Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/NVFOK2iMLK7at-oAP8mqNhUA4q8.roa
File: NVFOK2iMLK7at-oAP8mqNhUA4q8.roa (raw, json)
Hash identifier: BxuxZNVeK3C/ofsoNcZx7kTZyfcZwf2D13t1GTj1zHs=
Subject key identifier: 35:51:4E:2B:68:8C:2C:AE:DA:B7:EA:00:3F:C9:AA:36:15:00:E2:AF
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 0449C47F
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/NVFOK2iMLK7at-oAP8mqNhUA4q8.roa
Signing time: Thu 03 Mar 2022 21:21:24 +0000
ROA not before: Thu 03 Mar 2022 21:21:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12912
IP address blocks: 178.183.0.0/18 maxlen: 18
178.183.224.0/19 maxlen: 19
178.183.32.0/24 maxlen: 24
46.205.240.0/21 maxlen: 21
2001:1b80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71943295 (0x449c47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Mar 3 21:21:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35514e2b688c2caedab7ea003fc9aa361500e2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:a2:ac:59:d9:79:d5:5f:83:3e:9a:c8:e2:
41:45:04:67:17:ae:8b:40:25:fd:fe:d7:bb:87:06:
61:eb:87:81:ba:23:b1:b4:14:75:ed:d9:1a:b9:bc:
e2:fa:a6:16:17:b3:ac:0e:84:5b:d8:9e:c2:9f:12:
fa:77:0d:0c:04:47:09:22:77:83:c0:50:8f:e2:e0:
75:8a:9e:78:9f:d4:f8:d3:30:89:3d:36:e4:f3:41:
93:99:e5:a2:ed:5f:47:b9:cc:ac:f0:9a:bc:8e:de:
c3:61:d5:19:f5:42:32:14:07:f9:48:e1:15:86:eb:
93:b0:de:a5:31:6c:8a:8e:51:7f:1c:8e:60:c4:09:
82:3e:ab:6c:61:21:e1:7c:59:15:a7:fa:53:07:45:
61:59:50:e7:a6:50:13:bd:1c:4c:de:62:52:33:e2:
54:9c:7b:cb:c8:e3:64:0d:26:95:39:58:13:0d:0c:
e1:00:24:8f:b7:62:1a:52:d9:67:39:a8:1d:28:85:
fe:76:32:e1:3a:40:41:c3:3a:81:9b:a0:99:1b:d1:
33:b7:1d:a3:03:85:06:2d:7a:42:74:b9:32:25:a3:
cb:4c:b8:01:2e:10:cc:05:72:55:d2:dd:22:bd:a1:
33:1b:06:c8:11:48:3e:fc:fe:32:d1:6b:41:21:a7:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:4E:2B:68:8C:2C:AE:DA:B7:EA:00:3F:C9:AA:36:15:00:E2:AF
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/NVFOK2iMLK7at-oAP8mqNhUA4q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.205.240.0/21
178.183.0.0/18
178.183.224.0/19
IPv6:
2001:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
87:c7:27:e6:1b:88:c5:56:88:3d:db:a2:83:c2:37:c9:ba:cb:
e4:57:d8:11:27:89:de:8d:52:51:ef:63:4b:b8:44:7b:1c:2a:
a6:af:d6:7e:06:d0:d3:93:f3:c5:fd:07:07:49:20:dc:b2:96:
05:8c:6e:35:a0:86:4d:df:6a:b7:7e:98:9f:ce:ce:4e:ee:9f:
a3:c0:5f:54:9d:f5:46:ea:b0:d7:59:e7:61:d3:cc:73:a3:84:
85:c7:e7:f2:70:ee:2a:de:f1:c2:4a:53:6b:6c:a9:91:31:9e:
9c:e1:85:4c:27:3f:3a:aa:57:90:d9:f3:2c:13:9b:ec:4e:5e:
b6:9f:eb:d5:22:c4:50:18:52:d4:f6:1e:fb:36:9c:e2:0d:bc:
d7:2d:97:5a:2c:c8:6d:da:14:9c:a0:5c:81:77:25:a6:27:7b:
60:d7:2b:df:75:92:c9:2a:46:68:69:6e:81:62:bd:d4:e4:8b:
9a:4b:47:b4:bc:79:ec:de:93:b0:b9:df:78:99:2c:b4:7f:85:
af:2e:3a:2b:77:82:c4:af:86:2a:a4:7f:d3:a4:95:da:6e:cf:
e2:de:8a:05:48:78:43:27:06:d3:ce:8f:27:68:09:96:6b:68:
22:f7:17:fa:12:54:63:82:ee:57:29:27:57:24:90:75:4a:1c:
b6:02:1d:a7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEBEnEfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGQyNGFkZGNjM2Q1Yjc3YTA5OWE5MDcxMjIyNTJhNDdjOGY2MzEwMB4XDTIyMDMw
MzIxMjEyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzU1MTRlMmI2ODhj
MmNhZWRhYjdlYTAwM2ZjOWFhMzYxNTAwZTJhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ1SoqxZ2XnVX4M+msjiQUUEZxeui0Al/f7Xu4cGYeuHgboj
sbQUde3ZGrm84vqmFhezrA6EW9iewp8S+ncNDARHCSJ3g8BQj+LgdYqeeJ/U+NMw
iT025PNBk5nlou1fR7nMrPCavI7ew2HVGfVCMhQH+UjhFYbrk7DepTFsio5RfxyO
YMQJgj6rbGEh4XxZFaf6UwdFYVlQ56ZQE70cTN5iUjPiVJx7y8jjZA0mlTlYEw0M
4QAkj7diGlLZZzmoHSiF/nYy4TpAQcM6gZugmRvRM7cdowOFBi16QnS5MiWjy0y4
AS4QzAVyVdLdIr2hMxsGyBFIPvz+MtFrQSGnw1kCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBQ1UU4raIwsrtq36gA/yao2FQDirzAfBgNVHSMEGDAWgBRo0krdzD1bd6CZ
qQcSIlKkfI9jEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FOSkszY3c5VzNlZ21ha0hFaUpTcEh5UFl4QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvNTFhNjU1LTI3MzUtNDllZi04MGRmLWIzMTZkYjU5MzhmZi8x
L05WRk9LMmlNTEs3YXQtb0FQOG1xTmhVQTRxOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
NTFhNjU1LTI3MzUtNDllZi04MGRmLWIzMTZkYjU5MzhmZi8xL2FOSkszY3c5VzNl
Z21ha0hFaUpTcEh5UFl4QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAy7N8AMEBrK3AAMEBbK34DANBAIA
AjAHAwUDIAEbgDANBgkqhkiG9w0BAQsFAAOCAQEAh8cn5huIxVaIPduig8I3ybrL
5FfYESeJ3o1SUe9jS7hEexwqpq/WfgbQ05Pzxf0HB0kg3LKWBYxuNaCGTd9qt36Y
n87OTu6fo8BfVJ31Ruqw11nnYdPMc6OEhcfn8nDuKt7xwkpTa2ypkTGenOGFTCc/
OqpXkNnzLBOb7E5etp/r1SLEUBhS1PYe+zac4g281y2XWizIbdoUnKBcgXclpid7
YNcr33WSySpGaGlugWK91OSLmktHtLx57N6TsLnfeJkstH+Fry46K3eCxK+GKqR/
06SV2m7P4t6KBUh4QycG086PJ2gJlmtoIvcX+hJUY4LuVyknVySQdUoctgIdpw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org