Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/N4lMwThtKvWWptabTfof3cwNPx4.roa
File: N4lMwThtKvWWptabTfof3cwNPx4.roa (raw, json)
Hash identifier: sq7bL0TojBtvnqPrj53YCr+x/Gi6y7wTkdkzIwHG8Dk=
Subject key identifier: 37:89:4C:C1:38:6D:2A:F5:96:A6:D6:9B:4D:FA:1F:DD:CC:0D:3F:1E
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 03276CB6
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/N4lMwThtKvWWptabTfof3cwNPx4.roa
Signing time: Sat 01 Jan 2022 10:54:52 +0000
ROA not before: Sat 01 Jan 2022 10:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209588
IP address blocks: 141.98.82.0/24 maxlen: 24
141.98.83.0/24 maxlen: 24
2a10:9107:f000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52915382 (0x3276cb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jan 1 10:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37894cc1386d2af596a6d69b4dfa1fddcc0d3f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:f7:e6:0f:f4:06:1d:03:fe:20:06:c3:81:
e4:d4:7a:ac:83:ae:c2:1e:8a:f1:b6:47:da:b8:f5:
fa:8d:fa:82:a1:30:ed:46:37:04:15:2a:bd:e0:df:
37:53:ca:12:1d:4c:9e:30:1e:99:2e:d0:26:b1:00:
78:8a:e6:8a:24:a4:9f:87:fa:d6:98:05:04:0b:96:
38:fa:a8:ab:2b:f5:6b:e0:d8:5c:0b:c8:84:46:17:
d4:3e:fa:6b:48:6a:49:86:fe:97:bf:2d:5b:48:95:
9a:3b:1b:d1:20:82:4c:fe:53:1d:ec:06:29:09:0d:
2f:12:d2:f8:0d:db:f5:10:86:0f:be:82:79:6d:15:
ac:e5:39:59:f6:ba:b0:9e:1b:9a:77:9c:df:d2:26:
02:30:8f:62:6b:29:8e:99:95:d7:64:c2:41:46:f2:
a2:c1:44:ff:42:fb:8a:de:de:13:5b:90:9f:28:e2:
05:c3:cd:54:c4:89:cd:24:e5:1d:ed:be:60:e7:44:
42:40:77:c4:21:36:69:54:a2:c0:8b:62:3d:54:a3:
47:55:7e:e9:e7:7c:f8:10:65:be:7d:e6:41:44:0f:
0c:7c:85:4d:42:63:ba:0c:07:dd:b2:59:f3:1b:f4:
23:58:50:bf:6d:b9:2f:6d:06:f0:fe:ee:22:87:2e:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:89:4C:C1:38:6D:2A:F5:96:A6:D6:9B:4D:FA:1F:DD:CC:0D:3F:1E
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/N4lMwThtKvWWptabTfof3cwNPx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.82.0/23
IPv6:
2a10:9107:f000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:ef:ef:09:9c:48:df:f7:ad:e7:ca:c3:c7:c7:b6:57:8b:8d:
92:90:8e:9f:73:40:7a:a2:22:ba:c6:03:f4:fc:74:e2:58:78:
56:60:68:24:82:0d:bf:7e:3a:25:9e:ff:f8:96:7c:36:6e:64:
77:85:29:e5:c8:98:fc:7c:b3:29:87:4e:22:a1:20:9d:16:62:
06:8d:46:00:10:7f:1e:36:f4:61:7e:35:c9:8f:c7:17:27:70:
87:3d:64:ed:bb:76:e4:f6:ee:a8:91:ed:f3:6b:41:26:32:51:
e4:57:00:d2:c2:1e:8f:2c:f4:9d:98:e9:36:23:0d:62:ab:22:
aa:a4:4d:f6:1d:a7:f9:8e:cd:70:5e:e2:9c:12:9e:ec:5e:e7:
84:f1:8c:55:88:21:5a:81:58:35:92:c7:31:ee:d4:42:86:69:
64:6a:5a:9a:1e:05:2b:c0:cb:24:65:d0:d0:a0:a6:c1:fc:0b:
d7:24:2b:a6:7f:f4:56:da:86:c2:fb:ce:76:6f:d2:fe:52:c2:
d6:7e:6e:27:01:c4:c5:89:08:6b:42:78:13:cf:5b:3f:cf:c1:
51:74:28:07:33:33:79:e7:4e:82:7b:9d:68:d4:cf:f6:6a:b3:
af:6d:0f:e8:4c:f6:e1:3b:a9:ef:80:a9:4f:c2:3a:04:e9:05:
04:af:6f:77
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIEAydstjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YmM3ODQwOTIwZDFjNzA5ZmYyOTlhZWQzNjgyYzIzZmI0MzI3NjdkMB4XDTIyMDEw
MTEwNTQ1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc4OTRjYzEzODZk
MmFmNTk2YTZkNjliNGRmYTFmZGRjYzBkM2YxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALa69+YP9AYdA/4gBsOB5NR6rIOuwh6K8bZH2rj1+o36gqEw
7UY3BBUqveDfN1PKEh1MnjAemS7QJrEAeIrmiiSkn4f61pgFBAuWOPqoqyv1a+DY
XAvIhEYX1D76a0hqSYb+l78tW0iVmjsb0SCCTP5THewGKQkNLxLS+A3b9RCGD76C
eW0VrOU5Wfa6sJ4bmnec39ImAjCPYmspjpmV12TCQUbyosFE/0L7it7eE1uQnyji
BcPNVMSJzSTlHe2+YOdEQkB3xCE2aVSiwItiPVSjR1V+6ed8+BBlvn3mQUQPDHyF
TUJjugwH3bJZ8xv0I1hQv225L20G8P7uIocu7+cCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBQ3iUzBOG0q9Zam1ptN+h/dzA0/HjAfBgNVHSMEGDAWgBTbx4QJINHHCf8p
mu02gsI/tDJ2fTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzI4ZUVDU0RSeHduX0tacnROb0xDUDdReWRuMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvOTUyMWUxLTc2MTAtNGQ0My04NjgzLTUxYmUyZjk2MDhiYy8x
L040bE13VGh0S3ZXV3B0YWJUZm9mM2N3TlB4NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
OTUyMWUxLTc2MTAtNGQ0My04NjgzLTUxYmUyZjk2MDhiYy8xLzI4ZUVDU0RSeHdu
X0tacnROb0xDUDdReWRuMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAY1iUjAOBAIAAjAIAwYEKhCRB/Aw
DQYJKoZIhvcNAQELBQADggEBAB7v7wmcSN/3refKw8fHtleLjZKQjp9zQHqiIrrG
A/T8dOJYeFZgaCSCDb9+OiWe//iWfDZuZHeFKeXImPx8symHTiKhIJ0WYgaNRgAQ
fx429GF+NcmPxxcncIc9ZO27duT27qiR7fNrQSYyUeRXANLCHo8s9J2Y6TYjDWKr
IqqkTfYdp/mOzXBe4pwSnuxe54TxjFWIIVqBWDWSxzHu1EKGaWRqWpoeBSvAyyRl
0NCgpsH8C9ckK6Z/9FbahsL7znZv0v5SwtZ+bicBxMWJCGtCeBPPWz/PwVF0KAcz
M3nnToJ7nWjUz/Zqs69tD+hM9uE7qe+AqU/COgTpBQSvb3c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:07 2024 by rpki-client on console-ams.rpki-client.org