Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/Nup5oOxRbiGUVLAViXUBREVG2qQ.roa
File: Nup5oOxRbiGUVLAViXUBREVG2qQ.roa (raw, json)
Hash identifier: 6vEFu6oPrIcQujjaO+rT1djJLMhH9xkiCKtL0k6OHVo=
Subject key identifier: 36:EA:79:A0:EC:51:6E:21:94:54:B0:15:89:75:01:44:45:46:DA:A4
Certificate issuer: /CN=b2fbfe5f059f9dc13454344c90749574ece629f5
Certificate serial: 0A086E0B
Authority key identifier: B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/Nup5oOxRbiGUVLAViXUBREVG2qQ.roa
Signing time: Sat 01 Jan 2022 14:55:26 +0000
ROA not before: Sat 01 Jan 2022 14:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202780
IP address blocks: 185.154.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168324619 (0xa086e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2fbfe5f059f9dc13454344c90749574ece629f5
Validity
Not Before: Jan 1 14:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36ea79a0ec516e219454b015897501444546daa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cf:94:5f:71:0c:5b:85:1c:6d:85:9d:e1:71:
65:15:64:e3:5c:29:1b:1c:eb:dc:93:83:7e:47:37:
11:51:7e:cd:fb:ad:7b:a9:c5:de:3b:08:dc:c0:e8:
4e:29:bb:85:f0:88:5c:c4:43:01:7a:c1:76:61:c3:
da:76:b9:d2:ed:81:07:ab:62:ea:d9:51:34:29:17:
e2:55:61:55:e9:5f:f3:fd:c3:63:d2:83:6c:e1:80:
2f:f3:d1:ca:f0:08:a5:d7:9e:29:13:3d:fc:ae:ee:
06:ea:97:3d:d3:64:2a:07:f2:03:98:10:54:53:9d:
af:7a:40:a0:c3:b4:9b:5c:71:ca:24:f5:ea:27:ac:
8a:11:ca:3d:3a:f3:77:8a:46:66:08:e3:99:a1:6a:
f6:92:a7:47:ff:3a:58:6a:0b:30:dd:06:e6:8c:b9:
fc:a6:6d:26:5d:03:2e:15:d7:60:8c:c2:8d:48:87:
55:71:4b:cc:ff:e5:99:be:33:2d:31:d9:05:40:5e:
5c:c7:37:16:b3:30:e6:17:79:ab:92:28:16:5b:58:
cd:1e:8d:7c:4e:de:59:c7:2a:34:3c:51:1f:8a:d0:
22:f1:9d:30:6e:02:68:2f:50:fd:b8:3d:7d:49:c6:
ca:a3:14:40:4f:66:e0:e1:c3:a2:49:d5:c8:6d:0a:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:79:A0:EC:51:6E:21:94:54:B0:15:89:75:01:44:45:46:DA:A4
X509v3 Authority Key Identifier:
keyid:B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/Nup5oOxRbiGUVLAViXUBREVG2qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.228.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:e9:80:c8:fe:c8:64:6e:4f:00:ff:2b:1a:d0:75:eb:d4:02:
e0:d6:2c:73:b4:fc:33:65:7b:c3:1b:6b:9d:e5:17:85:2b:d2:
df:83:ff:68:ee:1d:be:4a:fd:bf:4b:1a:3f:60:fc:e7:dd:47:
13:d4:8b:57:de:9f:43:f4:f8:5f:8d:2e:4e:87:d6:dc:09:44:
dc:7c:b9:4c:a5:2d:6e:dd:f3:7b:5e:ce:07:c9:1a:cd:50:47:
bd:de:7f:5b:78:8c:e5:7b:4b:19:d5:61:e8:7b:2d:20:bd:f8:
38:8f:3b:fb:f7:ee:58:95:e2:e7:6e:b4:2c:49:ec:39:cd:6f:
e1:c0:13:30:48:f1:69:e2:38:09:68:4b:64:c8:74:4b:9d:f3:
31:76:5c:d7:83:2c:71:1b:9b:ff:4c:51:c8:d8:a4:51:76:d7:
71:60:dd:d8:5b:c7:67:43:c7:a6:fb:c1:0a:29:62:3a:0e:24:
7d:e2:f5:c0:42:32:7d:9c:a0:48:28:05:af:a3:dd:38:8e:ba:
48:e0:56:f8:30:54:e6:08:18:ec:81:e4:7d:02:69:15:4b:e0:
44:4d:b4:49:55:13:f3:08:bb:fc:0a:19:6c:44:f2:61:b8:d1:
f9:ff:22:04:81:f9:8b:49:42:53:1a:a2:82:97:b6:b1:37:96:
98:9a:54:85
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECghuCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MmZiZmU1ZjA1OWY5ZGMxMzQ1NDM0NGM5MDc0OTU3NGVjZTYyOWY1MB4XDTIyMDEw
MTE0NTUyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzZlYTc5YTBlYzUx
NmUyMTk0NTRiMDE1ODk3NTAxNDQ0NTQ2ZGFhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPXPlF9xDFuFHG2FneFxZRVk41wpGxzr3JODfkc3EVF+zfut
e6nF3jsI3MDoTim7hfCIXMRDAXrBdmHD2na50u2BB6ti6tlRNCkX4lVhVelf8/3D
Y9KDbOGAL/PRyvAIpdeeKRM9/K7uBuqXPdNkKgfyA5gQVFOdr3pAoMO0m1xxyiT1
6iesihHKPTrzd4pGZgjjmaFq9pKnR/86WGoLMN0G5oy5/KZtJl0DLhXXYIzCjUiH
VXFLzP/lmb4zLTHZBUBeXMc3FrMw5hd5q5IoFltYzR6NfE7eWccqNDxRH4rQIvGd
MG4CaC9Q/bg9fUnGyqMUQE9m4OHDoknVyG0KIoMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ26nmg7FFuIZRUsBWJdQFERUbapDAfBgNVHSMEGDAWgBSy+/5fBZ+dwTRU
NEyQdJV07OYp9TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3N2di1Yd1dmbmNFMFZEUk1rSFNWZE96bUtmVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvMDVjNjY5LTA0ZjgtNDI4My05Y2RiLTYwZTNlMjE0YTYzZS8x
L051cDVvT3hSYmlHVVZMQVZpWFVCUkVWRzJxUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
MDVjNjY5LTA0ZjgtNDI4My05Y2RiLTYwZTNlMjE0YTYzZS8xL3N2di1Yd1dmbmNF
MFZEUk1rSFNWZE96bUtmVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArma5DANBgkqhkiG9w0BAQsFAAOC
AQEATemAyP7IZG5PAP8rGtB169QC4NYsc7T8M2V7wxtrneUXhSvS34P/aO4dvkr9
v0saP2D8591HE9SLV96fQ/T4X40uTofW3AlE3Hy5TKUtbt3ze17OB8kazVBHvd5/
W3iM5XtLGdVh6HstIL34OI87+/fuWJXi5260LEnsOc1v4cATMEjxaeI4CWhLZMh0
S53zMXZc14MscRub/0xRyNikUXbXcWDd2FvHZ0PHpvvBCiliOg4kfeL1wEIyfZyg
SCgFr6PdOI66SOBW+DBU5ggY7IHkfQJpFUvgRE20SVUT8wi7/AoZbETyYbjR+f8i
BIH5i0lCUxqigpe2sTeWmJpUhQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:29 2025 by rpki-client