Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/NgnTy-OB3DLg1598Kfrlf31FbmQ.roa
File: NgnTy-OB3DLg1598Kfrlf31FbmQ.roa (raw, json)
Hash identifier: aw37FYaz9HngGQYS3JbZC3uatEH3o5nOuhfi93mh7KA=
Subject key identifier: 36:09:D3:CB:E3:81:DC:32:E0:D7:9F:7C:29:FA:E5:7F:7D:45:6E:64
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 06681592
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/NgnTy-OB3DLg1598Kfrlf31FbmQ.roa
Signing time: Thu 19 May 2022 12:21:29 +0000
ROA not before: Thu 19 May 2022 12:21:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1273
IP address blocks: 195.92.0.0/16 maxlen: 16
195.80.64.0/19 maxlen: 19
194.112.64.0/18 maxlen: 18
194.6.64.0/19 maxlen: 19
194.205.0.0/16 maxlen: 16
62.208.0.0/16 maxlen: 16
194.6.0.0/18 maxlen: 18
213.38.0.0/16 maxlen: 16
217.134.0.0/15 maxlen: 15
195.89.13.0/24 maxlen: 24
195.10.0.0/18 maxlen: 18
212.165.0.0/19 maxlen: 19
193.164.160.0/19 maxlen: 19
194.176.128.0/19 maxlen: 19
195.144.128.0/19 maxlen: 19
212.158.0.0/17 maxlen: 17
195.89.0.0/16 maxlen: 16
185.204.4.0/22 maxlen: 22
213.12.0.0/16 maxlen: 16
195.44.0.0/16 maxlen: 16
217.135.0.0/16 maxlen: 16
195.2.0.0/19 maxlen: 19
62.221.0.0/19 maxlen: 19
194.221.0.0/16 maxlen: 16
62.25.64.0/18 maxlen: 18
195.59.0.0/16 maxlen: 16
195.27.0.0/16 maxlen: 16
194.152.64.0/19 maxlen: 19
194.177.160.0/19 maxlen: 19
213.185.192.0/19 maxlen: 19
212.137.0.0/16 maxlen: 16
2001:5000::/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107484562 (0x6681592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: May 19 12:21:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3609d3cbe381dc32e0d79f7c29fae57f7d456e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:25:b6:7a:f5:09:38:69:a3:d7:97:ee:be:
6e:43:fe:39:0b:de:07:d3:78:47:62:92:19:06:a0:
b0:b7:c4:30:2a:12:b4:33:8f:33:db:2c:97:7c:b0:
db:eb:c2:ed:60:ff:7f:53:3f:4e:c6:51:b4:64:cf:
8c:b9:86:1d:32:70:7a:28:18:8d:c7:b9:34:f5:cb:
30:65:e4:59:13:fc:69:35:d9:14:7f:6e:f6:37:aa:
eb:30:ce:fd:a0:26:f9:b3:24:71:4f:b8:ab:32:f3:
0b:1d:7d:69:d8:27:f1:89:65:18:b2:cc:35:1e:09:
73:ca:b6:05:cc:99:4e:7d:a5:ec:1f:79:6f:2e:cb:
cf:90:55:5e:e0:03:1b:da:92:0a:56:d8:56:7b:61:
26:02:3b:17:3c:3e:05:2a:c7:2f:ab:62:c3:03:ca:
47:bd:5e:31:d1:a2:89:c0:f9:3f:6b:34:66:90:01:
12:64:2d:6e:bf:2b:17:fc:0b:e8:fc:0b:9f:23:35:
60:6e:45:ef:bb:7c:e6:28:f7:98:85:81:21:47:90:
0f:88:09:bd:bc:5c:07:58:4b:a2:bb:22:7b:17:7d:
34:69:b6:14:e8:af:38:a2:03:5f:e9:67:71:fd:74:
d4:1d:77:20:1b:0c:da:96:ef:21:48:2a:0c:77:0d:
c6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:09:D3:CB:E3:81:DC:32:E0:D7:9F:7C:29:FA:E5:7F:7D:45:6E:64
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/NgnTy-OB3DLg1598Kfrlf31FbmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.64.0/18
62.208.0.0/16
62.221.0.0/19
185.204.4.0/22
193.164.160.0/19
194.6.0.0-194.6.95.255
194.112.64.0/18
194.152.64.0/19
194.176.128.0/19
194.177.160.0/19
194.205.0.0/16
194.221.0.0/16
195.2.0.0/19
195.10.0.0/18
195.27.0.0/16
195.44.0.0/16
195.59.0.0/16
195.80.64.0/19
195.89.0.0/16
195.92.0.0/16
195.144.128.0/19
212.137.0.0/16
212.158.0.0/17
212.165.0.0/19
213.12.0.0/16
213.38.0.0/16
213.185.192.0/19
217.134.0.0/15
IPv6:
2001:5000::/21
Signature Algorithm: sha256WithRSAEncryption
13:9d:e5:02:ba:02:1b:ec:53:d1:cb:5f:a3:43:06:e5:b0:fb:
2b:dd:fd:ac:1c:3f:69:f1:42:b6:b0:ab:04:30:fa:1a:ca:bb:
9c:18:27:63:08:cc:2d:6c:af:df:fd:95:3d:4e:19:c2:84:c2:
ff:41:54:cb:8f:2f:b2:f8:ef:8d:3a:56:a8:6d:5c:34:64:1d:
84:e5:2f:67:8c:9e:47:c4:8d:48:10:10:ec:59:40:9c:5e:22:
ff:61:c9:61:28:51:b0:cd:3f:64:5d:77:5e:ab:fa:6a:4a:a4:
a8:b6:1d:e0:ee:da:70:de:f6:28:16:e2:31:05:03:b2:5d:a9:
b1:2f:59:39:08:89:f4:a8:06:94:85:78:1f:05:c6:20:bf:d5:
1d:66:9c:be:0c:43:9d:7a:09:66:ea:96:1c:6f:2b:ad:2e:4a:
23:6b:df:82:11:85:97:18:74:e0:18:d7:20:98:aa:eb:cc:25:
ca:44:11:51:81:a6:fe:ac:0c:f3:bc:09:fa:32:8f:ff:d0:b5:
8e:0f:c9:c4:98:4f:0f:42:1c:89:18:d1:d8:af:ad:37:42:b7:
5d:15:fd:0a:b7:56:cd:be:53:fd:15:9b:be:82:e4:3d:3b:4d:
6b:bc:35:ff:2f:d4:13:b2:f8:fd:ac:24:6e:a0:83:d1:30:7b:
c9:4c:62:71
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIEBmgVkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTg3NDZhNzZjZGE4MzY5MDA5ZDI4OTQxZWYxNTYyMzljNmE2M2ExMB4XDTIyMDUx
OTEyMjEyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzYwOWQzY2JlMzgx
ZGMzMmUwZDc5ZjdjMjlmYWU1N2Y3ZDQ1NmU2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYjJbZ69Qk4aaPXl+6+bkP+OQveB9N4R2KSGQagsLfEMCoS
tDOPM9ssl3yw2+vC7WD/f1M/TsZRtGTPjLmGHTJweigYjce5NPXLMGXkWRP8aTXZ
FH9u9jeq6zDO/aAm+bMkcU+4qzLzCx19adgn8YllGLLMNR4Jc8q2BcyZTn2l7B95
by7Lz5BVXuADG9qSClbYVnthJgI7Fzw+BSrHL6tiwwPKR71eMdGiicD5P2s0ZpAB
EmQtbr8rF/wL6PwLnyM1YG5F77t85ij3mIWBIUeQD4gJvbxcB1hLorsiexd9NGm2
FOivOKIDX+lncf101B13IBsM2pbvIUgqDHcNxlMCAwEAAaOCArkwggK1MB0GA1Ud
DgQWBBQ2CdPL44HcMuDXn3wp+uV/fUVuZDAfBgNVHSMEGDAWgBR6h0anbNqDaQCd
KJQe8VYjnGpjoTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VvZEdwMnphZzJrQW5TaVVIdkZXSTV4cVk2RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvOTEzZTEyLWY1ZWQtNDZmNC05ODJjLTUyZGVkZGRlZTM5My8x
L05nblR5LU9CM0RMZzE1OThLZnJsZjMxRmJtUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
OTEzZTEyLWY1ZWQtNDZmNC05ODJjLTUyZGVkZGRlZTM5My8xL2VvZEdwMnphZzJr
QW5TaVVIdkZXSTV4cVk2RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
zgYIKwYBBQUHAQcBAf8Egb4wgbswgaoEAgABMIGjAwQGPhlAAwMAPtADBAU+3QAD
BAK5zAQDBAXBpKAwCwMDAcIGAwQFwgZAAwQGwnBAAwQFwphAAwQFwrCAAwQFwrGg
AwMAws0DAwDC3QMEBcMCAAMEBsMKAAMDAMMbAwMAwywDAwDDOwMEBcNQQAMDAMNZ
AwMAw1wDBAXDkIADAwDUiQMEB9SeAAMEBdSlAAMDANUMAwMA1SYDBAXVucADAwHZ
hjAMBAIAAjAGAwQDIAFQMA0GCSqGSIb3DQEBCwUAA4IBAQATneUCugIb7FPRy1+j
QwblsPsr3f2sHD9p8UK2sKsEMPoayrucGCdjCMwtbK/f/ZU9ThnChML/QVTLjy+y
+O+NOlaobVw0ZB2E5S9njJ5HxI1IEBDsWUCcXiL/YclhKFGwzT9kXXdeq/pqSqSo
th3g7tpw3vYoFuIxBQOyXamxL1k5CIn0qAaUhXgfBcYgv9UdZpy+DEOdeglm6pYc
byutLkoja9+CEYWXGHTgGNcgmKrrzCXKRBFRgab+rAzzvAn6Mo//0LWOD8nEmE8P
QhyJGNHYr603QrddFf0Kt1bNvlP9FZu+guQ9O01rvDX/L9QTsvj9rCRuoIPRMHvJ
TGJx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:53 2024 by rpki-client on console-fra.rpki-client.org