Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/NEIXk99BZpWu2YYnQIaTl-borow.roa
File: NEIXk99BZpWu2YYnQIaTl-borow.roa (raw, json)
Hash identifier: Wh4f+gh62R4qw2xU6W14zzOhNFAZ6hGYHhA+Fuz1o6s=
Subject key identifier: 34:42:17:93:DF:41:66:95:AE:D9:86:27:40:86:93:97:E6:E8:AE:8C
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 388AC64A
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/NEIXk99BZpWu2YYnQIaTl-borow.roa
Signing time: Sat 01 Jan 2022 12:00:56 +0000
ROA not before: Sat 01 Jan 2022 12:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201054
IP address blocks: 94.246.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948618826 (0x388ac64a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 1 12:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34421793df416695aed9862740869397e6e8ae8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:ba:b2:e2:8e:ea:99:f2:69:40:5e:c5:65:
7e:b9:89:87:7c:6c:19:7f:28:b8:d8:d1:5f:2e:36:
e6:88:b0:f3:07:9e:62:13:66:32:2f:25:ae:94:24:
cb:b6:ea:a7:24:e8:85:83:d1:30:ce:f3:64:4f:fe:
bf:c6:b1:16:7c:3c:39:7d:46:41:d1:75:10:47:a3:
1a:53:aa:7f:35:50:f0:ef:13:be:e1:0c:80:34:4d:
52:97:5e:04:75:e3:01:62:ae:b1:4f:9e:1a:e2:a7:
b3:79:e5:92:00:48:46:39:c5:bd:09:17:42:02:31:
2c:37:b3:34:6c:85:b1:ed:51:d3:fd:34:f2:19:6d:
6c:ca:67:30:5e:71:84:2b:6d:40:f8:c3:2a:16:df:
8b:e6:20:53:f8:e9:29:d6:4b:61:a6:2b:94:0a:59:
3a:30:d7:51:24:a9:44:75:66:8e:2d:67:b1:90:c2:
ba:96:75:6d:d2:9c:ab:56:66:d9:ba:86:d3:e1:16:
e5:3f:e0:4e:60:96:ec:51:61:47:c6:93:cd:d5:cb:
29:0b:1b:0e:e7:a9:0e:fe:0a:68:14:b3:4b:a9:2b:
60:70:a8:62:86:f4:b6:9f:a3:3d:64:78:2a:c2:08:
66:44:e7:c3:cc:a9:c9:b6:2c:61:d7:c7:ab:08:78:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:17:93:DF:41:66:95:AE:D9:86:27:40:86:93:97:E6:E8:AE:8C
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/NEIXk99BZpWu2YYnQIaTl-borow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.246.185.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d3:5e:7f:dd:81:b4:98:16:d9:9f:91:30:2f:81:77:a2:bb:
18:a1:77:58:8a:23:d9:76:6c:ac:60:28:e5:cd:0d:9f:b8:9f:
da:52:57:61:23:79:2e:4c:7b:6d:69:30:43:72:62:89:fe:aa:
04:dd:90:9b:0f:c6:d2:fb:d7:9f:dd:5e:f8:91:ca:1d:57:31:
ed:7b:8e:7a:de:f2:f1:54:a8:98:0a:73:87:5d:2a:bc:41:ff:
f3:a2:e0:29:6f:26:e9:57:8d:b6:f8:99:a2:15:c8:aa:8c:9a:
e3:81:f4:0a:0f:1e:99:9c:88:0c:a4:85:94:6d:bc:7c:66:fe:
d2:51:50:20:f4:03:85:ee:90:b7:b0:b8:c7:4d:67:00:f5:68:
8b:b7:a9:66:d5:41:ec:7b:3f:51:e1:0b:74:74:d5:11:f2:d6:
d9:c1:2a:43:c6:c1:f5:74:94:f5:5d:1e:d9:cc:59:42:13:51:
cb:4e:2f:8a:c4:ae:c4:1e:d3:f6:9e:e4:3b:76:3e:76:dd:ae:
af:01:02:cb:57:c3:da:0b:3e:76:49:fa:90:23:a4:0a:bd:b6:
16:9f:a0:77:da:06:cb:25:d5:41:05:9d:fb:3c:18:c9:0c:e4:
00:45:b8:1f:de:33:2b:aa:0e:9b:37:bc:e0:ce:5d:d4:d4:4f:
11:1d:8c:f4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOIrGSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OWI4N2IzYjA5Y2NiNjlhNmRlMjA0NjhlOTBlY2JiMThmNWVjYmI2MB4XDTIyMDEw
MTEyMDA1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzQ0MjE3OTNkZjQx
NjY5NWFlZDk4NjI3NDA4NjkzOTdlNmU4YWU4YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJEPurLijuqZ8mlAXsVlfrmJh3xsGX8ouNjRXy425oiw8wee
YhNmMi8lrpQky7bqpyTohYPRMM7zZE/+v8axFnw8OX1GQdF1EEejGlOqfzVQ8O8T
vuEMgDRNUpdeBHXjAWKusU+eGuKns3nlkgBIRjnFvQkXQgIxLDezNGyFse1R0/00
8hltbMpnMF5xhCttQPjDKhbfi+YgU/jpKdZLYaYrlApZOjDXUSSpRHVmji1nsZDC
upZ1bdKcq1Zm2bqG0+EW5T/gTmCW7FFhR8aTzdXLKQsbDuepDv4KaBSzS6krYHCo
Yob0tp+jPWR4KsIIZkTnw8ypybYsYdfHqwh4Vs8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ0QheT30Fmla7ZhidAhpOX5uiujDAfBgNVHSMEGDAWgBS5uHs7Ccy2mm3i
BGjpDsuxj17LtjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ViaDdPd25NdHBwdDRnUm82UTdMc1k5ZXk3WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvMDBkZGFmLTNiZTUtNDIwZC05MTlmLTNiNGNiOTc1YTliYy8x
L05FSVhrOTlCWnBXdTJZWW5RSWFUbC1ib3Jvdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
MDBkZGFmLTNiZTUtNDIwZC05MTlmLTNiNGNiOTc1YTliYy8xL3ViaDdPd25NdHBw
dDRnUm82UTdMc1k5ZXk3WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF72uTANBgkqhkiG9w0BAQsFAAOC
AQEAgdNef92BtJgW2Z+RMC+Bd6K7GKF3WIoj2XZsrGAo5c0Nn7if2lJXYSN5Lkx7
bWkwQ3Jiif6qBN2Qmw/G0vvXn91e+JHKHVcx7XuOet7y8VSomApzh10qvEH/86Lg
KW8m6VeNtviZohXIqoya44H0Cg8emZyIDKSFlG28fGb+0lFQIPQDhe6Qt7C4x01n
APVoi7epZtVB7Hs/UeELdHTVEfLW2cEqQ8bB9XSU9V0e2cxZQhNRy04visSuxB7T
9p7kO3Y+dt2urwECy1fD2gs+dkn6kCOkCr22Fp+gd9oGyyXVQQWd+zwYyQzkAEW4
H94zK6oOmze84M5d1NRPER2M9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:38 2024 by rpki-client on console-ams.rpki-client.org