Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/NcTvRngSDe4heGeVWx_Q_6If35I.roa
File: NcTvRngSDe4heGeVWx_Q_6If35I.roa (raw, json)
Hash identifier: 5611RXYgRWKKkxkwltEixT0WrbHI1ciCsMMzzUa6HKU=
Subject key identifier: 35:C4:EF:46:78:12:0D:EE:21:78:67:95:5B:1F:D0:FF:A2:1F:DF:92
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 371C9C77
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/NcTvRngSDe4heGeVWx_Q_6If35I.roa
Signing time: Sat 01 Jan 2022 11:59:58 +0000
ROA not before: Sat 01 Jan 2022 11:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43844
IP address blocks: 212.25.130.0/23 maxlen: 24
212.25.144.0/21 maxlen: 21
212.25.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924621943 (0x371c9c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 11:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35c4ef4678120dee217867955b1fd0ffa21fdf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:22:02:5f:c7:8a:ec:f8:2e:a5:b8:69:3a:45:
a2:44:6d:32:c8:1f:a0:70:76:a3:5a:c5:69:cc:d6:
f6:ac:cc:f4:b5:70:54:48:2b:e6:97:6c:ce:b1:04:
82:84:14:f4:87:d7:32:af:c3:fa:59:51:84:1e:45:
af:fb:f1:98:46:15:07:f5:c7:6d:08:a9:47:36:db:
42:22:ab:05:63:b2:3c:cc:7d:df:62:1b:f0:64:45:
04:77:76:01:d0:2b:23:60:2b:c2:58:56:91:dd:1b:
20:21:dc:ee:25:0b:de:30:9c:95:82:51:9f:ba:e4:
9d:d3:fa:f9:b8:c0:08:38:91:1d:23:cb:0b:f6:d6:
d5:8f:52:0f:d3:b1:41:13:81:61:d2:6d:89:ef:11:
08:f1:21:9f:df:39:d6:01:04:9e:5c:72:da:40:78:
e1:7e:82:50:07:7a:61:2c:72:59:f9:c6:5f:b0:b0:
86:bc:1e:aa:b6:36:27:76:4b:90:78:ce:dd:b4:62:
53:cb:26:25:8b:50:1a:71:71:75:f2:d0:d3:d2:45:
f2:87:8b:05:5b:7e:a3:7f:17:40:9a:1a:94:89:8f:
ca:d1:c0:7c:6e:58:f5:1b:95:80:5e:31:94:6c:00:
d1:54:07:51:30:67:1f:99:a3:df:8a:33:2c:ce:06:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:EF:46:78:12:0D:EE:21:78:67:95:5B:1F:D0:FF:A2:1F:DF:92
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/NcTvRngSDe4heGeVWx_Q_6If35I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.25.130.0/23
212.25.144.0-212.25.155.255
Signature Algorithm: sha256WithRSAEncryption
bb:de:80:72:1b:a9:e2:28:4c:18:9c:88:c3:64:79:78:9a:8a:
ea:36:ce:de:a9:07:b1:f7:d6:ba:65:01:44:9e:84:80:84:3a:
9e:65:39:9c:00:1c:ec:41:76:32:43:83:6e:a8:3d:e6:6e:15:
e0:dd:1f:d2:13:bc:7c:ee:42:22:23:5b:0c:0b:ec:3c:fb:43:
13:02:85:b5:4a:f9:aa:84:b6:33:dd:af:9a:33:d8:15:b4:7d:
24:28:d9:7f:fd:e9:e8:af:87:b0:43:e9:d5:30:81:15:2f:57:
16:d0:0d:bf:21:18:1a:59:5d:9a:34:99:7d:ef:96:79:d7:ef:
30:e8:5c:29:4c:3e:87:37:8c:ea:86:0b:de:5d:32:f3:2d:61:
04:a0:dc:24:61:31:48:e8:1e:c4:4a:5f:aa:28:7a:be:ee:48:
30:0a:a9:34:b1:5f:c9:01:91:78:d6:b3:70:af:47:b5:3d:e6:
82:1e:45:80:8f:25:49:cb:0b:7f:5b:1a:a0:fa:f6:8c:80:c9:
3d:48:79:c2:25:22:11:48:97:f2:3a:7a:e4:58:a8:05:8f:61:
1d:1f:87:78:05:0e:39:51:f4:f9:83:25:b5:45:8d:35:46:a9:
78:b3:cc:0d:19:ec:b0:18:0e:54:44:50:8a:66:cb:21:55:30:
09:de:23:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIENxycdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ODAxZjIzY2U4MjFjMjY0ZDY3NzI3NTM2ZWMxODM1Mzc1OTRjNWYyMB4XDTIyMDEw
MTExNTk1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzVjNGVmNDY3ODEy
MGRlZTIxNzg2Nzk1NWIxZmQwZmZhMjFmZGY5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOYiAl/Hiuz4LqW4aTpFokRtMsgfoHB2o1rFaczW9qzM9LVw
VEgr5pdszrEEgoQU9IfXMq/D+llRhB5Fr/vxmEYVB/XHbQipRzbbQiKrBWOyPMx9
32Ib8GRFBHd2AdArI2ArwlhWkd0bICHc7iUL3jCclYJRn7rkndP6+bjACDiRHSPL
C/bW1Y9SD9OxQROBYdJtie8RCPEhn9851gEEnlxy2kB44X6CUAd6YSxyWfnGX7Cw
hrweqrY2J3ZLkHjO3bRiU8smJYtQGnFxdfLQ09JF8oeLBVt+o38XQJoalImPytHA
fG5Y9RuVgF4xlGwA0VQHUTBnH5mj34ozLM4GHs8CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQ1xO9GeBIN7iF4Z5VbH9D/oh/fkjAfBgNVHSMEGDAWgBToAfI86CHCZNZ3
J1NuwYNTdZTF8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZBSHlQT2dod21UV2R5ZFRic0dEVTNXVXhmSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjAvZWFiNGQ4LTZhZmQtNGY4MS1hYjEwLTQ2NGViMTgzYjU2OC8x
L05jVHZSbmdTRGU0aGVHZVZXeF9RXzZJZjM1SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAv
ZWFiNGQ4LTZhZmQtNGY4MS1hYjEwLTQ2NGViMTgzYjU2OC8xLzZBSHlQT2dod21U
V2R5ZFRic0dEVTNXVXhmSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAdQZgjAMAwQE1BmQAwQC1BmYMA0G
CSqGSIb3DQEBCwUAA4IBAQC73oByG6niKEwYnIjDZHl4morqNs7eqQex99a6ZQFE
noSAhDqeZTmcABzsQXYyQ4NuqD3mbhXg3R/SE7x87kIiI1sMC+w8+0MTAoW1Svmq
hLYz3a+aM9gVtH0kKNl//enor4ewQ+nVMIEVL1cW0A2/IRgaWV2aNJl975Z51+8w
6FwpTD6HN4zqhgveXTLzLWEEoNwkYTFI6B7ESl+qKHq+7kgwCqk0sV/JAZF41rNw
r0e1PeaCHkWAjyVJywt/Wxqg+vaMgMk9SHnCJSIRSJfyOnrkWKgFj2EdH4d4BQ45
UfT5gyW1RY01Rql4s8wNGeywGA5URFCKZsshVTAJ3iOQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org