Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NXCpuo6iti24pHnDZOO2sM5UilM.roa
File: NXCpuo6iti24pHnDZOO2sM5UilM.roa (raw, json)
Hash identifier: UVq6xxoGOBg1ruZeAqsuBKHSNZRoGE73pVpOcXYrKs4=
Subject key identifier: 35:70:A9:BA:8E:A2:B6:2D:B8:A4:79:C3:64:E3:B6:B0:CE:54:8A:53
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0183ABBB7A05A338528AE02C15145E705A7C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NXCpuo6iti24pHnDZOO2sM5UilM.roa
Signing time: Thu 06 Oct 2022 05:18:53 +0000
ROA not before: Thu 06 Oct 2022 05:18:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207137
IP address blocks: 45.139.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:bb:7a:05:a3:38:52:8a:e0:2c:15:14:5e:70:5a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 6 05:18:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3570a9ba8ea2b62db8a479c364e3b6b0ce548a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:51:40:ba:89:6a:f6:1a:cc:99:c6:69:bf:
6e:77:58:64:b6:e3:35:a0:49:60:4f:c6:14:8c:f2:
23:19:f7:32:a0:c6:8a:92:ef:24:cf:c5:07:50:e7:
63:d6:d5:da:af:73:01:70:ce:69:5b:5c:47:26:c9:
28:5f:7b:4c:75:8b:21:9e:1f:e1:52:a0:5e:32:d7:
ef:47:bd:9a:e3:d4:f3:2f:fc:f8:b8:14:a4:8f:dc:
28:e0:31:6d:0d:6f:15:df:f3:a2:ab:ff:79:39:10:
b6:4a:0d:e3:58:60:c9:2a:4e:01:aa:8d:b1:fb:37:
27:df:39:2a:93:4c:6b:d7:07:7f:2d:e0:c6:6b:26:
0b:85:20:88:8f:c2:1f:3a:56:05:30:61:c8:bd:11:
c7:28:4c:77:7e:b1:2e:90:41:64:d1:a6:8f:58:e1:
9c:08:91:49:12:4b:cf:6e:49:fb:22:e1:0a:b2:87:
0f:f3:76:8d:01:d5:9f:bf:0e:e3:a0:de:54:48:cc:
d4:07:99:59:6f:b2:03:12:d6:d6:c3:4e:59:36:95:
f2:6d:e5:c4:62:86:8e:75:97:66:e5:be:bf:85:2e:
dc:6d:18:68:8e:84:4a:4a:c2:25:72:91:6c:44:17:
ea:5c:59:04:b3:37:65:32:04:6e:4e:04:bc:6b:47:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:70:A9:BA:8E:A2:B6:2D:B8:A4:79:C3:64:E3:B6:B0:CE:54:8A:53
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NXCpuo6iti24pHnDZOO2sM5UilM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.252.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ab:db:28:bb:ea:26:82:18:03:fb:ce:6c:c6:47:05:4b:20:
74:2c:ea:91:12:35:48:c0:2d:9d:2d:9a:41:f5:31:21:1d:a7:
b0:ec:6d:c8:e9:24:9f:2e:43:a1:cb:5f:c5:a2:c3:b4:0a:05:
85:74:e1:a9:af:ca:56:54:39:f9:9a:d8:54:36:f3:46:02:1f:
26:d4:c5:e2:c5:c2:23:06:d9:56:74:2e:25:41:06:bf:97:38:
57:49:3d:10:9e:d8:5e:48:9d:0e:fe:b8:03:ba:ca:16:b2:5e:
0e:68:17:55:52:cf:77:8f:ec:cb:87:95:89:22:4e:55:5f:f4:
87:3b:1d:94:6e:6b:4c:38:6a:38:25:fc:8e:ea:d3:da:0e:12:
bf:02:26:01:ed:df:4c:ca:77:ae:7b:9a:96:07:56:12:c6:2a:
74:75:e5:71:d0:9f:e8:db:3e:aa:a0:a2:80:48:39:b5:e4:dd:
ec:d4:48:2d:34:0b:9c:2f:4c:19:21:c6:12:a6:c5:79:63:29:
c4:b1:85:60:5e:41:b5:ec:62:c2:76:07:f2:0b:9d:42:66:1b:
cb:f1:69:49:88:0c:6c:55:f9:1d:5c:d3:16:a4:e2:39:08:47:
74:da:c1:ab:00:10:49:2a:73:2e:37:b7:90:ae:f1:89:b0:81:
f9:0e:50:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOru3oFozhSiuAsFRRecFp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjIxMDA2MDUxODUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTcwYTliYThlYTJiNjJkYjhhNDc5YzM2NGUzYjZiMGNlNTQ4YTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtepRQLqJavYazJnGab9ud1hktuM1
oElgT8YUjPIjGfcyoMaKku8kz8UHUOdj1tXar3MBcM5pW1xHJskoX3tMdYshnh/h
UqBeMtfvR72a49TzL/z4uBSkj9wo4DFtDW8V3/Oiq/95ORC2Sg3jWGDJKk4Bqo2x
+zcn3zkqk0xr1wd/LeDGayYLhSCIj8IfOlYFMGHIvRHHKEx3frEukEFk0aaPWOGc
CJFJEkvPbkn7IuEKsocP83aNAdWfvw7joN5USMzUB5lZb7IDEtbWw05ZNpXybeXE
YoaOdZdm5b6/hS7cbRhojoRKSsIlcpFsRBfqXFkEszdlMgRuTgS8a0eQ/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVwqbqOorYtuKR5w2TjtrDOVIpTMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvTlhDcHVvNml0aTI0cEhuRFpPTzJzTTVVaWxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYv8MA0G
CSqGSIb3DQEBCwUAA4IBAQAoq9sou+omghgD+85sxkcFSyB0LOqREjVIwC2dLZpB
9TEhHaew7G3I6SSfLkOhy1/FosO0CgWFdOGpr8pWVDn5mthUNvNGAh8m1MXixcIj
BtlWdC4lQQa/lzhXST0QntheSJ0O/rgDusoWsl4OaBdVUs93j+zLh5WJIk5VX/SH
Ox2UbmtMOGo4JfyO6tPaDhK/AiYB7d9Myneue5qWB1YSxip0deVx0J/o2z6qoKKA
SDm15N3s1EgtNAucL0wZIcYSpsV5YynEsYVgXkG17GLCdgfyC51CZhvL8WlJiAxs
VfkdXNMWpOI5CEd02sGrABBJKnMuN7eQrvGJsIH5DlBZ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org