Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nqEycn-iaxIJln1wkzBvY6__zfY.roa
File: nqEycn-iaxIJln1wkzBvY6__zfY.roa (raw, json)
Hash identifier: nJLyxxan+xDCPJcUY3lQnS+He0+PkEV1c3uuEnJtJi4=
Subject key identifier: 9E:A1:32:72:7F:A2:6B:12:09:96:7D:70:93:30:6F:63:AF:FF:CD:F6
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018283528E89EFAA42383BE648D1605246A6
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nqEycn-iaxIJln1wkzBvY6__zfY.roa
Signing time: Tue 09 Aug 2022 15:56:41 +0000
ROA not before: Tue 09 Aug 2022 15:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 46.29.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:52:8e:89:ef:aa:42:38:3b:e6:48:d1:60:52:46:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 9 15:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ea132727fa26b1209967d7093306f63afffcdf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:f9:ac:4a:16:82:e1:61:17:7b:d0:ba:4f:
7b:96:ac:13:c0:2a:ba:c3:57:92:2a:f2:41:38:23:
a2:f4:67:76:79:ca:16:9f:f1:95:09:95:e1:9b:74:
94:d6:25:71:7a:60:82:05:12:b6:4e:0f:a8:48:f0:
1f:0c:94:e4:3a:22:1d:2a:6d:a0:52:c3:94:41:51:
64:91:89:34:2a:c6:59:f6:33:a4:5e:f5:23:b0:18:
a3:a0:c8:8e:03:8a:9a:9a:a5:2d:e2:15:77:9c:dc:
d7:c5:1b:f1:64:7c:7c:b5:96:79:66:46:37:71:24:
b8:67:cf:cc:55:47:9f:3f:18:f4:06:03:2a:1f:f6:
5d:67:e0:c4:d9:28:df:e1:df:0f:93:03:ac:9d:87:
c3:31:a5:b5:40:d9:72:0a:aa:bc:69:e4:18:24:c0:
16:66:3d:e9:d6:e7:b1:6b:19:75:c9:f8:48:d4:bb:
19:2d:01:d0:13:4e:cd:69:fe:4d:3a:32:34:10:73:
d9:e7:40:a3:79:53:ad:4e:a1:4d:12:9d:f7:54:9d:
21:90:cd:a2:30:15:c4:9d:1c:7d:f5:fa:ab:46:2d:
b8:a2:f5:b5:0a:08:e1:69:31:f6:9e:cc:22:bf:b0:
90:5a:39:23:3c:e4:15:39:68:41:d4:11:91:58:fd:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:32:72:7F:A2:6B:12:09:96:7D:70:93:30:6F:63:AF:FF:CD:F6
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nqEycn-iaxIJln1wkzBvY6__zfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:b1:ce:8c:82:2a:cc:b6:38:21:53:4b:2d:34:c1:d3:2f:ea:
87:b1:82:81:5b:72:6d:15:68:ad:c9:f3:fb:7e:58:d7:6e:cb:
4d:c0:b6:9c:73:2d:0a:5b:fc:87:dd:84:19:64:f7:b8:ae:1f:
41:fd:97:92:e7:38:a6:09:a8:ee:00:3c:19:8e:f5:5d:71:3a:
de:14:46:dc:d1:06:db:37:2e:22:0e:b5:95:d6:37:22:ad:ff:
fc:5e:31:17:e3:86:06:6f:8a:5c:c0:69:1b:35:68:06:bf:ac:
3a:2a:21:15:e0:0a:53:d4:7a:46:bd:fd:46:59:06:48:b9:17:
c2:56:37:c9:73:63:d2:5d:04:a3:0d:49:6d:58:53:78:ad:de:
f0:fc:7e:89:4b:e4:0a:20:3e:ed:de:9c:7a:03:0a:66:02:38:
93:6e:24:98:4e:ab:bd:f0:b8:5d:d9:19:f7:8f:ca:38:47:51:
8a:c3:a2:f6:07:3f:26:53:88:ca:b0:65:4c:48:5d:c3:b5:8c:
ba:aa:a4:d0:c3:12:ab:b6:84:98:0b:9f:74:51:47:96:b7:78:
34:57:57:ad:d7:83:68:d3:19:e6:58:84:2c:b8:c0:0d:8b:e2:
54:f9:15:87:cc:a7:bb:fd:fe:3e:96:c5:f8:08:2d:8f:44:d6:
6c:12:e1:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKDUo6J76pCODvmSNFgUkamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjIwODA5MTU1NjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWExMzI3MjdmYTI2YjEyMDk5NjdkNzA5MzMwNmY2M2FmZmZjZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5P5rEoWguFhF3vQuk97lqwTwCq6
w1eSKvJBOCOi9Gd2ecoWn/GVCZXhm3SU1iVxemCCBRK2Tg+oSPAfDJTkOiIdKm2g
UsOUQVFkkYk0KsZZ9jOkXvUjsBijoMiOA4qamqUt4hV3nNzXxRvxZHx8tZZ5ZkY3
cSS4Z8/MVUefPxj0BgMqH/ZdZ+DE2Sjf4d8PkwOsnYfDMaW1QNlyCqq8aeQYJMAW
Zj3p1uexaxl1yfhI1LsZLQHQE07Naf5NOjI0EHPZ50CjeVOtTqFNEp33VJ0hkM2i
MBXEnRx99fqrRi24ovW1CgjhaTH2nswiv7CQWjkjPOQVOWhB1BGRWP2ZIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ6hMnJ/omsSCZZ9cJMwb2Ov/832MB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvbnFFeWNuLWlheElKbG4xd2t6QnZZNl9femZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLh0YMA0G
CSqGSIb3DQEBCwUAA4IBAQCzsc6MgirMtjghU0stNMHTL+qHsYKBW3JtFWityfP7
fljXbstNwLaccy0KW/yH3YQZZPe4rh9B/ZeS5zimCajuADwZjvVdcTreFEbc0Qbb
Ny4iDrWV1jcirf/8XjEX44YGb4pcwGkbNWgGv6w6KiEV4ApT1HpGvf1GWQZIuRfC
VjfJc2PSXQSjDUltWFN4rd7w/H6JS+QKID7t3px6AwpmAjiTbiSYTqu98Lhd2Rn3
j8o4R1GKw6L2Bz8mU4jKsGVMSF3DtYy6qqTQwxKrtoSYC590UUeWt3g0V1et14No
0xnmWIQsuMANi+JU+RWHzKe7/f4+lsX4CC2PRNZsEuGk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org