Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/NbNFXeQ_5eiZIpTRkxIoO5BIGTU.roa
File: NbNFXeQ_5eiZIpTRkxIoO5BIGTU.roa (raw, json)
Hash identifier: uuoihk/qNRd3BwvU8VHIh51MG4RJ9ApEof71nZaTHQ8=
Subject key identifier: 35:B3:45:5D:E4:3F:E5:E8:99:22:94:D1:93:12:28:3B:90:48:19:35
Certificate issuer: /CN=bd2eac0200de608ec967aad178e400fde7880737
Certificate serial: 01841E66E7CC769C13351E9B1E3BBD82D062
Authority key identifier: BD:2E:AC:02:00:DE:60:8E:C9:67:AA:D1:78:E4:00:FD:E7:88:07:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vS6sAgDeYI7JZ6rReOQA_eeIBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/NbNFXeQ_5eiZIpTRkxIoO5BIGTU.roa
Signing time: Fri 28 Oct 2022 11:42:51 +0000
ROA not before: Fri 28 Oct 2022 11:42:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209288
IP address blocks: 94.142.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:66:e7:cc:76:9c:13:35:1e:9b:1e:3b:bd:82:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2eac0200de608ec967aad178e400fde7880737
Validity
Not Before: Oct 28 11:42:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35b3455de43fe5e8992294d19312283b90481935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:93:bf:fd:4b:9b:96:27:2b:59:a4:56:fc:
39:21:2c:8f:ed:e1:b2:54:cc:49:c0:5f:4b:61:ce:
24:df:d7:5e:f0:99:f4:47:a1:77:97:4a:24:b0:d2:
e2:75:dc:06:e8:3f:39:95:19:5f:a6:92:0e:a6:ed:
0a:39:e2:9f:d9:84:48:87:e8:b7:fc:0d:11:f6:7f:
fa:35:31:fa:68:4a:eb:73:70:99:0f:9a:64:2a:f3:
1a:d4:d5:a5:fb:ee:da:59:8a:cc:f0:36:8e:1a:fd:
b0:30:b9:f8:84:b9:ba:1f:6c:25:7b:ec:8e:c3:92:
7d:1e:c1:dd:b2:10:6e:be:d9:40:06:9f:16:f8:56:
e6:84:53:32:ba:39:63:44:dd:a2:f0:80:f6:7b:d7:
b9:bb:85:f4:a8:88:99:95:6b:3e:35:0b:e6:b2:4b:
10:1f:5c:45:10:ee:25:e8:03:52:a1:a1:bd:a4:f8:
65:ef:79:21:6a:e4:dd:85:f3:6a:ea:29:38:d0:8e:
e0:8f:0a:5d:96:4d:0f:9e:11:24:9e:e3:a2:29:fc:
c6:a7:52:b9:63:20:97:9e:b8:80:07:12:ae:e1:01:
1c:c4:7b:bb:72:09:db:c6:ff:c8:00:1c:fa:ff:e9:
4e:24:1a:dc:90:34:41:57:01:d8:6a:83:7e:94:e7:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:45:5D:E4:3F:E5:E8:99:22:94:D1:93:12:28:3B:90:48:19:35
X509v3 Authority Key Identifier:
keyid:BD:2E:AC:02:00:DE:60:8E:C9:67:AA:D1:78:E4:00:FD:E7:88:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vS6sAgDeYI7JZ6rReOQA_eeIBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/NbNFXeQ_5eiZIpTRkxIoO5BIGTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/vS6sAgDeYI7JZ6rReOQA_eeIBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:80:dd:41:aa:f0:ca:49:dc:f4:e8:e8:cb:d8:ef:46:d5:10:
68:4d:a0:ac:67:be:d0:10:1c:40:7f:e0:fc:93:7a:77:54:d1:
60:a6:cc:ef:e4:bf:72:c0:6e:ee:aa:e1:e6:ce:95:4a:2e:c4:
9f:38:cb:fe:21:4c:9b:5b:44:46:ae:20:27:c5:6e:bb:89:36:
d3:45:91:e4:28:63:e8:66:30:33:f2:8b:c3:b4:55:f2:b6:76:
15:d7:ae:a1:42:14:65:c1:49:aa:8e:47:72:cd:9f:c0:43:99:
15:d5:d6:91:30:53:20:27:9d:7c:07:cf:13:16:2f:69:06:8c:
18:74:f1:5d:3f:38:e5:ed:9a:33:ee:3c:f5:01:a8:ed:34:be:
3a:70:4d:d0:09:64:49:9a:f0:a6:b4:d8:06:c7:f1:ce:2d:6a:
0f:49:43:39:f4:c0:57:dd:9a:1a:ef:df:3f:9d:01:8c:44:d2:
05:82:ef:62:15:d1:2d:74:9f:5a:ce:1c:c6:9f:81:de:c0:6d:
79:45:c8:cf:9e:2d:c9:ef:24:23:39:b2:75:cc:45:eb:98:82:
2a:bc:a4:6f:bf:5f:d3:d5:eb:37:88:d8:5a:c8:5e:e0:68:a2:
e7:9e:9f:e1:56:37:2c:12:e9:d9:3a:5f:0e:86:93:26:80:39:
d0:bf:68:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQeZufMdpwTNR6bHju9gtBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMmVhYzAyMDBkZTYwOGVjOTY3YWFkMTc4ZTQwMGZkZTc4
ODA3MzcwHhcNMjIxMDI4MTE0MjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWIzNDU1ZGU0M2ZlNWU4OTkyMjk0ZDE5MzEyMjgzYjkwNDgxOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZOTv/1Lm5YnK1mkVvw5ISyP7eGy
VMxJwF9LYc4k39de8Jn0R6F3l0oksNLiddwG6D85lRlfppIOpu0KOeKf2YRIh+i3
/A0R9n/6NTH6aErrc3CZD5pkKvMa1NWl++7aWYrM8DaOGv2wMLn4hLm6H2wle+yO
w5J9HsHdshBuvtlABp8W+FbmhFMyujljRN2i8ID2e9e5u4X0qIiZlWs+NQvmsksQ
H1xFEO4l6ANSoaG9pPhl73khauTdhfNq6ik40I7gjwpdlk0PnhEknuOiKfzGp1K5
YyCXnriABxKu4QEcxHu7cgnbxv/IABz6/+lOJBrckDRBVwHYaoN+lOfQ9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDWzRV3kP+XomSKU0ZMSKDuQSBk1MB8GA1UdIwQY
MBaAFL0urAIA3mCOyWeq0XjkAP3niAc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlM2c0FnRGVZSTdKWjZyUmVPUUFfZWVJQnpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZTNiZGQtNmJjNi00MTY5LTk0YjEt
MmE4Zjc5ZDAzMGY4LzEvTmJORlhlUV81ZWlaSXBUUmt4SW9PNUJJR1RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xZTNiZGQtNmJjNi00MTY5LTk0YjEtMmE4Zjc5ZDAzMGY4
LzEvdlM2c0FnRGVZSTdKWjZyUmVPUUFfZWVJQnpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo79MA0G
CSqGSIb3DQEBCwUAA4IBAQAugN1BqvDKSdz06OjL2O9G1RBoTaCsZ77QEBxAf+D8
k3p3VNFgpszv5L9ywG7uquHmzpVKLsSfOMv+IUybW0RGriAnxW67iTbTRZHkKGPo
ZjAz8ovDtFXytnYV166hQhRlwUmqjkdyzZ/AQ5kV1daRMFMgJ518B88TFi9pBowY
dPFdPzjl7Zoz7jz1AajtNL46cE3QCWRJmvCmtNgGx/HOLWoPSUM59MBX3Zoa798/
nQGMRNIFgu9iFdEtdJ9azhzGn4HewG15RcjPni3J7yQjObJ1zEXrmIIqvKRvv1/T
1es3iNhayF7gaKLnnp/hVjcsEunZOl8OhpMmgDnQv2jR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:35 2024 by rpki-client on console-fra.rpki-client.org