Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/nTMAdAYIeD9QphKc3iGMwGIHA-s.roa
File: nTMAdAYIeD9QphKc3iGMwGIHA-s.roa (raw, json)
Hash identifier: gOpc9UpcHTSVntwPxPYsms+mcexXccxBSwOITrhqk3Q=
Subject key identifier: 9D:33:00:74:06:08:78:3F:50:A6:12:9C:DE:21:8C:C0:62:07:03:EB
Certificate issuer: /CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Certificate serial: 0186BD766FBFC31A6990AEEF80513394B3B9
Authority key identifier: 72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/nTMAdAYIeD9QphKc3iGMwGIHA-s.roa
Signing time: Tue 07 Mar 2023 19:05:00 +0000
ROA not before: Tue 07 Mar 2023 19:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205893
IP address blocks: 194.15.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:76:6f:bf:c3:1a:69:90:ae:ef:80:51:33:94:b3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Validity
Not Before: Mar 7 19:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d3300740608783f50a6129cde218cc0620703eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:2f:c9:27:24:62:70:35:d5:a7:e8:a1:f8:
61:43:b8:23:85:e0:17:11:e2:40:ac:17:44:47:2c:
f0:d7:5a:fe:b6:8a:3c:61:59:68:bc:4d:f1:a9:54:
20:cb:b3:08:48:82:a1:1a:76:5d:26:b2:34:f0:17:
03:75:4b:1b:8d:52:f2:fa:a2:e7:ad:3c:6f:a7:35:
59:14:bb:b5:ae:fb:ac:a5:be:1d:b8:d1:5c:72:3c:
7b:28:f9:85:9f:6a:d2:b7:e4:13:62:c8:ad:85:74:
99:60:02:e8:67:e7:0b:f3:a7:68:ff:e0:ec:31:44:
c4:6c:5e:7e:3a:cb:27:e9:e4:6e:8d:f6:bd:a3:49:
a2:c3:ce:85:a3:b2:09:01:f4:8c:4d:e9:17:66:3e:
f8:5d:56:91:ce:de:be:b6:0f:4b:58:f4:1b:db:0f:
49:c7:da:93:c1:e0:1d:dd:a5:6a:4e:9c:c2:62:39:
11:36:ca:9f:c0:2d:87:76:fe:35:7a:fc:e2:4f:dd:
41:84:35:83:87:6f:cf:96:d2:dc:e5:79:99:70:d8:
dd:a2:6b:5c:3e:c3:20:4f:61:58:de:ce:13:10:fd:
07:aa:ef:6d:6e:2a:9a:db:a1:9d:b1:9b:cf:fd:2c:
2e:69:5a:c8:14:6f:52:c5:b4:81:bf:e6:3b:2f:76:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:00:74:06:08:78:3F:50:A6:12:9C:DE:21:8C:C0:62:07:03:EB
X509v3 Authority Key Identifier:
keyid:72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/nTMAdAYIeD9QphKc3iGMwGIHA-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/ciMl7PNoyRSKfEEoHWB_ptgEoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.45.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b0:dd:28:5f:b2:64:25:58:73:fd:34:bf:16:73:4c:56:d7:
49:18:8c:82:66:be:6b:73:56:28:21:5d:86:16:12:d8:6d:03:
6f:80:0e:27:f4:32:b2:1b:e0:6e:a3:b7:ba:de:b1:9c:57:6c:
1c:67:47:e2:7a:b0:4d:95:c2:8c:86:d1:99:97:94:f4:97:e6:
d1:41:57:5c:dc:4d:92:f3:37:30:5f:e4:2c:23:5e:bf:bf:75:
ad:7c:17:58:0e:56:13:0c:59:83:bc:d8:ef:3f:92:ac:58:50:
6b:3d:8c:d4:d9:f9:35:2a:c6:88:e0:5d:a2:e9:89:d2:ca:9a:
cf:66:4c:c3:a8:82:ca:3e:68:33:ec:6d:6b:8f:9c:e1:a9:cf:
fc:bf:f4:3d:0b:44:97:16:6d:b1:7b:d4:46:c4:53:78:3e:a1:
8c:22:10:ab:21:37:50:54:f2:5c:90:0a:73:18:22:7d:cd:92:
6e:1b:5c:7e:63:cf:f9:d8:72:37:00:6d:b1:8b:7e:46:70:2c:
44:5a:2b:0d:33:b3:d3:26:96:c1:e9:61:6b:e0:06:c1:04:0b:
ad:c1:13:bc:ba:d4:c9:8a:3e:41:58:71:b7:1e:9d:d4:4c:05:
70:9d:e0:5d:7a:09:7e:6c:21:f6:fd:83:68:cd:c9:bf:3f:10:
9c:49:fa:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa9dm+/wxppkK7vgFEzlLO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMjMyNWVjZjM2OGM5MTQ4YTdjNDEyODFkNjA3ZmE2ZDgw
NGEwYzkwHhcNMjMwMzA3MTkwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDMzMDA3NDA2MDg3ODNmNTBhNjEyOWNkZTIxOGNjMDYyMDcwM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbIvySckYnA11afoofhhQ7gjheAX
EeJArBdERyzw11r+too8YVlovE3xqVQgy7MISIKhGnZdJrI08BcDdUsbjVLy+qLn
rTxvpzVZFLu1rvuspb4duNFccjx7KPmFn2rSt+QTYsithXSZYALoZ+cL86do/+Ds
MUTEbF5+Ossn6eRujfa9o0miw86Fo7IJAfSMTekXZj74XVaRzt6+tg9LWPQb2w9J
x9qTweAd3aVqTpzCYjkRNsqfwC2Hdv41evziT91BhDWDh2/PltLc5XmZcNjdomtc
PsMgT2FY3s4TEP0Hqu9tbiqa26GdsZvP/SwuaVrIFG9SxbSBv+Y7L3YuWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ0zAHQGCHg/UKYSnN4hjMBiBwPrMB8GA1UdIwQY
MBaAFHIjJezzaMkUinxBKB1gf6bYBKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lNbDdQTm95UlNLZkVFb0hXQl9wdGdFb01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xYzA2MmEtMDRkNC00YzA1LWEyZDIt
OTBiZGNjNGFhNWRiLzEvblRNQWRBWUllRDlRcGhLYzNpR013R0lIQS1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xYzA2MmEtMDRkNC00YzA1LWEyZDItOTBiZGNjNGFhNWRi
LzEvY2lNbDdQTm95UlNLZkVFb0hXQl9wdGdFb01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg8tMA0G
CSqGSIb3DQEBCwUAA4IBAQBGsN0oX7JkJVhz/TS/FnNMVtdJGIyCZr5rc1YoIV2G
FhLYbQNvgA4n9DKyG+Buo7e63rGcV2wcZ0fierBNlcKMhtGZl5T0l+bRQVdc3E2S
8zcwX+QsI16/v3WtfBdYDlYTDFmDvNjvP5KsWFBrPYzU2fk1KsaI4F2i6YnSyprP
ZkzDqILKPmgz7G1rj5zhqc/8v/Q9C0SXFm2xe9RGxFN4PqGMIhCrITdQVPJckApz
GCJ9zZJuG1x+Y8/52HI3AG2xi35GcCxEWisNM7PTJpbB6WFr4AbBBAutwRO8utTJ
ij5BWHG3Hp3UTAVwneBdegl+bCH2/YNozcm/PxCcSfph
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:38 2025 by rpki-client