Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/dcgv2QTbyx3h4PWN2YrRUhDPfIA.roa
File: dcgv2QTbyx3h4PWN2YrRUhDPfIA.roa (raw, json)
Hash identifier: LWIm6ThSlP4r5Z+Nw6RuZFQ4W/xknV5T+W2m0u6O/C4=
Subject key identifier: 75:C8:2F:D9:04:DB:CB:1D:E1:E0:F5:8D:D9:8A:D1:52:10:CF:7C:80
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: B9C0
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/dcgv2QTbyx3h4PWN2YrRUhDPfIA.roa
Signing time: Wed 11 May 2022 08:03:31 +0000
ROA not before: Wed 11 May 2022 08:03:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208315
IP address blocks: 45.142.240.0/22 maxlen: 22
2a0e:dc40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47552 (0xb9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: May 11 08:03:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75c82fd904dbcb1de1e0f58dd98ad15210cf7c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:5e:1b:a4:ea:01:c8:a8:47:e4:6c:38:65:
e6:4f:f8:83:4e:a2:9d:a5:45:f5:b5:75:ac:1d:25:
70:e7:ac:a7:ea:ff:aa:92:67:8e:23:f4:21:74:41:
cb:8b:31:af:0f:1e:10:0f:e4:58:81:bb:21:05:b5:
36:6d:8a:b6:94:70:9a:03:8e:da:5d:7a:d7:42:31:
f9:c4:a1:25:f2:49:97:78:53:e9:75:45:c1:93:92:
91:b5:61:b0:be:56:c6:fb:47:2f:72:d2:12:92:97:
28:03:a4:79:52:95:f9:27:2a:2e:f9:c4:83:12:7c:
9c:8c:2f:2e:16:d9:22:1d:ff:28:47:61:b8:e9:b1:
ef:db:cd:84:30:82:c4:71:47:01:f3:35:99:a9:e1:
cb:e2:bc:6f:e4:70:ce:2b:59:9b:63:98:23:e2:3a:
70:d5:ba:d1:c3:3e:db:ff:0a:87:e3:21:04:47:45:
27:94:8a:bf:28:7a:c5:f4:60:15:47:51:0c:e5:47:
85:45:b1:40:31:c5:9e:96:2c:32:9b:3a:d0:24:ae:
1f:c7:d8:df:ed:ad:0b:de:ef:8a:c2:16:76:29:bd:
11:af:31:07:cd:a3:ec:6c:2c:a9:d2:81:1c:ae:96:
d7:90:62:30:4f:e7:4a:25:7c:88:d1:49:dd:9d:3a:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C8:2F:D9:04:DB:CB:1D:E1:E0:F5:8D:D9:8A:D1:52:10:CF:7C:80
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/dcgv2QTbyx3h4PWN2YrRUhDPfIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.240.0/22
IPv6:
2a0e:dc40::/29
Signature Algorithm: sha256WithRSAEncryption
4c:56:ac:91:68:46:70:06:0e:2c:ff:f9:65:30:ad:54:9f:87:
b8:95:6e:0d:27:d1:9c:61:6e:21:a1:11:62:d0:a6:d6:43:b9:
a3:5a:4b:df:db:ce:a7:11:90:5a:45:29:7b:5d:a3:fc:f7:6f:
a1:36:91:2f:83:bc:2b:f4:31:9d:8a:89:da:62:7b:58:18:03:
c0:45:6f:01:fc:6c:31:4a:61:b8:5d:0f:e3:1f:5f:6d:03:2c:
b9:a1:9f:c6:e7:bf:bf:9e:ec:1b:c6:ac:88:ee:8f:a7:ca:32:
e4:1b:ac:14:81:72:8f:d5:12:ff:35:e4:67:4c:0e:ec:0e:e4:
1e:f6:c9:40:33:0a:8b:7f:1c:4c:5a:01:eb:63:66:fc:ed:75:
ba:1b:a2:d9:55:06:7b:79:af:de:d8:92:db:03:6c:93:15:0e:
9c:99:34:2a:94:7e:6b:d4:1c:1c:81:73:7e:fa:67:4b:e2:9e:
a6:f6:31:77:18:0d:04:d4:b9:a3:a5:72:f5:84:41:31:73:7d:
27:0d:75:57:a7:1b:e2:74:5d:75:74:26:8c:6a:8c:30:99:91:
db:35:de:57:b3:79:bf:3a:cb:1f:cd:03:9a:6f:67:18:e3:08:
d3:2d:ed:2c:35:ce:69:92:07:ad:7e:ec:cb:c8:64:67:80:0b:
8f:8c:41:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDALnAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
OGU3MDk3OTkwZTVhNjcxNzhlMjk3ODc1YTBkOWY0NjA1ODkyYTYwHhcNMjIwNTEx
MDgwMzMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3NWM4MmZkOTA0ZGJj
YjFkZTFlMGY1OGRkOThhZDE1MjEwY2Y3YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAra5eG6TqAcioR+RsOGXmT/iDTqKdpUX1tXWsHSVw56yn6v+q
kmeOI/QhdEHLizGvDx4QD+RYgbshBbU2bYq2lHCaA47aXXrXQjH5xKEl8kmXeFPp
dUXBk5KRtWGwvlbG+0cvctISkpcoA6R5UpX5Jyou+cSDEnycjC8uFtkiHf8oR2G4
6bHv282EMILEcUcB8zWZqeHL4rxv5HDOK1mbY5gj4jpw1brRwz7b/wqH4yEER0Un
lIq/KHrF9GAVR1EM5UeFRbFAMcWeliwymzrQJK4fx9jf7a0L3u+KwhZ2Kb0RrzEH
zaPsbCyp0oEcrpbXkGIwT+dKJXyI0UndnTrAlQIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFHXIL9kE28sd4eD1jdmK0VIQz3yAMB8GA1UdIwQYMBaAFHyOcJeZDlpnF44p
eHWg2fRgWJKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Zkk1d2w1a09XbWNYamlsNGRhRFo5R0JZa3FZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jYS84YWNhZjctZTBjYS00MzQ0LTlkZmQtYThhYzQxODA5ZjVmLzEv
ZGNndjJRVGJ5eDNoNFBXTjJZclJVaERQZklBLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84
YWNhZjctZTBjYS00MzQ0LTlkZmQtYThhYzQxODA5ZjVmLzEvZkk1d2w1a09XbWNY
amlsNGRhRFo5R0JZa3FZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLY7wMA0EAgACMAcDBQMqDtxAMA0G
CSqGSIb3DQEBCwUAA4IBAQBMVqyRaEZwBg4s//llMK1Un4e4lW4NJ9GcYW4hoRFi
0KbWQ7mjWkvf286nEZBaRSl7XaP892+hNpEvg7wr9DGdionaYntYGAPARW8B/Gwx
SmG4XQ/jH19tAyy5oZ/G57+/nuwbxqyI7o+nyjLkG6wUgXKP1RL/NeRnTA7sDuQe
9slAMwqLfxxMWgHrY2b87XW6G6LZVQZ7ea/e2JLbA2yTFQ6cmTQqlH5r1BwcgXN+
+mdL4p6m9jF3GA0E1LmjpXL1hEExc30nDXVXpxvidF11dCaMaowwmZHbNd5Xs3m/
OssfzQOab2cY4wjTLe0sNc5pkgetfuzLyGRngAuPjEH3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:18 2024 by rpki-client on console-ams.rpki-client.org