Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/NP7MveFRV0i9MHHPvkT8SLrrsIE.roa
File: NP7MveFRV0i9MHHPvkT8SLrrsIE.roa (raw, json)
Hash identifier: wHQztyT2CfkFGXHYip5R9ZmXrVWYMrvIgYUePXraLtw=
Subject key identifier: 34:FE:CC:BD:E1:51:57:48:BD:30:71:CF:BE:44:FC:48:BA:EB:B0:81
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0184F5A4F917B4E71CA6FC1FBF883957FFA7
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/NP7MveFRV0i9MHHPvkT8SLrrsIE.roa
Signing time: Fri 09 Dec 2022 06:49:00 +0000
ROA not before: Fri 09 Dec 2022 06:49:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.126.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:a4:f9:17:b4:e7:1c:a6:fc:1f:bf:88:39:57:ff:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Dec 9 06:49:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34feccbde1515748bd3071cfbe44fc48baebb081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:e2:59:c5:21:6f:5c:bb:96:86:9f:e2:62:
13:9c:9b:b1:9e:59:6e:b4:2e:54:6c:c3:72:da:a8:
53:78:ce:91:b4:11:a8:4c:28:6a:8c:d6:67:a2:23:
2f:15:d8:8a:e5:ce:09:90:1c:44:03:8a:24:ed:22:
e1:2f:b3:65:30:85:35:14:27:c5:21:b3:0f:75:0a:
b0:ed:23:24:b0:8c:c7:fc:1b:99:4e:61:57:02:5f:
d5:9f:12:61:8e:dc:1d:74:74:33:4e:b6:3b:61:79:
86:c8:5e:92:c9:b0:23:b5:14:a1:03:f1:f5:3d:48:
18:24:f4:c3:2d:a1:30:79:48:50:cc:0e:19:6c:4c:
fe:dd:ed:e6:92:69:27:4f:58:ef:23:e9:92:4c:4a:
ff:ce:88:5a:78:63:bf:03:22:63:58:ae:95:fb:46:
90:a9:41:3c:2b:b6:2d:a4:6c:f3:bd:fa:a2:1e:e4:
dc:96:75:79:54:23:5c:fd:63:35:70:e9:c8:30:85:
fd:a3:80:89:59:da:f1:bb:45:b2:67:28:63:02:80:
1c:e6:82:90:e3:f6:58:f5:00:05:88:66:8a:56:da:
3d:0c:2e:95:23:46:1e:28:30:74:01:16:46:26:41:
e9:7e:f0:d8:de:6a:c6:b9:95:ae:3c:56:78:33:4a:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FE:CC:BD:E1:51:57:48:BD:30:71:CF:BE:44:FC:48:BA:EB:B0:81
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/NP7MveFRV0i9MHHPvkT8SLrrsIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
78:75:c9:09:c2:a6:2c:6d:ba:c5:94:0b:46:37:a8:47:16:e5:
4d:45:d8:98:90:7b:ad:b3:51:a9:fa:0b:ab:a3:a7:37:a8:4b:
e7:bd:f1:fe:07:72:0a:37:e4:87:98:69:7f:82:18:3c:05:e4:
42:70:d8:bd:78:75:f0:9e:06:bc:b0:3b:4f:6b:54:cc:15:d7:
84:13:86:f4:dd:b8:66:37:8a:55:f7:4e:c9:c2:ee:95:42:fb:
4b:3a:5a:15:54:93:c3:1d:9f:c1:f0:07:c3:cc:47:f0:10:dc:
5c:06:79:a2:3f:b6:df:a2:c4:67:5e:8f:88:40:5e:df:bf:8a:
58:12:51:71:2b:8b:c5:e1:18:24:4b:7d:92:37:fa:cb:e5:0b:
5d:10:10:5f:79:9b:68:e4:42:9e:8a:67:d6:13:bc:a9:4a:53:
2c:44:94:35:b9:bd:62:ff:ff:3a:b8:5b:01:01:da:5b:62:89:
ff:59:2f:84:b8:a6:ee:86:bc:79:0a:5e:99:aa:81:f7:d8:c1:
57:70:11:d7:a5:b5:1d:9e:17:1f:4e:19:7f:57:e9:94:36:23:
e0:8f:2e:87:0e:86:b8:a7:bf:9b:cd:1f:9a:ac:de:b5:cf:10:
3c:ce:1a:1b:4d:44:c8:6a:45:13:b5:54:d2:75:a3:83:15:5e:
8b:08:a4:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYT1pPkXtOccpvwfv4g5V/+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjIxMjA5MDY0OTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGZlY2NiZGUxNTE1NzQ4YmQzMDcxY2ZiZTQ0ZmM0OGJhZWJiMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwniWcUhb1y7loaf4mITnJuxnllu
tC5UbMNy2qhTeM6RtBGoTChqjNZnoiMvFdiK5c4JkBxEA4ok7SLhL7NlMIU1FCfF
IbMPdQqw7SMksIzH/BuZTmFXAl/VnxJhjtwddHQzTrY7YXmGyF6SybAjtRShA/H1
PUgYJPTDLaEweUhQzA4ZbEz+3e3mkmknT1jvI+mSTEr/zohaeGO/AyJjWK6V+0aQ
qUE8K7YtpGzzvfqiHuTclnV5VCNc/WM1cOnIMIX9o4CJWdrxu0WyZyhjAoAc5oKQ
4/ZY9QAFiGaKVto9DC6VI0YeKDB0ARZGJkHpfvDY3mrGuZWuPFZ4M0o0AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDT+zL3hUVdIvTBxz75E/Ei667CBMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvTlA3TXZlRlJWMGk5TUhIUHZrVDhTTHJyc0lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6eMA0G
CSqGSIb3DQEBCwUAA4IBAQB4dckJwqYsbbrFlAtGN6hHFuVNRdiYkHuts1Gp+gur
o6c3qEvnvfH+B3IKN+SHmGl/ghg8BeRCcNi9eHXwnga8sDtPa1TMFdeEE4b03bhm
N4pV907Jwu6VQvtLOloVVJPDHZ/B8AfDzEfwENxcBnmiP7bfosRnXo+IQF7fv4pY
ElFxK4vF4RgkS32SN/rL5QtdEBBfeZto5EKeimfWE7ypSlMsRJQ1ub1i//86uFsB
AdpbYon/WS+EuKbuhrx5Cl6ZqoH32MFXcBHXpbUdnhcfThl/V+mUNiPgjy6HDoa4
p7+bzR+arN61zxA8zhobTUTIakUTtVTSdaODFV6LCKTx
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:38 2024 by rpki-client on console-ams.rpki-client.org