Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/DVRRC6kr9-0SSpZFfXDLH7M4Hco.roa
File: DVRRC6kr9-0SSpZFfXDLH7M4Hco.roa (raw, json)
Hash identifier: 86Qhqxu2AzxXKuB4E4AgHUOt5B1d5YuvQZ4h/qfxmj4=
Subject key identifier: 0D:54:51:0B:A9:2B:F7:ED:12:4A:96:45:7D:70:CB:1F:B3:38:1D:CA
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 0293D9CE
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/DVRRC6kr9-0SSpZFfXDLH7M4Hco.roa
Signing time: Sat 01 Jan 2022 16:02:34 +0000
ROA not before: Sat 01 Jan 2022 16:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198218
IP address blocks: 164.40.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43243982 (0x293d9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jan 1 16:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d54510ba92bf7ed124a96457d70cb1fb3381dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:70:ac:44:ea:0e:7c:fe:62:85:c8:5a:99:
7f:c1:84:81:37:3a:c5:fb:ee:e7:87:a9:89:bc:b9:
30:d0:c4:19:af:78:16:97:9c:90:90:cb:a6:b7:8d:
e4:31:a2:cc:c4:07:b8:a5:b8:3f:9c:d2:fc:b7:bb:
73:c3:d3:85:65:cc:fc:44:7c:43:ed:e6:ce:86:f2:
01:08:26:a8:60:ad:1a:c5:0a:2d:bf:3d:8a:da:f0:
7f:cf:f0:67:41:b7:86:44:8c:b9:a4:c8:33:c9:e9:
fd:78:23:bd:4e:27:bc:2c:13:46:27:75:6b:81:b7:
e4:bd:bb:2a:7a:4e:09:8f:2d:99:bb:db:e8:ab:db:
7b:1e:0e:88:53:51:e4:5d:05:8c:56:2e:45:86:97:
1c:59:13:1e:b4:fa:68:50:a2:e7:b8:b8:08:86:4e:
26:4b:a4:20:eb:0c:86:47:e6:92:8c:eb:c6:70:3a:
9f:a3:30:23:77:7c:77:f7:bf:c5:e3:1f:91:4a:36:
0e:da:41:72:e0:af:b1:67:4c:9e:f7:e0:fb:8c:f1:
d1:6b:f0:30:96:a9:8a:a7:24:c4:45:cd:70:cd:5d:
15:54:41:a1:a0:4f:43:f2:21:93:4a:81:3a:84:c3:
96:a5:07:56:73:76:45:9b:cc:dc:79:67:23:de:6d:
a7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:51:0B:A9:2B:F7:ED:12:4A:96:45:7D:70:CB:1F:B3:38:1D:CA
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/DVRRC6kr9-0SSpZFfXDLH7M4Hco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.160.0/21
Signature Algorithm: sha256WithRSAEncryption
38:f1:82:f0:f0:b2:13:88:18:b2:0b:05:fc:ee:a0:2c:f4:72:
ad:2a:92:88:e1:30:cc:fb:28:7b:9e:0b:5d:2f:e6:5d:b7:d0:
9e:9d:bc:cd:25:3a:d8:0e:12:83:11:84:a4:a2:70:22:3f:37:
1e:9d:d3:d4:20:d3:94:4f:a8:32:a1:e1:84:1e:42:0b:de:36:
e4:74:db:fc:12:67:45:12:e0:f4:41:f2:47:7e:f1:91:1c:68:
05:5e:cb:15:9d:ec:59:d1:f7:99:c9:24:3e:85:fe:63:73:7f:
1a:ae:3c:b4:48:2e:06:61:29:06:b4:05:12:e3:d6:78:dc:51:
aa:ac:5b:14:06:b3:eb:95:cc:68:65:9e:0c:a4:99:aa:4b:03:
84:b9:51:7e:5e:2d:09:fe:77:21:57:a1:f8:04:e3:44:12:4e:
0d:50:25:18:3b:f9:06:b0:f5:94:ea:79:97:d2:55:d5:e5:bc:
51:af:84:42:6c:46:3c:6d:26:93:b2:a1:44:ea:f5:70:24:ee:
3b:ee:02:6a:0e:f3:78:25:4f:1c:fd:bd:95:3a:93:de:f0:01:
f7:23:0f:42:c8:26:14:7a:b0:85:61:82:e6:74:9d:13:72:a9:
3d:03:25:39:81:c4:3e:5b:5d:58:f4:e4:15:9f:dd:da:08:2c:
75:9f:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:07 2023 by rpki-client on console-ams.rpki-client.org