Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/NhVsts5oyfP_LqBU5e-1VALYG9o.roa
File: NhVsts5oyfP_LqBU5e-1VALYG9o.roa (raw, json)
Hash identifier: JkA+yOukKiY7ELIdDTdlckr0kBbzD+GP+qjICfCn8yM=
Subject key identifier: 36:15:6C:B6:CE:68:C9:F3:FF:2E:A0:54:E5:EF:B5:54:02:D8:1B:DA
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 0184E62A168AAD5391CAEA8E1A9E687F683E
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/NhVsts5oyfP_LqBU5e-1VALYG9o.roa
Signing time: Tue 06 Dec 2022 06:40:28 +0000
ROA not before: Tue 06 Dec 2022 06:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49183
IP address blocks: 46.173.173.0/24 maxlen: 24
46.173.175.0/24 maxlen: 24
94.231.179.0/24 maxlen: 24
94.231.178.0/24 maxlen: 24
94.231.177.0/24 maxlen: 24
94.231.176.0/24 maxlen: 24
94.231.180.0/24 maxlen: 24
94.231.186.0/24 maxlen: 24
94.231.185.0/24 maxlen: 24
94.231.183.0/24 maxlen: 24
94.231.182.0/24 maxlen: 24
94.231.181.0/24 maxlen: 24
94.231.187.0/24 maxlen: 24
46.173.160.0/22 maxlen: 22
46.173.164.0/22 maxlen: 22
94.231.191.0/24 maxlen: 24
94.231.190.0/24 maxlen: 24
94.231.189.0/24 maxlen: 24
94.231.188.0/24 maxlen: 24
46.173.172.0/24 maxlen: 24
46.173.168.0/22 maxlen: 22
2001:678:d94::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:2a:16:8a:ad:53:91:ca:ea:8e:1a:9e:68:7f:68:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Dec 6 06:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36156cb6ce68c9f3ff2ea054e5efb55402d81bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:69:9e:e5:03:cc:79:01:ac:3b:35:c2:0a:aa:
7a:db:9b:df:21:f5:25:58:6a:dd:bb:1b:6d:57:a4:
eb:37:6b:cb:b1:e6:bd:4b:2b:86:24:e9:cf:fd:87:
53:8c:91:ea:b0:fa:62:1b:7f:23:d4:c3:af:f4:a6:
cc:75:b7:e7:8c:c0:fe:05:ea:45:b9:f5:21:79:47:
71:0b:27:11:b9:4a:45:16:76:34:88:98:a8:cc:58:
99:9d:38:3e:db:33:01:1b:1f:73:cc:e6:86:7e:89:
08:43:16:9f:06:dc:41:78:fb:94:5d:b0:c8:35:90:
b4:1d:ed:dd:05:cd:50:f8:f1:a8:67:eb:b7:b7:03:
3b:fb:8c:68:a8:ef:4c:21:98:a0:a5:55:86:7a:ea:
a8:32:5e:36:df:45:67:93:42:10:55:77:f3:f7:1d:
84:ea:61:75:66:a4:93:03:9c:48:70:81:88:5e:17:
18:7f:9d:30:22:66:77:10:08:e1:01:bf:62:ea:b2:
f6:f8:5c:de:27:f2:f6:12:6c:d2:41:08:12:28:74:
59:ba:94:92:0d:b8:9e:9a:27:d8:bc:84:95:7e:80:
26:f4:4f:c5:2c:c3:18:8f:77:86:9a:23:2a:a7:8d:
f5:1e:4a:7f:e8:21:9e:70:c6:08:0e:df:7c:e1:a2:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:15:6C:B6:CE:68:C9:F3:FF:2E:A0:54:E5:EF:B5:54:02:D8:1B:DA
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/NhVsts5oyfP_LqBU5e-1VALYG9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.160.0-46.173.173.255
46.173.175.0/24
94.231.176.0/21
94.231.185.0-94.231.191.255
IPv6:
2001:678:d94::/48
Signature Algorithm: sha256WithRSAEncryption
00:d6:db:1f:bd:06:ea:2f:75:f7:cc:84:0c:a7:03:b0:85:4b:
45:c9:70:c6:54:bb:97:01:0f:85:41:4c:60:ec:c9:99:d8:31:
35:69:dc:aa:8b:4a:e9:d8:5c:32:d9:05:b7:dd:21:53:21:7b:
80:91:88:ef:46:8e:33:d0:43:96:96:95:c7:88:8d:f3:06:aa:
75:80:56:44:1e:d1:ba:f3:02:16:61:ba:91:86:78:79:4d:45:
21:88:a4:4d:f4:5c:6f:7a:92:9b:a3:c5:92:f0:4f:4b:b7:d7:
68:d4:31:4b:c1:78:e6:86:91:b9:8c:71:9b:4d:00:a3:4c:f7:
48:1a:c0:28:4c:10:fa:ca:d6:4a:3c:8d:07:9e:ac:05:36:02:
ce:fd:33:9e:9f:4b:c3:87:d2:68:61:cc:a9:97:e4:81:3b:e4:
a6:c3:2f:6b:68:d8:c4:ca:ab:06:84:07:23:db:f0:e2:9b:6b:
4e:2c:40:a1:12:e6:b5:18:dc:ba:8f:8b:24:5a:c2:15:e1:39:
86:91:31:51:e4:fc:2e:bb:a7:56:4a:1d:f9:9c:35:ef:41:2b:
4e:74:49:c7:78:6d:8b:49:c2:b5:c8:2d:26:50:90:0e:b9:47:
24:39:f7:40:9d:55:85:49:06:b1:4f:3a:c6:fe:ec:0d:4c:ac:
12:a8:35:19
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYTmKhaKrVORyuqOGp5of2g+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTA3NDg3N2Y3OGRiZjQ5YmQzN2EyMTU0OTFlNjlhMGY4
YjZlNDMwHhcNMjIxMjA2MDY0MDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjE1NmNiNmNlNjhjOWYzZmYyZWEwNTRlNWVmYjU1NDAyZDgxYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmme5QPMeQGsOzXCCqp625vfIfUl
WGrduxttV6TrN2vLsea9SyuGJOnP/YdTjJHqsPpiG38j1MOv9KbMdbfnjMD+BepF
ufUheUdxCycRuUpFFnY0iJiozFiZnTg+2zMBGx9zzOaGfokIQxafBtxBePuUXbDI
NZC0He3dBc1Q+PGoZ+u3twM7+4xoqO9MIZigpVWGeuqoMl4230Vnk0IQVXfz9x2E
6mF1ZqSTA5xIcIGIXhcYf50wImZ3EAjhAb9i6rL2+FzeJ/L2EmzSQQgSKHRZupSS
DbiemifYvISVfoAm9E/FLMMYj3eGmiMqp431Hkp/6CGecMYIDt984aK5rQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFDYVbLbOaMnz/y6gVOXvtVQC2BvaMB8GA1UdIwQY
MBaAFMBQdId/eNv0m9N6IVSR5poPi25DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWIt
NzhjMDRiY2VkYWQzLzEvTmhWc3RzNW95ZlBfTHFCVTVlLTFWQUxZRzlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWItNzhjMDRiY2VkYWQz
LzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAuBAIAATAoMAwDBAUuraAD
BAEurawDBAAura8DBANe57AwDAMEAF7nuQMEBl7ngDAPBAIAAjAJAwcAIAEGeA2U
MA0GCSqGSIb3DQEBCwUAA4IBAQAA1tsfvQbqL3X3zIQMpwOwhUtFyXDGVLuXAQ+F
QUxg7MmZ2DE1adyqi0rp2Fwy2QW33SFTIXuAkYjvRo4z0EOWlpXHiI3zBqp1gFZE
HtG68wIWYbqRhnh5TUUhiKRN9FxvepKbo8WS8E9Lt9do1DFLwXjmhpG5jHGbTQCj
TPdIGsAoTBD6ytZKPI0HnqwFNgLO/TOen0vDh9JoYcypl+SBO+Smwy9raNjEyqsG
hAcj2/Dim2tOLEChEua1GNy6j4skWsIV4TmGkTFR5Pwuu6dWSh35nDXvQStOdEnH
eG2LScK1yC0mUJAOuUckOfdAnVWFSQaxTzrG/uwNTKwSqDUZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:17 2024 by rpki-client on console-ams.rpki-client.org