Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nmpCrKi9ug7W2Tiwyzi2waoeALQ.roa
File: nmpCrKi9ug7W2Tiwyzi2waoeALQ.roa (raw, json)
Hash identifier: P0IS9lOOCdGUVPIyECUtxOtfOZDVhZZVcRDyepe6LNw=
Subject key identifier: 9E:6A:42:AC:A8:BD:BA:0E:D6:D9:38:B0:CB:38:B6:C1:AA:1E:00:B4
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0185148F4D602D27141E43C0D3F19FCA7F9D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nmpCrKi9ug7W2Tiwyzi2waoeALQ.roa
Signing time: Thu 15 Dec 2022 06:53:33 +0000
ROA not before: Thu 15 Dec 2022 06:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 88.216.199.0/24 maxlen: 24
88.216.211.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.245.0/24 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
84.32.88.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
84.32.10.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.47.0/24 maxlen: 24
88.216.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:8f:4d:60:2d:27:14:1e:43:c0:d3:f1:9f:ca:7f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Dec 15 06:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e6a42aca8bdba0ed6d938b0cb38b6c1aa1e00b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:67:f9:2d:3d:02:6f:d3:e2:24:ab:b8:71:
59:b3:08:98:89:21:c2:f7:4f:71:6a:fa:40:18:52:
4a:d4:ee:b2:bd:39:5c:89:29:ab:80:7d:6b:58:9a:
63:ae:30:1d:3c:0e:83:2d:e7:62:18:21:2c:70:fa:
f7:34:d3:be:5a:c9:92:13:db:f4:9a:64:ea:6a:e3:
a2:6e:d2:f7:7f:78:bf:7e:77:68:e5:9b:8a:49:86:
85:c4:4c:ac:60:23:e3:15:ed:02:b2:57:86:0d:1b:
8d:c7:8c:ac:91:89:d6:44:01:ae:7d:34:e9:c4:1e:
d2:89:61:e7:a4:55:9d:cd:8e:95:77:ce:4c:18:80:
ac:01:89:bc:49:54:ff:90:df:a0:94:63:4a:1f:28:
c8:35:d3:0f:94:c2:27:fe:e5:d7:f8:be:6c:ba:19:
6a:8f:0a:4d:75:0e:b5:c1:7e:33:d9:f8:7f:9c:83:
7a:13:ee:e7:e1:f7:47:7a:73:ae:81:c5:d7:c3:4d:
04:1d:e9:56:f5:8a:13:9c:87:8c:00:be:61:73:8d:
65:d1:59:0f:86:35:3b:4f:80:08:57:19:3e:58:35:
99:f4:34:55:19:5f:cb:5f:77:2c:d1:3c:fb:b1:8a:
f7:5d:53:24:08:e0:c4:3a:a7:bd:ca:82:da:a6:36:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6A:42:AC:A8:BD:BA:0E:D6:D9:38:B0:CB:38:B6:C1:AA:1E:00:B4
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/nmpCrKi9ug7W2Tiwyzi2waoeALQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/24
84.32.10.0/24
84.32.48.0/24
84.32.50.0/24
84.32.58.0/24
84.32.71.0/24
84.32.88.0/24
84.32.93.0/24
84.32.177.0/24
84.32.218.0/24
84.32.226.0/24
84.32.238.0/23
84.32.245.0/24
88.216.3.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.46.0/23
88.216.92.0/24
88.216.134.0/24
88.216.199.0/24
88.216.210.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ed:cf:dc:15:ee:a4:d3:55:73:db:df:21:94:ad:b0:33:1f:
b5:1d:1c:c7:41:3f:ed:3e:5e:91:a6:65:00:88:8b:c3:4c:60:
d0:b7:39:2f:f7:35:f4:a8:94:bd:f8:ca:cb:97:be:f7:78:43:
53:9d:fa:dd:29:3c:de:d9:16:b4:51:4b:16:ce:29:ca:34:80:
a7:2d:88:21:af:76:f5:79:06:53:a2:04:6a:5d:8f:b6:ea:fc:
c6:2c:3e:6f:5c:03:33:80:f5:55:8a:da:43:70:e0:09:4c:c4:
57:20:9e:41:02:28:a1:57:9f:87:91:ad:01:9f:3b:f0:f1:55:
5c:64:ca:8e:44:cb:47:c2:7a:18:08:6f:34:03:31:50:5e:e4:
83:ea:1e:81:2b:69:90:39:1f:5d:a9:37:95:b6:a2:71:a0:ff:
a8:23:16:a8:53:28:30:ac:ea:64:5c:cd:8b:bd:ea:6a:98:95:
ba:fa:0d:aa:58:aa:33:03:c0:2a:6a:0b:b2:0d:56:29:32:9a:
bf:6f:d3:e3:10:d5:7e:ec:4e:77:09:8d:2f:f0:7a:1c:7a:55:
7f:f9:eb:86:db:90:d7:e5:b7:eb:8c:e6:8a:ed:06:36:ac:1e:
9e:10:e7:99:70:d6:6c:38:ab:5d:e0:6e:1d:d8:51:a4:69:10:
b6:de:65:9e
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAYUUj01gLScUHkPA0/Gfyn+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjIxMjE1MDY1MzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTZhNDJhY2E4YmRiYTBlZDZkOTM4YjBjYjM4YjZjMWFhMWUwMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gpn+S09Am/T4iSruHFZswiYiSHC
909xavpAGFJK1O6yvTlciSmrgH1rWJpjrjAdPA6DLediGCEscPr3NNO+WsmSE9v0
mmTqauOibtL3f3i/fndo5ZuKSYaFxEysYCPjFe0CsleGDRuNx4yskYnWRAGufTTp
xB7SiWHnpFWdzY6Vd85MGICsAYm8SVT/kN+glGNKHyjINdMPlMIn/uXX+L5suhlq
jwpNdQ61wX4z2fh/nIN6E+7n4fdHenOugcXXw00EHelW9YoTnIeMAL5hc41l0VkP
hjU7T4AIVxk+WDWZ9DRVGV/LX3cs0Tz7sYr3XVMkCODEOqe9yoLapja09QIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFJ5qQqyovboO1tk4sMs4tsGqHgC0MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbm1wQ3JLaTl1ZzdXMlRpd3l6aTJ3YW9lQUxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBABU
IAgDBABUIAoDBABUIDADBABUIDIDBABUIDoDBABUIEcDBABUIFgDBABUIF0DBABU
ILEDBABUINoDBABUIOIDBAFUIO4DBABUIPUDBABY2AMwDAMEAFjYFQMEAFjYFgME
AFjYIAMEAVjYLgMEAFjYXAMEAFjYhgMEAFjYxwMEAVjY0gMEAFjY3zANBgkqhkiG
9w0BAQsFAAOCAQEAEu3P3BXupNNVc9vfIZStsDMftR0cx0E/7T5ekaZlAIiLw0xg
0Lc5L/c19KiUvfjKy5e+93hDU5363Sk83tkWtFFLFs4pyjSApy2IIa929XkGU6IE
al2Ptur8xiw+b1wDM4D1VYraQ3DgCUzEVyCeQQIooVefh5GtAZ878PFVXGTKjkTL
R8J6GAhvNAMxUF7kg+oegStpkDkfXak3lbaicaD/qCMWqFMoMKzqZFzNi73qapiV
uvoNqliqMwPAKmoLsg1WKTKav2/T4xDVfuxOdwmNL/B6HHpVf/nrhtuQ1+W364zm
iu0GNqwenhDnmXDWbDirXeBuHdhRpGkQtt5lng==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:50 2023 by rpki-client on console-fra.rpki-client.org