Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/nEnHaBAeukY1N7taKDCqh3UzWh8.roa
File: nEnHaBAeukY1N7taKDCqh3UzWh8.roa (raw, json)
Hash identifier: Ma5XpcSnce4uDzUVFsA2ZObbX3X5vOyW2xD+Nx00iZo=
Subject key identifier: 9C:49:C7:68:10:1E:BA:46:35:37:BB:5A:28:30:AA:87:75:33:5A:1F
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 0B27FDA1
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/nEnHaBAeukY1N7taKDCqh3UzWh8.roa
Signing time: Sat 01 Jan 2022 05:02:33 +0000
ROA not before: Sat 01 Jan 2022 05:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62196
IP address blocks: 2.189.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187170209 (0xb27fda1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jan 1 05:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c49c768101eba463537bb5a2830aa8775335a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:29:5e:25:c3:c3:c2:fb:e0:d4:73:5c:10:
f7:49:52:4a:5d:d4:08:fd:c6:db:f2:5f:dc:93:2d:
f3:71:78:80:7e:67:ea:6f:13:8a:39:90:69:ae:3b:
83:e9:24:c4:3f:02:a7:75:76:a4:8e:c4:00:1a:6b:
b9:65:cd:f2:d9:39:7d:28:3b:24:00:7b:2a:d3:0b:
83:90:b9:8e:50:97:83:c7:42:3e:28:60:45:e6:d4:
4c:6f:14:1c:81:44:6a:07:44:f2:2f:cb:f8:cc:63:
43:3f:4a:09:2b:e2:f2:e2:96:f0:a1:18:b2:2d:f7:
04:29:ec:e7:56:61:e9:4a:0e:e9:6d:a9:73:bc:14:
fb:3a:62:d1:9c:b0:c1:0b:d7:7c:a4:a0:91:78:0e:
e5:7e:ae:62:48:27:ae:69:21:dc:e5:21:59:45:85:
9e:60:35:3f:b1:b1:21:5b:f8:fd:a0:47:80:bb:34:
00:7b:03:29:f8:a4:3d:07:03:05:7f:8b:de:9f:38:
cb:0f:02:40:58:a6:6b:ad:d8:71:65:8c:06:20:e4:
3b:55:06:a2:c5:ec:38:96:e5:0b:cc:3b:fc:db:24:
80:93:51:df:43:fe:fa:a7:ee:5b:18:8d:90:5d:02:
74:5a:4f:86:d8:24:a1:35:8a:f1:73:a7:cb:e7:a9:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:C7:68:10:1E:BA:46:35:37:BB:5A:28:30:AA:87:75:33:5A:1F
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/nEnHaBAeukY1N7taKDCqh3UzWh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.176.0/21
Signature Algorithm: sha256WithRSAEncryption
33:0e:5f:6f:e3:9f:06:92:e1:f1:7e:1b:ff:5b:44:98:f1:3b:
ce:05:df:9c:17:89:07:db:f7:6e:9b:b0:fa:47:91:a5:d8:72:
e3:d2:d4:ad:33:ab:2c:b2:a6:97:fe:dd:62:48:ed:1d:be:6a:
c3:c3:a2:d2:a1:34:f8:f8:26:21:fd:ab:65:7f:04:e2:a7:d6:
8d:b0:c3:57:29:33:84:0b:b8:e6:dd:7e:60:84:76:c6:60:d9:
85:1a:70:4c:63:4e:3e:b4:5b:9f:bc:5c:24:a7:b7:43:10:75:
9c:9a:9a:8d:93:0b:f8:03:29:ec:93:57:88:42:53:f2:2c:24:
46:10:75:50:cd:51:a5:c8:24:04:fd:df:86:85:6f:48:f1:9e:
64:eb:16:a8:08:de:c6:39:f0:c5:8c:cb:30:25:62:ab:74:4c:
c7:f9:85:f4:c4:81:74:95:bf:2f:4c:b3:f5:7e:bd:a9:c9:78:
af:76:08:d1:d2:bd:ef:e0:76:77:70:c0:5a:a4:f7:77:56:05:
33:91:b3:57:8f:b3:5f:3a:19:ab:80:76:ee:ae:de:fd:c9:e1:
68:ec:bf:45:36:ad:4c:ba:7c:83:e8:29:3b:96:65:37:6d:f4:
1e:66:c9:5a:d0:5a:ae:49:bd:f9:54:d2:e3:1f:78:fb:16:a8:
d4:7e:b2:d7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECyf9oTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
N2EzOWU0Nzk0YzM0NjEyZTdmMjI1NjliMWE2YTgxNzEwMjYwYWU1MB4XDTIyMDEw
MTA1MDIzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWM0OWM3NjgxMDFl
YmE0NjM1MzdiYjVhMjgzMGFhODc3NTMzNWExZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCsKV4lw8PC++DUc1wQ90lSSl3UCP3G2/Jf3JMt83F4gH5n
6m8TijmQaa47g+kkxD8Cp3V2pI7EABpruWXN8tk5fSg7JAB7KtMLg5C5jlCXg8dC
PihgRebUTG8UHIFEagdE8i/L+MxjQz9KCSvi8uKW8KEYsi33BCns51Zh6UoO6W2p
c7wU+zpi0ZywwQvXfKSgkXgO5X6uYkgnrmkh3OUhWUWFnmA1P7GxIVv4/aBHgLs0
AHsDKfikPQcDBX+L3p84yw8CQFima63YcWWMBiDkO1UGosXsOJblC8w7/NskgJNR
30P++qfuWxiNkF0CdFpPhtgkoTWK8XOny+epQ5UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBScScdoEB66RjU3u1ooMKqHdTNaHzAfBgNVHSMEGDAWgBQno55HlMNGEufy
JWmxpqgXECYK5TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0o2T2VSNVREUmhMbjhpVnBzYWFvRnhBbUN1VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvMzhmYzMzLTA2YzEtNDAwNi05ZTIzLWY3NGQ5NTE4NTc2Yy8x
L25FbkhhQkFldWtZMU43dGFLRENxaDNVeldoOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
MzhmYzMzLTA2YzEtNDAwNi05ZTIzLWY3NGQ5NTE4NTc2Yy8xL0o2T2VSNVREUmhM
bjhpVnBzYWFvRnhBbUN1VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAwK9sDANBgkqhkiG9w0BAQsFAAOC
AQEAMw5fb+OfBpLh8X4b/1tEmPE7zgXfnBeJB9v3bpuw+keRpdhy49LUrTOrLLKm
l/7dYkjtHb5qw8Oi0qE0+PgmIf2rZX8E4qfWjbDDVykzhAu45t1+YIR2xmDZhRpw
TGNOPrRbn7xcJKe3QxB1nJqajZML+AMp7JNXiEJT8iwkRhB1UM1RpcgkBP3fhoVv
SPGeZOsWqAjexjnwxYzLMCViq3RMx/mF9MSBdJW/L0yz9X69qcl4r3YI0dK97+B2
d3DAWqT3d1YFM5GzV4+zXzoZq4B27q7e/cnhaOy/RTatTLp8g+gpO5ZlN230HmbJ
WtBarkm9+VTS4x94+xao1H6y1w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:00 2025 by rpki-client