Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/nEEWlvuCJLFIK1uKMP0Atbvt-eM.roa
File: nEEWlvuCJLFIK1uKMP0Atbvt-eM.roa (raw, json)
Hash identifier: 4TO2HsuC+vHXZ+P9mAtoOYeUX2l2x0ioxoqxBcQM+7A=
Subject key identifier: 9C:41:16:96:FB:82:24:B1:48:2B:5B:8A:30:FD:00:B5:BB:ED:F9:E3
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0426FA51
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/nEEWlvuCJLFIK1uKMP0Atbvt-eM.roa
Signing time: Thu 10 Mar 2022 05:30:52 +0000
ROA not before: Thu 10 Mar 2022 05:30:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395092
IP address blocks: 217.195.152.0/22 maxlen: 22
213.108.246.0/23 maxlen: 23
45.95.16.0/23 maxlen: 23
45.95.18.0/24 maxlen: 24
45.146.220.0/22 maxlen: 22
213.139.204.0/22 maxlen: 22
193.160.8.0/24 maxlen: 24
45.155.36.0/22 maxlen: 22
2a0d:9ec0::/48 maxlen: 48
2a0d:d8c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69663313 (0x426fa51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Mar 10 05:30:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c411696fb8224b1482b5b8a30fd00b5bbedf9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:87:5d:86:80:e7:bc:27:f5:ca:e4:4a:e7:
39:a8:1b:7d:bc:76:92:72:7e:e5:aa:8c:b5:eb:c7:
57:6f:25:50:f1:33:4c:9b:e0:14:97:54:0d:6e:a9:
77:4a:a9:0e:68:ac:fc:98:ff:c0:f8:3e:aa:fb:a9:
bb:ed:ee:20:8c:22:ee:73:8e:af:7b:f6:e0:ec:cf:
7b:46:55:51:d5:65:ae:b4:2e:a2:d8:2c:f3:d5:fc:
5e:af:6a:fe:5b:cf:a0:80:36:68:5c:40:1b:a8:56:
f5:9e:5f:8d:89:2d:2e:36:3f:19:b9:32:6d:b7:c2:
44:97:3a:81:e0:20:41:37:ac:57:b8:90:46:2f:3f:
6a:6b:25:b1:1c:33:80:5d:ef:5b:18:f3:67:86:4e:
54:98:76:21:ea:87:75:0b:73:17:cb:45:c7:ee:a1:
9b:f4:24:cf:97:9c:ab:6a:85:22:36:38:43:5a:e4:
e2:f3:06:58:f4:99:3d:6f:51:89:23:ca:db:39:61:
d8:6f:ed:fd:40:63:d8:06:26:32:93:4e:4f:15:f8:
76:df:d6:12:f2:55:e8:59:6d:71:40:99:be:60:c6:
fe:e2:65:f7:0d:1b:bf:18:cd:2b:18:4e:e1:05:6a:
66:50:f2:8c:37:4d:50:1a:23:45:75:9f:8d:03:e1:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:16:96:FB:82:24:B1:48:2B:5B:8A:30:FD:00:B5:BB:ED:F9:E3
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/nEEWlvuCJLFIK1uKMP0Atbvt-eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.16.0-45.95.18.255
45.146.220.0/22
45.155.36.0/22
193.160.8.0/24
213.108.246.0/23
213.139.204.0/22
217.195.152.0/22
IPv6:
2a0d:9ec0::/48
2a0d:d8c0::/48
Signature Algorithm: sha256WithRSAEncryption
a3:17:b1:77:df:ff:4c:ac:91:2b:81:58:4b:38:dc:24:31:ad:
84:9a:d5:cb:54:e8:05:21:39:c0:28:82:73:a1:b1:8a:8b:5d:
49:e6:f6:6e:a2:69:88:f7:ba:ae:b0:48:c2:ce:f4:01:63:aa:
93:65:3e:89:ce:79:2a:2c:3c:49:38:8b:88:55:07:f2:c6:d2:
0e:e0:33:da:34:1e:52:14:3c:9c:9f:02:a3:1a:c0:98:da:f0:
b4:9e:d0:ee:19:f6:bd:86:df:27:25:5c:fa:20:fa:8c:98:0d:
e0:73:66:5b:b0:68:3e:3b:0f:8e:8e:ec:1c:70:d1:b9:5a:31:
85:33:b1:8b:e8:5d:57:a1:5d:52:5c:a5:e7:9f:2c:25:1a:ca:
73:3a:03:ff:bb:30:18:30:bc:43:cf:47:20:32:c1:50:4e:f4:
d2:b5:f4:86:6d:82:e2:70:87:d1:7b:01:7d:32:64:64:63:1f:
91:24:1f:ee:bc:a0:0c:01:df:bc:6a:e9:8f:ef:93:4c:2c:8a:
1d:ba:4a:2c:4e:41:dd:28:3a:03:eb:3a:71:cd:3c:34:78:a7:
ec:f3:30:5f:a2:d8:c7:99:28:c7:98:52:dc:f1:75:13:7e:d9:
c3:d2:b3:33:db:0e:34:b5:5b:d8:2b:ba:f6:06:84:8c:63:30:
41:f9:ca:71
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIEBCb6UTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NGQwOGExZTFjYmM5MDkyNTRlOWU2YjljOTM5ZmQ4NWEyNjhiMWUxMB4XDTIyMDMx
MDA1MzA1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWM0MTE2OTZmYjgy
MjRiMTQ4MmI1YjhhMzBmZDAwYjViYmVkZjllMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMH8h12GgOe8J/XK5ErnOagbfbx2knJ+5aqMtevHV28lUPEz
TJvgFJdUDW6pd0qpDmis/Jj/wPg+qvupu+3uIIwi7nOOr3v24OzPe0ZVUdVlrrQu
otgs89X8Xq9q/lvPoIA2aFxAG6hW9Z5fjYktLjY/GbkybbfCRJc6geAgQTesV7iQ
Ri8/amslsRwzgF3vWxjzZ4ZOVJh2IeqHdQtzF8tFx+6hm/Qkz5ecq2qFIjY4Q1rk
4vMGWPSZPW9RiSPK2zlh2G/t/UBj2AYmMpNOTxX4dt/WEvJV6FltcUCZvmDG/uJl
9w0bvxjNKxhO4QVqZlDyjDdNUBojRXWfjQPhFa8CAwEAAaOCAk8wggJLMB0GA1Ud
DgQWBBScQRaW+4IksUgrW4ow/QC1u+354zAfBgNVHSMEGDAWgBT00IoeHLyQklTp
5rnJOf2Fomix4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlOQ0tIaHk4a0pKVTZlYTV5VG45aGFKb3NlRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNjQ5ZmRjLTBkM2EtNDFlYy1hMWNlLWRjZTk0N2UyOTRiNi8x
L25FRVdsdnVDSkxGSUsxdUtNUDBBdGJ2dC1lTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NjQ5ZmRjLTBkM2EtNDFlYy1hMWNlLWRjZTk0N2UyOTRiNi8xLzlOQ0tIaHk4a0pK
VTZlYTV5VG45aGFKb3NlRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBl
BggrBgEFBQcBBwEB/wRWMFQwOAQCAAEwMjAMAwQELV8QAwQALV8SAwQCLZLcAwQC
LZskAwQAwaAIAwQB1Wz2AwQC1YvMAwQC2cOYMBgEAgACMBIDBwAqDZ7AAAADBwAq
DdjAAAAwDQYJKoZIhvcNAQELBQADggEBAKMXsXff/0yskSuBWEs43CQxrYSa1ctU
6AUhOcAognOhsYqLXUnm9m6iaYj3uq6wSMLO9AFjqpNlPonOeSosPEk4i4hVB/LG
0g7gM9o0HlIUPJyfAqMawJja8LSe0O4Z9r2G3yclXPog+oyYDeBzZluwaD47D46O
7Bxw0blaMYUzsYvoXVehXVJcpeefLCUaynM6A/+7MBgwvEPPRyAywVBO9NK19IZt
guJwh9F7AX0yZGRjH5EkH+68oAwB37xq6Y/vk0wsih26SixOQd0oOgPrOnHNPDR4
p+zzMF+i2MeZKMeYUtzxdRN+2cPSszPbDjS1W9gruvYGhIxjMEH5ynE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org