Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Nm2F3l5F4onPm8a8C8BJz1kyICQ.roa
File: Nm2F3l5F4onPm8a8C8BJz1kyICQ.roa (raw, json)
Hash identifier: q49PmW7nWLw88LGolRWak1QVGACybKlM0CTAYnjsc8w=
Subject key identifier: 36:6D:85:DE:5E:45:E2:89:CF:9B:C6:BC:0B:C0:49:CF:59:32:20:24
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0183F99CE1F91778F31DEB92CBCF6BE45C9F
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Nm2F3l5F4onPm8a8C8BJz1kyICQ.roa
Signing time: Fri 21 Oct 2022 08:15:51 +0000
ROA not before: Fri 21 Oct 2022 08:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 94.154.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:9c:e1:f9:17:78:f3:1d:eb:92:cb:cf:6b:e4:5c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 21 08:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=366d85de5e45e289cf9bc6bc0bc049cf59322024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:54:1d:96:1c:a3:54:b1:4d:bb:16:90:fa:
4a:f2:4b:31:73:a8:9f:5a:a4:09:0f:70:9c:0a:36:
9a:59:87:0e:cf:64:fe:7d:91:01:8e:d4:65:7d:76:
0b:41:2e:51:ed:82:9b:46:d2:bb:b4:94:36:fe:92:
cf:8f:2d:1b:28:74:a6:f5:aa:50:2b:14:d5:5c:05:
cf:2d:86:af:bf:30:4e:a9:06:02:dc:7a:0d:5a:41:
cd:d3:8a:9b:8c:6b:1a:0a:74:f2:53:7e:aa:ab:bc:
f1:6e:92:47:31:44:a1:3a:a0:a4:2b:df:f0:12:6c:
9d:1f:45:15:0f:4e:26:60:43:12:57:c9:d7:ce:6e:
dc:88:d3:16:3e:5d:53:99:92:3c:41:53:e1:91:8e:
24:12:fb:71:0c:d0:9b:76:ca:6e:ab:fc:f7:2e:29:
cc:51:d1:58:90:fa:21:ae:c2:a0:22:0d:e2:c9:0e:
e2:1a:1f:79:db:12:fe:44:8d:f7:57:4d:91:0d:e0:
f1:ef:f9:de:f9:82:5d:30:f3:15:4b:99:81:31:62:
13:8a:9e:69:9e:b2:33:cb:b4:b3:2c:2c:b0:46:1b:
e0:86:95:de:69:fa:ba:63:f7:38:66:79:0e:e0:c3:
20:04:0b:c7:e2:cd:c9:6f:24:46:9f:bf:51:9a:37:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6D:85:DE:5E:45:E2:89:CF:9B:C6:BC:0B:C0:49:CF:59:32:20:24
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Nm2F3l5F4onPm8a8C8BJz1kyICQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e6:66:c2:14:2a:bf:c6:61:07:54:36:5b:32:18:1d:87:85:
7b:18:92:0c:68:c1:4e:f0:29:3e:23:57:93:f0:6f:2e:8e:6e:
51:41:38:35:57:6f:06:4b:a6:e6:d7:23:01:12:eb:62:fa:08:
dd:d9:9a:5f:87:f3:fe:13:b2:36:a0:f9:ac:53:95:ae:39:1d:
b9:6f:ee:6c:b6:36:99:c1:39:4c:22:be:78:12:6a:32:6d:8e:
82:2d:01:2f:60:d4:d9:84:84:98:7c:aa:1b:2e:fa:ce:37:3b:
95:2a:db:bb:92:a1:8c:f9:3b:a7:6e:c4:5a:f8:65:14:1e:08:
2e:e1:26:51:97:7b:de:18:2c:5f:88:91:c4:76:a2:a4:d8:0e:
55:83:b6:aa:37:6b:d2:47:90:e1:57:9a:da:8e:42:ae:ba:c5:
24:33:6c:8c:d6:09:35:d1:64:68:af:61:cd:ba:3b:13:a5:13:
e0:1c:d4:a7:34:c9:af:56:81:5e:29:fe:f9:14:06:16:e0:e0:
7f:06:0b:ec:6a:80:70:bd:4c:3a:44:39:5e:08:13:eb:ba:e4:
a3:06:2a:19:45:2b:a6:79:c6:f4:58:0d:b9:96:e3:86:11:11:
28:39:b6:c8:3a:91:77:73:8c:7b:32:8e:26:da:75:81:7a:4b:
6f:dd:62:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYP5nOH5F3jzHeuSy89r5FyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjIxMDIxMDgxNTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjZkODVkZTVlNDVlMjg5Y2Y5YmM2YmMwYmMwNDljZjU5MzIyMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz5UHZYco1SxTbsWkPpK8ksxc6if
WqQJD3CcCjaaWYcOz2T+fZEBjtRlfXYLQS5R7YKbRtK7tJQ2/pLPjy0bKHSm9apQ
KxTVXAXPLYavvzBOqQYC3HoNWkHN04qbjGsaCnTyU36qq7zxbpJHMUShOqCkK9/w
EmydH0UVD04mYEMSV8nXzm7ciNMWPl1TmZI8QVPhkY4kEvtxDNCbdspuq/z3LinM
UdFYkPohrsKgIg3iyQ7iGh952xL+RI33V02RDeDx7/ne+YJdMPMVS5mBMWITip5p
nrIzy7SzLCywRhvghpXeafq6Y/c4ZnkO4MMgBAvH4s3JbyRGn79RmjeICwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZthd5eReKJz5vGvAvASc9ZMiAkMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvTm0yRjNsNUY0b25QbThhOEM4Qkp6MWt5SUNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpolMA0G
CSqGSIb3DQEBCwUAA4IBAQBd5mbCFCq/xmEHVDZbMhgdh4V7GJIMaMFO8Ck+I1eT
8G8ujm5RQTg1V28GS6bm1yMBEuti+gjd2Zpfh/P+E7I2oPmsU5WuOR25b+5stjaZ
wTlMIr54EmoybY6CLQEvYNTZhISYfKobLvrONzuVKtu7kqGM+TunbsRa+GUUHggu
4SZRl3veGCxfiJHEdqKk2A5Vg7aqN2vSR5DhV5rajkKuusUkM2yM1gk10WRor2HN
ujsTpRPgHNSnNMmvVoFeKf75FAYW4OB/BgvsaoBwvUw6RDleCBPruuSjBioZRSum
ecb0WA25luOGEREoObbIOpF3c4x7Mo4m2nWBektv3WKk
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org