Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/NsnyysQz7wtlUaGAxETYQdu5DRw.roa
File: NsnyysQz7wtlUaGAxETYQdu5DRw.roa (raw, json)
Hash identifier: 3bZMBufTUdlYuS6LSCxn0zog/jcQnWnTfa0CifYvPMQ=
Subject key identifier: 36:C9:F2:CA:C4:33:EF:0B:65:51:A1:80:C4:44:D8:41:DB:B9:0D:1C
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 0FBE367E
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/NsnyysQz7wtlUaGAxETYQdu5DRw.roa
Signing time: Sat 01 Jan 2022 10:54:47 +0000
ROA not before: Sat 01 Jan 2022 10:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206288
IP address blocks: 185.178.180.0/22 maxlen: 22
2a0a:6780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264124030 (0xfbe367e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: Jan 1 10:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36c9f2cac433ef0b6551a180c444d841dbb90d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:ad:15:4e:78:ab:5a:7e:ec:91:c3:be:e0:
2c:59:cd:6c:83:e1:47:1c:3b:ae:33:45:24:c8:07:
31:8b:70:e9:f6:f5:4d:2e:0e:f9:f1:ee:c6:f2:6d:
8c:e9:e1:51:64:42:87:7b:5c:d7:17:36:8f:35:22:
91:61:d1:b6:c1:7b:63:22:23:1e:7a:17:5e:94:19:
a1:db:65:56:6a:b5:0c:c9:80:ce:2c:fb:20:b7:d9:
d4:a2:ec:4e:86:bb:37:83:a0:d7:1f:80:15:2f:23:
c6:50:b0:a2:11:eb:51:c5:eb:c7:71:3f:1d:8e:bb:
5e:04:d0:ea:80:93:13:c7:4d:ac:84:4f:4c:2d:53:
22:0e:31:4c:1d:99:a8:9b:e6:5b:27:1b:86:59:2a:
05:9e:7a:6f:0e:f5:34:38:75:29:26:72:d5:10:8d:
da:bf:55:a4:96:04:1e:ea:07:3a:17:32:fa:f2:d5:
5c:cd:68:1c:ba:97:32:c1:c6:4b:ac:aa:0e:b0:49:
dd:da:76:e3:97:e4:d4:b0:57:17:b1:98:a3:52:05:
5e:a2:00:75:24:b9:59:15:6f:aa:1d:58:81:e2:d5:
5d:62:49:54:ed:9c:ff:4e:cc:5e:dd:a2:b0:1d:06:
95:2b:01:00:87:b3:ef:60:36:76:f7:9a:2e:91:7b:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C9:F2:CA:C4:33:EF:0B:65:51:A1:80:C4:44:D8:41:DB:B9:0D:1C
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/NsnyysQz7wtlUaGAxETYQdu5DRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.180.0/22
IPv6:
2a0a:6780::/29
Signature Algorithm: sha256WithRSAEncryption
29:3e:d1:8b:e9:d0:08:91:a6:29:ee:42:0b:45:92:1f:97:01:
f2:e8:b0:49:d9:45:fe:cd:67:1b:d5:2e:64:68:e8:79:bd:16:
35:76:76:50:57:21:3b:4e:14:2b:88:17:c1:2a:4e:af:f3:8a:
d7:ce:bf:06:d1:8a:e2:2e:e3:d7:6a:1f:99:b0:7e:8a:44:77:
c6:62:9d:0a:11:e0:31:39:6a:10:5b:eb:bd:f0:70:f7:ed:30:
9c:c0:7c:13:b1:ff:3c:48:75:98:37:a9:dd:69:10:33:fb:4c:
e0:4e:26:68:7d:68:23:83:21:e2:35:7f:f9:15:be:47:5f:d2:
e1:34:25:0f:30:1d:62:2a:ad:73:47:b2:f6:a4:67:ae:6d:1c:
78:58:b2:5e:f3:cd:6d:4e:a1:57:b0:be:d9:09:15:0d:89:10:
c6:51:cb:1c:82:cc:fb:19:30:4f:4a:9e:95:ab:43:db:2d:86:
76:71:f8:b7:b3:28:89:f6:39:61:08:ea:9d:02:89:2e:dd:2d:
96:0d:b1:96:97:15:f7:3f:55:cc:3e:e7:2e:5c:fd:eb:9c:0e:
12:fc:b8:26:2c:1c:9e:7e:0f:d6:0e:38:0b:12:a2:ca:aa:82:
b1:fd:f8:c1:4a:23:52:32:a4:e2:d6:20:ff:53:b4:c4:fb:44:
a8:a0:94:a8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIED742fjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODE2NGE1NzU3ZmRkNTcyNWE2MDg0NGYyYWU3ZWY3M2IxMDdhNGMwMB4XDTIyMDEw
MTEwNTQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzZjOWYyY2FjNDMz
ZWYwYjY1NTFhMTgwYzQ0NGQ4NDFkYmI5MGQxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMG0rRVOeKtafuyRw77gLFnNbIPhRxw7rjNFJMgHMYtw6fb1
TS4O+fHuxvJtjOnhUWRCh3tc1xc2jzUikWHRtsF7YyIjHnoXXpQZodtlVmq1DMmA
ziz7ILfZ1KLsToa7N4Og1x+AFS8jxlCwohHrUcXrx3E/HY67XgTQ6oCTE8dNrIRP
TC1TIg4xTB2ZqJvmWycbhlkqBZ56bw71NDh1KSZy1RCN2r9VpJYEHuoHOhcy+vLV
XM1oHLqXMsHGS6yqDrBJ3dp245fk1LBXF7GYo1IFXqIAdSS5WRVvqh1YgeLVXWJJ
VO2c/07MXt2isB0GlSsBAIez72A2dveaLpF77uECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQ2yfLKxDPvC2VRoYDERNhB27kNHDAfBgNVHSMEGDAWgBQoFkpXV/3Vclpg
hE8q5+9zsQekwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tCWktWMWY5MVhKYVlJUlBLdWZ2YzdFSHBNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvOTU1MzViLWU2MzAtNDU3Zi04YTAxLWFlYWU1YmJjMzkyMC8x
L05zbnl5c1F6N3d0bFVhR0F4RVRZUWR1NURSdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
OTU1MzViLWU2MzAtNDU3Zi04YTAxLWFlYWU1YmJjMzkyMC8xL0tCWktWMWY5MVhK
YVlJUlBLdWZ2YzdFSHBNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmytDANBAIAAjAHAwUDKgpngDAN
BgkqhkiG9w0BAQsFAAOCAQEAKT7Ri+nQCJGmKe5CC0WSH5cB8uiwSdlF/s1nG9Uu
ZGjoeb0WNXZ2UFchO04UK4gXwSpOr/OK186/BtGK4i7j12ofmbB+ikR3xmKdChHg
MTlqEFvrvfBw9+0wnMB8E7H/PEh1mDep3WkQM/tM4E4maH1oI4Mh4jV/+RW+R1/S
4TQlDzAdYiqtc0ey9qRnrm0ceFiyXvPNbU6hV7C+2QkVDYkQxlHLHILM+xkwT0qe
latD2y2GdnH4t7MoifY5YQjqnQKJLt0tlg2xlpcV9z9VzD7nLlz965wOEvy4Jiwc
nn4P1g44CxKiyqqCsf34wUojUjKk4tYg/1O0xPtEqKCUqA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:48 2025 by rpki-client