Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/nW9zT-3txAS4TsNV3bZjDNlvcdg.roa
File: nW9zT-3txAS4TsNV3bZjDNlvcdg.roa (raw, json)
Hash identifier: OZPn7wJo1e0QOTqmPFza4AtKy7ejA42Wj+XyJyhJnhg=
Subject key identifier: 9D:6F:73:4F:ED:ED:C4:04:B8:4E:C3:55:DD:B6:63:0C:D9:6F:71:D8
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 13EDEB04
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/nW9zT-3txAS4TsNV3bZjDNlvcdg.roa
Signing time: Sat 01 Jan 2022 11:55:23 +0000
ROA not before: Sat 01 Jan 2022 11:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20649
IP address blocks: 213.238.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334359300 (0x13edeb04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 11:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d6f734fededc404b84ec355ddb6630cd96f71d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:fe:0f:8b:01:1f:91:b0:d8:99:88:5f:91:
76:bf:31:a0:e3:ad:22:9c:2c:3b:c8:05:0f:8e:ca:
6d:e5:a1:34:b6:6b:ee:45:0c:13:c3:cc:b0:fa:a0:
d5:55:2a:f5:86:70:63:42:f1:4d:f4:e1:3f:c3:2d:
1e:9e:a7:5a:71:8b:cb:0f:ab:b0:27:09:9d:c3:59:
5b:10:4a:79:61:95:54:80:df:d0:39:47:a9:37:b0:
b0:db:00:37:5a:53:5a:da:5c:48:eb:2f:e4:77:f6:
72:b9:ff:e8:3a:ef:2b:28:ad:88:d7:f7:e7:13:81:
e0:5c:8f:e4:6b:6a:67:ab:35:8a:2d:5b:ad:25:29:
74:67:4c:64:63:21:da:8b:ee:6f:42:82:9d:66:b4:
06:cf:2e:48:3b:25:34:f8:2f:f4:dd:53:58:dd:82:
7b:5f:82:b1:03:03:f7:77:6f:e8:73:cb:d3:2b:c5:
65:88:29:d4:44:9f:f4:fd:4e:77:9e:a1:86:0e:d4:
cb:9a:0f:d8:4b:e5:4b:a5:77:bc:e9:f1:fb:b8:06:
47:02:ac:7f:e6:40:18:80:3d:96:5c:ad:0c:0c:f8:
e4:28:aa:0f:83:f8:82:5a:db:31:9a:53:fe:89:af:
98:c7:ae:e5:98:fc:4b:86:63:b5:9c:50:97:74:3d:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:73:4F:ED:ED:C4:04:B8:4E:C3:55:DD:B6:63:0C:D9:6F:71:D8
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/nW9zT-3txAS4TsNV3bZjDNlvcdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.177.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c4:9d:30:f5:bf:45:a4:ae:e1:d4:59:bc:eb:87:f5:3d:a0:
54:a1:87:53:ba:2c:4e:4c:95:21:df:12:4f:26:4b:f6:8f:74:
50:9f:dc:6c:26:d0:49:e6:3b:67:2c:a0:c8:5b:bf:5b:69:97:
f2:3b:da:60:b3:d4:b6:8d:2b:da:62:5c:0a:e6:15:10:fb:2e:
1a:87:a8:a0:fc:df:9d:c5:48:e9:5a:f3:92:f0:a3:37:36:b9:
67:0b:cd:eb:68:cf:f0:ae:10:e8:3f:86:6c:20:de:e3:c2:a1:
86:b1:18:ea:0c:53:16:fd:c8:7c:3d:a1:00:b3:16:2d:49:3b:
8e:97:c1:8a:a0:e7:b6:34:e8:0f:0f:fd:ae:88:90:a4:dc:0e:
05:20:f5:f2:4d:c3:84:2c:97:3e:bb:d8:45:b5:b3:c5:8f:18:
02:cb:6f:7c:ad:8d:98:d2:ca:5f:fb:32:c8:10:69:bf:d0:01:
0c:5e:ca:f4:10:e3:f2:12:f4:98:00:97:25:c0:bf:4f:45:94:
d7:dd:3c:a3:b2:87:ec:6b:35:6f:23:f0:53:5e:5f:be:39:33:
e9:0c:93:af:c5:29:67:67:0d:49:96:65:14:d1:20:1e:b8:ca:
18:4b:76:2c:eb:2c:0f:20:84:f6:ab:8f:44:32:76:7d:25:96:
0c:03:14:ea
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEE+3rBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NGNiZGE3OGIxZDFiNjEzZGY1NjVmZjk5NzAwYjZhZWU5NDBkZTNmMB4XDTIyMDEw
MTExNTUyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWQ2ZjczNGZlZGVk
YzQwNGI4NGVjMzU1ZGRiNjYzMGNkOTZmNzFkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ/a/g+LAR+RsNiZiF+Rdr8xoOOtIpwsO8gFD47KbeWhNLZr
7kUME8PMsPqg1VUq9YZwY0LxTfThP8MtHp6nWnGLyw+rsCcJncNZWxBKeWGVVIDf
0DlHqTewsNsAN1pTWtpcSOsv5Hf2crn/6DrvKyitiNf35xOB4FyP5GtqZ6s1ii1b
rSUpdGdMZGMh2ovub0KCnWa0Bs8uSDslNPgv9N1TWN2Ce1+CsQMD93dv6HPL0yvF
ZYgp1ESf9P1Od56hhg7Uy5oP2EvlS6V3vOnx+7gGRwKsf+ZAGIA9llytDAz45Ciq
D4P4glrbMZpT/omvmMeu5Zj8S4ZjtZxQl3Q98jECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSdb3NP7e3EBLhOw1XdtmMM2W9x2DAfBgNVHSMEGDAWgBRUy9p4sdG2E99W
X/mXALau6UDePzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZNdmFlTEhSdGhQZlZsXzVsd0MycnVsQTNqOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvNmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8x
L25XOXpULTN0eEFTNFRzTlYzYlpqRE5sdmNkZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
NmQ2MWQ5LTBiZjctNDRiYi1iODBmLWNkMzE2MTVkMDFhOS8xL1ZNdmFlTEhSdGhQ
ZlZsXzVsd0MycnVsQTNqOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXusTANBgkqhkiG9w0BAQsFAAOC
AQEAWcSdMPW/RaSu4dRZvOuH9T2gVKGHU7osTkyVId8STyZL9o90UJ/cbCbQSeY7
ZyygyFu/W2mX8jvaYLPUto0r2mJcCuYVEPsuGoeooPzfncVI6VrzkvCjNza5ZwvN
62jP8K4Q6D+GbCDe48KhhrEY6gxTFv3IfD2hALMWLUk7jpfBiqDntjToDw/9roiQ
pNwOBSD18k3DhCyXPrvYRbWzxY8YAstvfK2NmNLKX/syyBBpv9ABDF7K9BDj8hL0
mACXJcC/T0WU1908o7KH7Gs1byPwU15fvjkz6QyTr8UpZ2cNSZZlFNEgHrjKGEt2
LOssDyCE9quPRDJ2fSWWDAMU6g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:53 2023 by rpki-client on console-ams.rpki-client.org