Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/DkmzJh_op3tLyFU4uc6EhvggAQI.roa
File: DkmzJh_op3tLyFU4uc6EhvggAQI.roa (raw, json)
Hash identifier: NphjmNWJ6j/yOHdqMIe1FbN0jqMcPCRp8fyQ56YtWO0=
Subject key identifier: 0E:49:B3:26:1F:E8:A7:7B:4B:C8:55:38:B9:CE:84:86:F8:20:01:02
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 0184BF1563CC0BBA7A45DCAC9E1B18218457
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/DkmzJh_op3tLyFU4uc6EhvggAQI.roa
Signing time: Mon 28 Nov 2022 16:32:40 +0000
ROA not before: Mon 28 Nov 2022 16:32:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198770
IP address blocks: 37.230.248.0/24 maxlen: 24
128.0.67.0/24 maxlen: 24
128.0.66.0/24 maxlen: 24
141.101.228.0/24 maxlen: 24
141.101.231.0/24 maxlen: 24
85.92.117.0/24 maxlen: 24
85.92.118.0/24 maxlen: 24
85.92.116.0/24 maxlen: 24
37.230.152.0/24 maxlen: 24
37.230.153.0/24 maxlen: 24
37.230.154.0/24 maxlen: 24
37.230.155.0/24 maxlen: 24
141.101.204.0/24 maxlen: 24
178.170.225.0/24 maxlen: 24
37.18.76.0/24 maxlen: 24
37.18.77.0/24 maxlen: 24
37.18.74.0/24 maxlen: 24
37.18.75.0/24 maxlen: 24
2a0d:b1c0:abc0::/44 maxlen: 44
2a0d:b1c0:c0::/44 maxlen: 44
2a0d:b1c0:500::/44 maxlen: 48
2a0d:b1c0:ffff::/48 maxlen: 48
2a0d:b1c0:aaaa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:15:63:cc:0b:ba:7a:45:dc:ac:9e:1b:18:21:84:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Nov 28 16:32:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e49b3261fe8a77b4bc85538b9ce8486f8200102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:86:d1:7b:a8:8c:c0:fa:a7:1b:82:10:94:a8:
d5:d1:fc:48:26:b0:f7:9e:ea:9a:69:5b:18:b0:e6:
33:68:16:6a:3a:77:56:c4:bd:72:19:48:6d:3f:b5:
dd:00:8c:5b:11:c6:d9:82:36:0b:48:d8:f0:3e:26:
42:60:e2:4c:07:53:b9:59:9f:9b:38:77:59:ba:e1:
65:fe:43:6b:9e:23:bc:c5:a3:01:30:40:90:e2:82:
f7:88:3c:bd:c4:77:4f:d5:a1:08:bf:81:72:0f:3d:
39:72:27:19:f3:06:7c:63:7d:4a:eb:c3:cb:ad:3f:
e1:dc:92:c8:ad:4d:c1:7f:e4:8a:00:33:85:8d:75:
31:77:1e:87:85:05:d1:ee:54:47:fa:93:33:29:f5:
62:99:88:2c:0e:c4:bc:90:e6:78:eb:2a:d7:10:a8:
cc:37:7b:49:57:b0:e0:ac:7d:f1:ee:d8:c8:51:50:
54:ec:21:c7:a8:5b:f2:21:21:83:c7:de:d5:03:c3:
4b:e8:00:63:82:a8:70:16:c1:61:69:60:10:e4:fc:
ba:9c:4a:67:56:12:a2:30:d0:e1:d4:69:48:bd:58:
af:b0:be:50:b5:18:f7:d0:4d:56:f4:82:23:89:d9:
11:4c:d1:1a:b5:ae:35:ee:53:4e:7b:50:4e:99:c2:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:49:B3:26:1F:E8:A7:7B:4B:C8:55:38:B9:CE:84:86:F8:20:01:02
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/DkmzJh_op3tLyFU4uc6EhvggAQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.74.0-37.18.77.255
37.230.152.0/22
37.230.248.0/24
85.92.116.0-85.92.118.255
128.0.66.0/23
141.101.204.0/24
141.101.228.0/24
141.101.231.0/24
178.170.225.0/24
IPv6:
2a0d:b1c0:c0::/44
2a0d:b1c0:500::/44
2a0d:b1c0:aaaa::/48
2a0d:b1c0:abc0::/44
2a0d:b1c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
b3:34:9f:70:e6:9a:25:c3:5c:2f:bd:2f:21:d6:ab:c2:45:2d:
b8:62:8f:76:b3:b1:9e:21:02:57:ea:b5:33:db:e8:29:da:89:
c7:3c:67:40:67:6b:2b:f7:4f:a6:3a:5e:4a:87:99:50:0a:42:
25:cc:90:f7:42:3d:2e:ea:7e:01:c3:bd:c1:0d:e6:e6:e3:65:
19:8a:0d:f7:d8:f4:a9:56:19:d8:44:e7:43:c0:dd:b9:8e:19:
53:c1:26:22:e9:e4:2f:d2:ba:1c:b0:63:1d:e3:fc:3f:9f:0c:
88:76:ae:91:83:e0:ee:1b:a3:2d:0c:72:ba:9d:e3:83:2a:4d:
40:38:05:e8:6a:6b:44:79:73:f1:f6:ea:fb:27:aa:97:1c:22:
b3:78:31:fb:8c:e9:46:cb:80:9d:eb:8c:85:2a:07:9e:ad:cc:
c0:80:ad:ad:44:dc:d5:bb:9d:da:4c:79:6f:06:0f:85:69:b9:
28:35:38:87:d0:9b:14:91:6e:2d:84:2b:2f:83:43:da:06:00:
0e:1e:72:2b:82:69:81:07:68:05:81:3d:01:fb:fb:66:c0:7d:
96:2f:d1:c1:0a:7c:6c:1e:bb:ce:ae:91:f5:96:7b:18:ea:5f:
dd:69:ef:29:1e:78:60:61:b9:87:29:0f:21:17:f5:42:c4:4e:
e5:7a:2c:04
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAYS/FWPMC7p6RdysnhsYIYRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2
ODc2YTEwHhcNMjIxMTI4MTYzMjQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTQ5YjMyNjFmZThhNzdiNGJjODU1MzhiOWNlODQ4NmY4MjAwMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4bRe6iMwPqnG4IQlKjV0fxIJrD3
nuqaaVsYsOYzaBZqOndWxL1yGUhtP7XdAIxbEcbZgjYLSNjwPiZCYOJMB1O5WZ+b
OHdZuuFl/kNrniO8xaMBMECQ4oL3iDy9xHdP1aEIv4FyDz05cicZ8wZ8Y31K68PL
rT/h3JLIrU3Bf+SKADOFjXUxdx6HhQXR7lRH+pMzKfVimYgsDsS8kOZ46yrXEKjM
N3tJV7DgrH3x7tjIUVBU7CHHqFvyISGDx97VA8NL6ABjgqhwFsFhaWAQ5Py6nEpn
VhKiMNDh1GlIvVivsL5QtRj30E1W9IIjidkRTNEata417lNOe1BOmcInawIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFA5JsyYf6Kd7S8hVOLnOhIb4IAECMB8GA1UdIwQY
MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt
ZWVjNDg4NWM0ZjhkLzEvRGttekpoX29wM3RMeUZVNHVjNkVodmdnQVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk
LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzBMBAIAATBGMAwDBAEl
EkoDBAElEkwDBAIl5pgDBAAl5vgwDAMEAlVcdAMEAFVcdgMEAYAAQgMEAI1lzAME
AI1l5AMEAI1l5wMEALKq4TAzBAIAAjAtAwcEKg2xwADAAwcEKg2xwAUAAwcAKg2x
wKqqAwcEKg2xwKvAAwcAKg2xwP//MA0GCSqGSIb3DQEBCwUAA4IBAQCzNJ9w5pol
w1wvvS8h1qvCRS24Yo92s7GeIQJX6rUz2+gp2onHPGdAZ2sr90+mOl5Kh5lQCkIl
zJD3Qj0u6n4Bw73BDebm42UZig332PSpVhnYROdDwN25jhlTwSYi6eQv0rocsGMd
4/w/nwyIdq6Rg+DuG6MtDHK6neODKk1AOAXoamtEeXPx9ur7J6qXHCKzeDH7jOlG
y4Cd64yFKgeerczAgK2tRNzVu53aTHlvBg+FabkoNTiH0JsUkW4thCsvg0PaBgAO
HnIrgmmBB2gFgT0B+/tmwH2WL9HBCnxsHrvOrpH1lnsY6l/dae8pHnhgYbmHKQ8h
F/VCxE7leiwE
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-ams.rpki-client.org