Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NwL0-4zMmH7zOsQ9Yib2y3kyeFY.roa
File: NwL0-4zMmH7zOsQ9Yib2y3kyeFY.roa (raw, json)
Hash identifier: 6DEKeBuHv0fiiuJ7CsmSV63PFJzafnPm8yU8c0GDiuM=
Subject key identifier: 37:02:F4:FB:8C:CC:98:7E:F3:3A:C4:3D:62:26:F6:CB:79:32:78:56
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01837A093AFF3ED8D6853361ADFCB5904B8B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NwL0-4zMmH7zOsQ9Yib2y3kyeFY.roa
Signing time: Mon 26 Sep 2022 13:42:48 +0000
ROA not before: Mon 26 Sep 2022 13:42:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202469
IP address blocks: 5.180.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:09:3a:ff:3e:d8:d6:85:33:61:ad:fc:b5:90:4b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 26 13:42:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3702f4fb8ccc987ef33ac43d6226f6cb79327856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:e5:a9:e7:4b:1a:66:95:04:84:5d:f0:85:
ef:b9:95:ee:23:5b:4e:65:b4:48:fe:5e:d5:0e:1a:
ec:5e:92:a4:d4:1a:cd:bc:93:4e:79:9b:3c:98:cd:
c9:3e:8e:36:31:1f:91:bf:47:82:b1:eb:6c:8d:5c:
40:41:76:dd:e1:0f:4e:96:0a:37:41:09:2f:ee:6f:
3e:be:db:16:86:06:0f:0e:8a:6a:24:17:38:b1:1b:
1a:9e:d6:45:ba:aa:12:47:b1:8e:23:a2:ad:63:9a:
83:0b:5e:a2:50:d2:88:80:db:e5:f8:3b:f4:46:2f:
51:cb:0f:9a:30:60:0e:1a:ce:a9:85:99:0f:da:60:
6c:ad:c9:d2:1a:37:27:d6:a9:f8:cf:4b:a1:ab:b7:
82:c8:25:40:38:3b:53:f2:cb:e6:36:66:1a:9f:6f:
de:54:7c:a1:64:45:d5:75:93:c0:7a:c4:f5:42:c5:
37:b8:cd:43:e0:fc:05:2c:74:d5:15:a9:e1:d3:84:
cf:23:d6:c5:b4:0f:91:28:2e:05:5b:8d:d4:12:c8:
70:8e:ee:48:f1:4b:4d:20:79:7a:4d:ad:37:51:5f:
11:42:89:63:96:d3:8b:3b:9e:b0:37:9a:2b:6a:ec:
5b:43:43:30:33:dc:cb:36:81:01:a6:d4:73:ac:65:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:02:F4:FB:8C:CC:98:7E:F3:3A:C4:3D:62:26:F6:CB:79:32:78:56
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NwL0-4zMmH7zOsQ9Yib2y3kyeFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
Signature Algorithm: sha256WithRSAEncryption
09:b9:8a:c0:fa:63:5b:b9:dd:6c:a8:c5:02:21:5e:99:62:ed:
87:2b:67:0d:60:e9:61:8d:74:f5:37:33:2f:13:53:b7:72:67:
50:e0:98:85:b6:e2:d7:75:59:3d:e4:94:f8:b2:1e:d6:87:b6:
cd:21:9a:83:b0:89:0a:cf:3d:7e:da:09:17:c3:ee:6b:48:74:
3b:ea:09:fc:c0:4d:1b:a6:98:08:dc:28:04:b0:84:4d:b8:7e:
4e:8b:5a:c8:59:f6:7b:44:ba:44:c3:da:2c:c3:b3:1a:6d:70:
c6:39:a6:b3:c6:50:f1:e9:c1:91:48:26:13:87:39:75:e4:38:
08:a9:e3:95:93:10:02:00:fb:90:dd:ea:56:26:a5:d0:11:7a:
67:19:76:79:73:bd:01:84:fd:4c:92:f5:ac:2c:f6:1b:43:1d:
69:f7:fa:74:03:0b:5c:40:cf:ff:b3:73:8e:3c:e8:13:42:54:
f0:7c:0f:d6:b7:60:ad:4e:08:fe:88:bb:8f:82:db:b8:58:b3:
1e:a2:f0:92:0d:f8:7f:2f:a3:ad:1a:0a:9e:ef:45:bf:6f:7b:
f9:24:3c:76:46:b5:d1:a0:c8:cf:68:70:1d:29:a1:f4:cb:fb:
3f:f2:88:a7:67:5c:33:0c:93:e0:39:2d:c0:2d:de:b3:e9:4a:
2b:64:66:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN6CTr/PtjWhTNhrfy1kEuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjIwOTI2MTM0MjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzAyZjRmYjhjY2M5ODdlZjMzYWM0M2Q2MjI2ZjZjYjc5MzI3ODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjLlqedLGmaVBIRd8IXvuZXuI1tO
ZbRI/l7VDhrsXpKk1BrNvJNOeZs8mM3JPo42MR+Rv0eCsetsjVxAQXbd4Q9Olgo3
QQkv7m8+vtsWhgYPDopqJBc4sRsantZFuqoSR7GOI6KtY5qDC16iUNKIgNvl+Dv0
Ri9Ryw+aMGAOGs6phZkP2mBsrcnSGjcn1qn4z0uhq7eCyCVAODtT8svmNmYan2/e
VHyhZEXVdZPAesT1QsU3uM1D4PwFLHTVFanh04TPI9bFtA+RKC4FW43UEshwju5I
8UtNIHl6Ta03UV8RQoljltOLO56wN5orauxbQ0MwM9zLNoEBptRzrGVdcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDcC9PuMzJh+8zrEPWIm9st5MnhWMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvTndMMC00ek1tSDd6T3NROVlpYjJ5M2t5ZUZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbQEMA0G
CSqGSIb3DQEBCwUAA4IBAQAJuYrA+mNbud1sqMUCIV6ZYu2HK2cNYOlhjXT1NzMv
E1O3cmdQ4JiFtuLXdVk95JT4sh7Wh7bNIZqDsIkKzz1+2gkXw+5rSHQ76gn8wE0b
ppgI3CgEsIRNuH5Oi1rIWfZ7RLpEw9osw7MabXDGOaazxlDx6cGRSCYThzl15DgI
qeOVkxACAPuQ3epWJqXQEXpnGXZ5c70BhP1MkvWsLPYbQx1p9/p0AwtcQM//s3OO
POgTQlTwfA/Wt2CtTgj+iLuPgtu4WLMeovCSDfh/L6OtGgqe70W/b3v5JDx2RrXR
oMjPaHAdKaH0y/s/8oinZ1wzDJPgOS3ALd6z6UorZGa5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org