Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/NxeQI0O6JLsVP8Z6dnJyYRtOxMo.roa
File: NxeQI0O6JLsVP8Z6dnJyYRtOxMo.roa (raw, json)
Hash identifier: tlA8i51063YlslsRmztuwXhONFA+Zcaudbqtsyxi+aQ=
Subject key identifier: 37:17:90:23:43:BA:24:BB:15:3F:C6:7A:76:72:72:61:1B:4E:C4:CA
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 098D19E0
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/NxeQI0O6JLsVP8Z6dnJyYRtOxMo.roa
Signing time: Tue 03 May 2022 21:08:12 +0000
ROA not before: Tue 03 May 2022 21:08:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212413
IP address blocks: 185.235.98.0/24 maxlen: 24
185.235.98.0/23 maxlen: 23
185.235.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160242144 (0x98d19e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: May 3 21:08:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3717902343ba24bb153fc67a767272611b4ec4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:b9:db:e7:01:26:10:e5:bd:1e:38:0c:e3:
2d:8e:4c:f9:14:40:52:2c:ca:1a:6a:ed:d2:d3:e5:
51:a7:7f:c5:d2:26:ee:fe:24:c7:64:da:1f:db:f7:
d1:67:30:7b:49:ee:38:87:08:d8:c2:da:5e:49:20:
f4:06:a7:4d:0b:81:02:34:b1:65:5b:4d:43:d9:e2:
fe:07:d3:6c:65:18:10:9a:ff:9e:b6:3f:90:98:88:
4b:6e:91:20:64:9e:35:15:7b:5e:31:33:2a:1a:d7:
31:f9:3d:ba:f4:3f:1b:81:ac:23:d7:8f:dd:a1:c0:
31:49:61:3d:13:ff:eb:a2:52:b6:55:fb:25:20:50:
8b:9d:d8:d0:03:84:96:37:51:61:38:5d:fd:db:79:
cc:6d:03:99:9d:6d:7f:46:db:3f:24:5e:0c:5c:f1:
f3:a3:f5:b3:16:82:6d:44:4c:f7:8d:68:69:18:53:
89:32:e4:b4:27:4d:11:b6:dc:f5:99:35:f2:5c:41:
f3:df:e6:05:5f:e2:01:01:16:16:45:a9:2c:ec:32:
ea:63:17:2a:5a:9d:be:38:74:06:38:0a:d3:83:97:
1b:1f:d8:6e:4c:5f:7c:f6:75:3f:54:f1:4b:7d:cc:
26:f9:37:b7:5b:92:60:a9:8b:fe:8b:54:60:a8:64:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:17:90:23:43:BA:24:BB:15:3F:C6:7A:76:72:72:61:1B:4E:C4:CA
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/NxeQI0O6JLsVP8Z6dnJyYRtOxMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.98.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:29:b5:e8:b7:ef:73:bc:f1:b9:87:28:a4:c7:d0:b4:ca:0a:
64:44:3d:61:1a:ac:10:82:8b:a6:04:c0:8d:a1:c0:b1:9e:fc:
95:e2:d9:ab:d0:12:ea:c4:8a:60:d9:fb:a5:a1:37:a3:2e:20:
da:b9:80:c2:c0:a8:8a:5b:d3:49:c9:cf:46:e1:f6:5c:63:f7:
45:17:04:4b:fc:72:e7:4c:4a:74:05:24:a9:77:e2:d2:5f:d0:
f2:e7:79:e7:65:cd:47:2d:15:79:40:4b:80:b1:a6:6e:e5:d2:
36:13:10:df:c9:9f:9a:e1:e5:f7:88:c7:16:29:b2:2c:fa:bf:
53:60:ef:77:64:52:31:8d:3a:5d:1b:ce:7d:7a:8f:e1:3d:b8:
6c:78:af:37:ab:bd:a5:2a:ff:3b:86:da:21:40:13:b8:b0:b6:
93:36:0e:58:ab:48:74:1e:b7:72:62:d4:f3:29:87:85:7c:f3:
ca:b1:6a:c3:a4:26:c4:f4:26:7f:83:aa:98:99:86:15:32:89:
46:ff:6a:7f:a9:a5:7c:a5:fb:ea:5a:7c:f0:44:f8:95:2c:89:
b7:45:a3:87:f6:e3:1b:e5:f6:89:d4:6b:e1:16:db:55:41:30:
2c:a9:9d:b3:dc:c0:f8:14:9a:5e:0e:c9:b1:5a:ac:fe:96:82:
49:68:74:76
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECY0Z4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZWQyZDgwMGRjNmMzM2I2OWZhNDcyOTFlMmYxNWIzMzVlYTM2MDBmMB4XDTIyMDUw
MzIxMDgxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzcxNzkwMjM0M2Jh
MjRiYjE1M2ZjNjdhNzY3MjcyNjExYjRlYzRjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJzOudvnASYQ5b0eOAzjLY5M+RRAUizKGmrt0tPlUad/xdIm
7v4kx2TaH9v30Wcwe0nuOIcI2MLaXkkg9AanTQuBAjSxZVtNQ9ni/gfTbGUYEJr/
nrY/kJiIS26RIGSeNRV7XjEzKhrXMfk9uvQ/G4GsI9eP3aHAMUlhPRP/66JStlX7
JSBQi53Y0AOEljdRYThd/dt5zG0DmZ1tf0bbPyReDFzx86P1sxaCbURM941oaRhT
iTLktCdNEbbc9Zk18lxB89/mBV/iAQEWFkWpLOwy6mMXKlqdvjh0BjgK04OXGx/Y
bkxffPZ1P1TxS33MJvk3t1uSYKmL/otUYKhkpusCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ3F5AjQ7okuxU/xnp2cnJhG07EyjAfBgNVHSMEGDAWgBTO0tgA3Gwztp+k
cpHi8VszXqNgDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3p0TFlBTnhzTTdhZnBIS1I0dkZiTTE2allBOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmIvZjg4ODU3LWNjMDUtNGJkYi05MWU2LWVkNGYwNjQzYmYyNS8x
L054ZVFJME82SkxzVlA4WjZkbkp5WVJ0T3hNby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIv
Zjg4ODU3LWNjMDUtNGJkYi05MWU2LWVkNGYwNjQzYmYyNS8xL3p0TFlBTnhzTTdh
ZnBIS1I0dkZiTTE2allBOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnrYjANBgkqhkiG9w0BAQsFAAOC
AQEADim16Lfvc7zxuYcopMfQtMoKZEQ9YRqsEIKLpgTAjaHAsZ78leLZq9AS6sSK
YNn7paE3oy4g2rmAwsCoilvTScnPRuH2XGP3RRcES/xy50xKdAUkqXfi0l/Q8ud5
52XNRy0VeUBLgLGmbuXSNhMQ38mfmuHl94jHFimyLPq/U2Dvd2RSMY06XRvOfXqP
4T24bHivN6u9pSr/O4baIUATuLC2kzYOWKtIdB63cmLU8ymHhXzzyrFqw6QmxPQm
f4OqmJmGFTKJRv9qf6mlfKX76lp88ET4lSyJt0Wjh/bjG+X2idRr4RbbVUEwLKmd
s9zA+BSaXg7JsVqs/paCSWh0dg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:41 2024 by rpki-client on console-fra.rpki-client.org