Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Ndr1X_gOPJ15jOG-2DRuIobJRFs.roa
File: Ndr1X_gOPJ15jOG-2DRuIobJRFs.roa (raw, json)
Hash identifier: ne3fXNhdBOxciH3RUEbJhTX49NEfS/iURUk3sKGj0Uk=
Subject key identifier: 35:DA:F5:5F:F8:0E:3C:9D:79:8C:E1:BE:D8:34:6E:22:86:C9:44:5B
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0185607A3BA7324A2AA8DD4A091A7A5A9342
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Ndr1X_gOPJ15jOG-2DRuIobJRFs.roa
Signing time: Fri 30 Dec 2022 00:41:41 +0000
ROA not before: Fri 30 Dec 2022 00:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4477
IP address blocks: 193.57.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:60:7a:3b:a7:32:4a:2a:a8:dd:4a:09:1a:7a:5a:93:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Dec 30 00:41:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35daf55ff80e3c9d798ce1bed8346e2286c9445b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:8a:34:28:e1:42:59:58:17:a4:1e:f5:38:
9c:9b:0d:f0:7f:e5:a3:7b:e0:97:be:4a:cd:c0:9c:
6b:76:76:c8:e5:22:d9:79:b7:9b:e5:13:1b:d3:44:
a7:14:3d:36:13:d0:18:73:1a:c4:02:93:97:25:ec:
e0:b2:ef:6b:81:2b:12:48:35:4b:45:0d:1f:02:b2:
b9:c9:97:f6:7c:01:6a:ee:b1:c0:17:81:6b:fe:71:
8a:c3:6e:29:e1:d1:4c:69:4a:25:be:5b:b8:c6:5e:
d4:57:40:b9:fb:b3:d7:21:b1:14:a9:e5:48:c0:0b:
11:29:1c:e2:bd:51:68:bd:45:48:8e:58:ea:ca:e0:
34:64:e3:69:d4:e0:e1:f5:3e:21:29:75:2c:df:15:
f7:1a:02:85:37:16:2b:04:6c:21:e6:78:ab:87:d8:
a8:12:18:a0:57:df:3c:b8:2b:a8:ad:9e:82:04:b8:
f7:be:a5:3a:43:af:26:00:ee:27:66:0d:fd:00:c1:
0f:9b:60:d9:5b:85:d5:7e:3a:dd:a2:c3:79:8c:80:
f6:01:53:73:c6:90:ee:ee:15:72:0d:36:62:ef:6b:
91:11:9a:77:59:8f:f0:b1:b0:da:08:72:27:97:42:
cf:aa:80:f1:c2:18:c1:4a:29:25:f6:51:30:78:9d:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DA:F5:5F:F8:0E:3C:9D:79:8C:E1:BE:D8:34:6E:22:86:C9:44:5B
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Ndr1X_gOPJ15jOG-2DRuIobJRFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.137.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ed:e1:3a:e8:be:68:87:44:b8:b4:e7:c3:38:a2:6b:0e:82:
bb:2b:50:53:55:bc:9f:29:9a:e5:d6:fb:52:2f:46:c0:25:86:
e1:17:47:a7:d3:9a:c4:47:e0:af:cb:de:2e:c8:a0:99:13:46:
68:e5:8c:b0:c4:80:c6:7f:89:15:f0:d3:3f:1b:c8:a5:66:2a:
33:74:94:42:20:5b:3b:33:6e:ee:0a:58:12:38:fc:9b:7b:b0:
ea:ae:01:33:ec:c8:d6:53:11:28:11:83:7b:9d:4a:b0:d2:35:
96:e2:5a:01:af:da:9d:9a:19:f7:14:9b:6e:b1:da:40:40:fe:
51:83:11:71:fb:6f:94:ca:0d:9d:5a:98:3a:7a:d7:58:a9:71:
62:cd:17:05:6c:44:be:e5:28:99:c1:4d:53:e5:65:ba:c4:be:
d7:54:2c:8b:5c:94:73:bb:2d:92:9c:fc:41:d6:d8:36:f6:a5:
4f:ad:b1:95:5d:84:f4:5a:57:57:4a:ed:2d:20:b4:ac:01:a9:
a3:e5:f1:70:84:7f:1d:0c:7c:f0:40:86:a3:e5:80:92:62:25:
c5:26:6e:c7:02:4d:64:4a:c3:30:c4:72:3f:52:33:65:49:c9:
8f:cf:9c:5a:25:e9:87:e6:53:fe:36:17:c5:ff:69:38:4d:23:
da:ae:59:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVgejunMkoqqN1KCRp6WpNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjIxMjMwMDA0MTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWRhZjU1ZmY4MGUzYzlkNzk4Y2UxYmVkODM0NmUyMjg2Yzk0NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2aKNCjhQllYF6Qe9Ticmw3wf+Wj
e+CXvkrNwJxrdnbI5SLZebeb5RMb00SnFD02E9AYcxrEApOXJezgsu9rgSsSSDVL
RQ0fArK5yZf2fAFq7rHAF4Fr/nGKw24p4dFMaUolvlu4xl7UV0C5+7PXIbEUqeVI
wAsRKRzivVFovUVIjljqyuA0ZONp1ODh9T4hKXUs3xX3GgKFNxYrBGwh5nirh9io
EhigV988uCuorZ6CBLj3vqU6Q68mAO4nZg39AMEPm2DZW4XVfjrdosN5jID2AVNz
xpDu7hVyDTZi72uREZp3WY/wsbDaCHInl0LPqoDxwhjBSikl9lEweJ2opwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDXa9V/4DjydeYzhvtg0biKGyURbMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvTmRyMVhfZ09QSjE1ak9HLTJEUnVJb2JKUkZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTmJMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ7eE66L5oh0S4tOfDOKJrDoK7K1BTVbyfKZrl1vtS
L0bAJYbhF0en05rER+Cvy94uyKCZE0Zo5YywxIDGf4kV8NM/G8ilZiozdJRCIFs7
M27uClgSOPybe7DqrgEz7MjWUxEoEYN7nUqw0jWW4loBr9qdmhn3FJtusdpAQP5R
gxFx+2+Uyg2dWpg6etdYqXFizRcFbES+5SiZwU1T5WW6xL7XVCyLXJRzuy2SnPxB
1tg29qVPrbGVXYT0WldXSu0tILSsAamj5fFwhH8dDHzwQIaj5YCSYiXFJm7HAk1k
SsMwxHI/UjNlScmPz5xaJemH5lP+NhfF/2k4TSParllt
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org