Subject key identifier: 76:67:5A:2F:E9:48:D9:D5:A1:98:EA:E0:11:9A:AF:92:89:CA:CF:76
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 08C1638D
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/dmdaL-lI2dWhmOrgEZqvkonKz3Y.roa
Signing time: Thu 19 May 2022 13:06:29 +0000
ROA not before: Thu 19 May 2022 13:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 45.137.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146891661 (0x8c1638d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 19 13:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76675a2fe948d9d5a198eae0119aaf9289cacf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:cd:1c:30:f1:cc:44:6d:ca:0c:5b:9f:dc:
5d:e2:08:29:60:bb:b9:cc:38:5e:cb:0b:95:07:c3:
6e:94:81:ae:34:f1:13:2c:60:6a:f4:f5:73:a2:90:
ef:f3:6e:99:86:9b:8b:f0:f1:b3:3a:d9:57:13:f1:
f1:9c:d7:a8:98:98:54:ff:cd:5b:21:35:f3:83:fd:
e9:c6:bc:3f:f4:4d:ae:dc:80:5b:88:ef:30:c1:90:
a1:fb:e7:e7:c8:07:8d:31:d2:20:39:92:86:61:b8:
88:79:90:61:76:3c:80:92:2d:2d:f5:d2:1d:39:31:
77:a7:05:7a:32:3f:e9:66:d4:35:ff:97:0a:99:d7:
5e:b2:34:0a:fd:44:15:38:f3:74:82:33:54:0d:21:
ff:e4:d0:a5:f2:db:0e:8f:4c:ce:d1:10:1c:4c:e1:
dc:70:bf:a9:35:dc:a7:e2:29:1d:50:7a:4e:28:a9:
3e:25:e3:dd:b5:e4:9a:13:97:71:73:d6:34:d7:da:
55:72:32:52:15:14:10:69:7c:a9:68:78:13:96:39:
43:d0:da:6f:c2:9a:b8:1d:43:36:14:d4:a8:6c:ee:
a5:b9:2c:57:7d:09:76:42:81:1d:b8:0c:8f:fc:3b:
a0:c8:57:88:11:86:de:96:93:2b:f5:e8:a4:42:55:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:5A:2F:E9:48:D9:D5:A1:98:EA:E0:11:9A:AF:92:89:CA:CF:76
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/dmdaL-lI2dWhmOrgEZqvkonKz3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
Signature Algorithm: sha256WithRSAEncryption
af:58:6d:c1:54:9e:cf:7c:8b:66:ea:c7:fc:30:63:52:f9:c6:
4c:a3:9b:22:6b:98:3e:77:b2:f4:35:c8:51:37:f2:37:7c:7c:
5e:68:9c:db:76:a4:fc:f2:cd:90:c0:db:fa:61:c4:9c:fb:b4:
98:0d:1b:6f:f2:80:ff:ad:55:82:ba:b2:07:1d:7b:0f:13:81:
53:92:28:1d:31:dd:78:40:3c:c0:fe:8f:1f:fd:b2:c4:d3:40:
30:90:23:d8:58:7b:e8:94:14:9a:be:61:5e:83:37:cf:8c:95:
31:7c:9e:7a:50:25:d2:5a:af:5b:81:cd:7b:16:63:b9:75:2a:
ea:1b:8e:df:a9:2e:bf:ad:a0:d1:48:de:89:f9:7b:4e:a2:a1:
c8:ea:90:aa:41:cc:95:4e:8b:ea:1f:c7:a8:8f:a1:6e:b8:5a:
87:28:db:b3:0f:ed:a3:89:98:7f:f9:0a:7b:68:2d:94:2d:18:
8c:03:2a:ad:e3:86:c3:76:f7:d8:4b:b9:64:a1:c4:d0:af:3a:
7f:6c:4d:8c:53:8a:03:38:63:ed:8c:53:4a:3d:74:ce:33:24:
bc:da:6d:e8:57:ea:bc:48:5d:bb:d2:7a:23:32:ca:5a:2d:0b:
4f:84:70:91:7e:79:85:97:8a:61:dc:b7:01:1d:89:34:28:4a:
1b:dd:f6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org