Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/nGC0ZG8I5deP1zCHa91nIoJNXUM.roa
File: nGC0ZG8I5deP1zCHa91nIoJNXUM.roa (raw, json)
Hash identifier: RsSGLgvhTibBgBuhPBa9yy3ldnonjTeauouwLdAaLZQ=
Subject key identifier: 9C:60:B4:64:6F:08:E5:D7:8F:D7:30:87:6B:DD:67:22:82:4D:5D:43
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 018553921A4FF51DC62DD4A7D19912F1EC91
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/nGC0ZG8I5deP1zCHa91nIoJNXUM.roa
Signing time: Tue 27 Dec 2022 12:32:42 +0000
ROA not before: Tue 27 Dec 2022 12:32:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41114
IP address blocks: 147.78.164.0/22 maxlen: 22
45.157.248.0/22 maxlen: 22
193.148.80.0/22 maxlen: 22
185.98.64.0/22 maxlen: 22
62.192.140.0/22 maxlen: 22
213.226.72.0/22 maxlen: 22
2a0a:7980::/32 maxlen: 32
2a0d:e6c0::/32 maxlen: 32
2a00:7aa0::/32 maxlen: 32
2a09:4380::/32 maxlen: 32
2a09:26c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:92:1a:4f:f5:1d:c6:2d:d4:a7:d1:99:12:f1:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Dec 27 12:32:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c60b4646f08e5d78fd730876bdd6722824d5d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f4:2e:1a:46:2b:40:95:74:7d:bf:3f:e3:4d:
f7:80:2f:73:e6:3a:08:1a:5c:af:73:78:b7:bc:67:
f1:6e:3d:37:b7:8d:18:1f:5e:ef:f7:4c:b6:26:84:
06:2e:96:65:18:05:76:69:66:eb:c8:b8:39:d7:f8:
3f:1b:8b:8d:71:de:46:1c:86:50:5b:aa:bd:e7:e9:
03:ac:42:69:c8:e5:27:33:96:5b:be:13:47:8e:f2:
f1:23:5a:8d:4d:73:65:f1:b4:2d:7c:df:ca:26:d8:
ed:72:e1:19:06:dd:51:3f:15:21:0f:d0:7a:9c:70:
22:51:8a:9d:3a:ff:dd:66:68:01:59:c4:bf:a2:c5:
6f:df:92:e9:2e:dd:44:67:cd:e4:1d:b8:9c:79:5a:
5a:22:31:4f:0c:a0:66:86:d2:f5:bf:e0:86:48:42:
f9:86:4f:6e:5d:f6:92:54:3f:e8:b8:63:7b:bb:aa:
3a:b4:44:83:9b:ec:3a:da:92:7c:4e:23:fa:b5:12:
2d:c0:2b:5b:04:73:ce:28:c7:c7:f3:1e:70:ca:81:
18:99:fe:7e:7d:af:57:60:5e:f6:4a:06:ce:72:ca:
97:ca:34:5c:0c:b5:3c:9d:5d:22:15:c1:43:8c:a6:
5f:41:b3:44:64:27:6a:5e:ef:7e:e0:1f:fa:a2:84:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:60:B4:64:6F:08:E5:D7:8F:D7:30:87:6B:DD:67:22:82:4D:5D:43
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/nGC0ZG8I5deP1zCHa91nIoJNXUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.248.0/22
62.192.140.0/22
147.78.164.0/22
185.98.64.0/22
193.148.80.0/22
213.226.72.0/22
IPv6:
2a00:7aa0::/32
2a09:26c0::/32
2a09:4380::/32
2a0a:7980::/32
2a0d:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
83:63:ba:bd:c1:18:98:e6:96:7d:0b:99:bc:29:e9:f4:e9:bc:
8c:fc:d5:0f:9b:19:b6:26:67:b1:5c:69:d8:b6:31:57:cf:2c:
73:69:0d:48:d9:fd:5b:47:39:8e:3c:b4:8d:e6:8b:77:6d:7c:
32:a9:3a:78:ec:51:3d:10:13:ed:54:45:be:2a:09:a5:00:bd:
1c:17:d8:3c:91:b7:c6:30:59:fc:f8:25:b4:59:d4:6a:01:ad:
60:e6:06:eb:c8:3b:a0:8d:86:d5:0f:51:72:02:3d:37:d3:a9:
c1:31:8d:43:75:0a:95:b1:64:09:a5:db:e3:2b:97:95:33:f4:
bd:2f:d7:02:47:21:a3:71:d0:cc:ee:86:cb:88:4a:4a:3b:01:
aa:3b:d4:f4:b9:97:52:b9:71:00:a1:a7:b1:36:9d:3f:a7:8c:
39:a4:ac:21:42:59:5d:6a:14:52:e8:89:db:25:65:eb:a0:56:
df:8e:89:2b:61:82:e3:da:4d:ad:ef:48:56:54:c6:28:92:cb:
95:05:1d:74:68:b6:79:ad:3d:09:9e:e5:87:b0:ab:d7:39:39:
fa:e0:db:af:5a:ce:98:48:9a:fc:ad:1c:1c:1e:83:cb:df:7b:
2c:44:d2:e5:b7:9c:4c:5c:fa:f0:f5:10:9e:6c:06:a9:22:09:
ab:09:12:e8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAYVTkhpP9R3GLdSn0ZkS8eyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGNmMjZmNzQ4NjA1ODhjYWM2YmFlMTdmOTlkZTIyZGJj
NDlhZTYwHhcNMjIxMjI3MTIzMjQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzYwYjQ2NDZmMDhlNWQ3OGZkNzMwODc2YmRkNjcyMjgyNGQ1ZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfQuGkYrQJV0fb8/4033gC9z5joI
Glyvc3i3vGfxbj03t40YH17v90y2JoQGLpZlGAV2aWbryLg51/g/G4uNcd5GHIZQ
W6q95+kDrEJpyOUnM5ZbvhNHjvLxI1qNTXNl8bQtfN/KJtjtcuEZBt1RPxUhD9B6
nHAiUYqdOv/dZmgBWcS/osVv35LpLt1EZ83kHbiceVpaIjFPDKBmhtL1v+CGSEL5
hk9uXfaSVD/ouGN7u6o6tESDm+w62pJ8TiP6tRItwCtbBHPOKMfH8x5wyoEYmf5+
fa9XYF72SgbOcsqXyjRcDLU8nV0iFcFDjKZfQbNEZCdqXu9+4B/6ooQTPwIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFJxgtGRvCOXXj9cwh2vdZyKCTV1DMB8GA1UdIwQY
MBaAFIzc8m90hgWIysa64X+Z3iLbxJrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMt
MmZiMjVhYmZkYzUzLzEvbkdDMFpHOEk1ZGVQMXpDSGE5MW5Jb0pOWFVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMtMmZiMjVhYmZkYzUz
LzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAqBAIAATAkAwQCLZ34AwQC
PsCMAwQCk06kAwQCuWJAAwQCwZRQAwQC1eJIMCkEAgACMCMDBQAqAHqgAwUAKgkm
wAMFACoJQ4ADBQAqCnmAAwUAKg3mwDANBgkqhkiG9w0BAQsFAAOCAQEAg2O6vcEY
mOaWfQuZvCnp9Om8jPzVD5sZtiZnsVxp2LYxV88sc2kNSNn9W0c5jjy0jeaLd218
Mqk6eOxRPRAT7VRFvioJpQC9HBfYPJG3xjBZ/PgltFnUagGtYOYG68g7oI2G1Q9R
cgI9N9OpwTGNQ3UKlbFkCaXb4yuXlTP0vS/XAkcho3HQzO6Gy4hKSjsBqjvU9LmX
UrlxAKGnsTadP6eMOaSsIUJZXWoUUuiJ2yVl66BW346JK2GC49pNre9IVlTGKJLL
lQUddGi2ea09CZ7lh7Cr1zk5+uDbr1rOmEia/K0cHB6Dy997LETS5becTFz68PUQ
nmwGqSIJqwkS6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:32 2024 by rpki-client on console-ams.rpki-client.org