Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/NnjdLJb_VugG-WIB6klHO57hO_A.roa
File: NnjdLJb_VugG-WIB6klHO57hO_A.roa (raw, json)
Hash identifier: rBHC4TVaxDF68s9iHceQN9quD3kA3t5nlpSIKTHik4Q=
Subject key identifier: 36:78:DD:2C:96:FF:56:E8:06:F9:62:01:EA:49:47:3B:9E:E1:3B:F0
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 05832BEA
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/NnjdLJb_VugG-WIB6klHO57hO_A.roa
Signing time: Tue 04 Jan 2022 18:46:22 +0000
ROA not before: Tue 04 Jan 2022 18:46:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.38.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92482538 (0x5832bea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 4 18:46:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3678dd2c96ff56e806f96201ea49473b9ee13bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:c4:b0:c5:c2:dd:3c:b6:f4:2c:30:50:bb:
86:03:09:91:8a:e0:89:11:7d:67:fa:c4:bf:84:1c:
ae:6d:1b:89:ba:aa:58:b6:ea:3b:0e:be:88:33:ca:
dd:d2:1d:20:85:01:04:76:a0:ef:ba:05:cb:9c:5e:
54:20:6c:54:db:28:60:28:58:31:38:a1:18:d4:a4:
f1:d1:a0:aa:9e:40:ad:2d:29:9b:c6:75:00:de:c0:
2e:c6:33:a8:71:91:51:43:7b:35:56:e0:fd:c0:7b:
56:c7:ec:0e:65:c4:69:16:4c:41:64:b7:e8:6e:a7:
4c:04:fb:0f:03:97:ba:ee:f0:c5:2c:0b:8f:5f:03:
3b:c1:93:89:d4:2f:cb:80:0b:aa:db:52:0f:bd:87:
6b:f5:29:28:32:d4:e7:b8:28:da:d0:3b:6e:50:a0:
81:82:ef:03:51:d4:f9:90:bd:fb:b8:33:30:e1:4a:
ba:cf:fc:05:8a:77:5e:55:ce:aa:7b:2f:72:25:4f:
2d:f4:f9:aa:3d:2a:92:2e:29:0c:de:e0:45:b5:5e:
4a:13:40:1d:5c:e8:b3:b7:f6:9c:b3:14:77:92:ce:
89:b2:62:45:ca:e4:48:dd:d7:d1:a7:eb:50:5a:d7:
e5:d3:29:dc:9b:c4:5d:5f:9f:1b:4a:94:05:8a:e9:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:DD:2C:96:FF:56:E8:06:F9:62:01:EA:49:47:3B:9E:E1:3B:F0
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/NnjdLJb_VugG-WIB6klHO57hO_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.37.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
07:7e:60:2e:a2:d0:66:84:73:f0:7f:12:56:ca:a6:7f:fa:ba:
d6:a5:27:4d:c0:88:d6:b7:c6:81:4e:5c:cb:08:6c:c3:28:c8:
ad:39:7b:5b:ff:ae:e9:ac:e4:0f:0d:c8:e7:fa:46:ab:75:bc:
2c:15:d4:53:17:2b:79:24:39:23:7c:69:d3:7e:a9:37:77:bc:
94:95:98:87:75:d3:6c:bd:c5:d2:94:02:b3:eb:38:00:71:2c:
fc:63:b8:1c:47:dc:a7:c4:6c:78:b7:0e:e1:a1:7e:c6:dc:31:
7a:88:1e:39:20:de:4c:ec:f2:2d:86:e6:6a:85:10:c3:da:0d:
9c:1e:e4:0d:d4:28:9a:e8:1c:0f:ac:b1:3a:92:58:f7:d4:fa:
85:98:0c:aa:48:60:39:76:ab:82:7d:ed:2a:03:67:59:f3:0d:
5c:71:53:6b:a4:2c:66:75:c8:10:e1:94:23:a0:5c:40:b7:82:
46:c4:f7:15:39:cc:36:92:d4:12:0d:9d:c1:fe:35:0c:a5:51:
0f:e9:6b:62:ad:63:6d:31:d7:9d:c6:03:49:59:db:c7:38:81:
ff:42:ef:54:e1:69:6e:ed:29:5a:ad:96:35:fc:97:23:2c:95:
03:c9:8b:f3:4b:be:13:aa:f7:68:5d:b1:16:5c:01:12:14:6c:
93:ba:10:98
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBYMr6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
N2NmMzg4NGI3ODAwN2EyNWRiZTJlMmNlZjBjYzczYjY5OTIxZjg4MB4XDTIyMDEw
NDE4NDYyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzY3OGRkMmM5NmZm
NTZlODA2Zjk2MjAxZWE0OTQ3M2I5ZWUxM2JmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsFxLDFwt08tvQsMFC7hgMJkYrgiRF9Z/rEv4Qcrm0bibqq
WLbqOw6+iDPK3dIdIIUBBHag77oFy5xeVCBsVNsoYChYMTihGNSk8dGgqp5ArS0p
m8Z1AN7ALsYzqHGRUUN7NVbg/cB7VsfsDmXEaRZMQWS36G6nTAT7DwOXuu7wxSwL
j18DO8GTidQvy4ALqttSD72Ha/UpKDLU57go2tA7blCggYLvA1HU+ZC9+7gzMOFK
us/8BYp3XlXOqnsvciVPLfT5qj0qki4pDN7gRbVeShNAHVzos7f2nLMUd5LOibJi
RcrkSN3X0afrUFrX5dMp3JvEXV+fG0qUBYrpCwUCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQ2eN0slv9W6Ab5YgHqSUc7nuE78DAfBgNVHSMEGDAWgBTnzziEt4AHol2+
LizvDMc7aZIfiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzU4ODRoTGVBQjZKZHZpNHM3d3pITzJtU0g0Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8x
L05uamRMSmJfVnVnRy1XSUI2a2xITzU3aE9fQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0My8xLzU4ODRoTGVBQjZK
ZHZpNHM3d3pITzJtU0g0Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAXpolAwQAXpomMA0GCSqGSIb3
DQEBCwUAA4IBAQAHfmAuotBmhHPwfxJWyqZ/+rrWpSdNwIjWt8aBTlzLCGzDKMit
OXtb/67prOQPDcjn+kardbwsFdRTFyt5JDkjfGnTfqk3d7yUlZiHddNsvcXSlAKz
6zgAcSz8Y7gcR9ynxGx4tw7hoX7G3DF6iB45IN5M7PIthuZqhRDD2g2cHuQN1Cia
6BwPrLE6klj31PqFmAyqSGA5dquCfe0qA2dZ8w1ccVNrpCxmdcgQ4ZQjoFxAt4JG
xPcVOcw2ktQSDZ3B/jUMpVEP6WtirWNtMdedxgNJWdvHOIH/Qu9U4Wlu7SlarZY1
/JcjLJUDyYvzS74TqvdoXbEWXAESFGyTuhCY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org