Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/NaUOnooQEzIRU47w2Qcl-h7aShQ.roa
File: NaUOnooQEzIRU47w2Qcl-h7aShQ.roa (raw, json)
Hash identifier: 3yiHWMgpVRhgCm49rr4Xb1WyC47La7aHKF56xdXufDs=
Subject key identifier: 35:A5:0E:9E:8A:10:13:32:11:53:8E:F0:D9:07:25:FA:1E:DA:4A:14
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0182A622812A1D5763FCA8959B70D5BD5318
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/NaUOnooQEzIRU47w2Qcl-h7aShQ.roa
Signing time: Tue 16 Aug 2022 10:10:55 +0000
ROA not before: Tue 16 Aug 2022 10:10:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 176.57.58.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:22:81:2a:1d:57:63:fc:a8:95:9b:70:d5:bd:53:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Aug 16 10:10:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35a50e9e8a10133211538ef0d90725fa1eda4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:fc:78:ac:c6:9c:5d:a3:1e:d7:f4:67:40:
c0:c3:c0:7b:87:91:d9:ba:c8:cc:32:cd:b1:e8:66:
ac:f5:1c:51:d9:b8:b0:77:99:2e:cf:7e:e4:35:8e:
ec:9f:f3:36:f2:f7:42:6b:cf:cd:88:2d:10:a7:38:
55:f5:31:86:7c:46:fc:1a:57:00:c2:f1:b1:fb:a8:
e7:d9:10:91:9c:7f:6c:45:5a:91:ff:63:2c:4a:d8:
ad:4a:e0:06:c8:ec:52:32:22:94:ef:06:f5:20:cb:
3b:2e:cd:00:4b:50:19:d1:46:15:9c:64:a1:c4:48:
ca:b3:70:55:0f:14:40:00:c2:09:08:fd:92:67:e7:
53:26:02:9f:b4:56:ab:92:43:cc:a7:c3:c4:ba:61:
86:bb:56:68:e8:c5:fe:40:0d:b3:29:51:26:0c:ac:
10:7e:63:35:2a:d7:c9:83:44:60:78:50:ba:95:81:
41:dd:69:95:1a:61:80:1b:21:bf:61:8e:8c:da:73:
9a:1e:3c:ff:8c:5a:2c:86:20:81:b8:9e:2c:11:f1:
77:dd:57:5e:49:5d:b7:47:67:ce:60:d3:d2:2e:3c:
c1:db:f9:4f:b7:81:fc:ce:23:ad:2e:5c:b1:cc:c1:
b0:02:ed:c1:48:fd:a9:94:94:9c:1f:82:65:46:b5:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:0E:9E:8A:10:13:32:11:53:8E:F0:D9:07:25:FA:1E:DA:4A:14
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/NaUOnooQEzIRU47w2Qcl-h7aShQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.58.0/23
Signature Algorithm: sha256WithRSAEncryption
58:b9:8f:c4:3f:92:c8:b0:3c:a6:51:20:8b:e5:d1:4d:4b:35:
67:cc:b8:94:b6:89:f8:38:a8:60:60:89:42:c9:cb:2a:29:85:
b1:d5:29:45:d5:d7:61:97:9e:61:09:30:ff:9d:95:29:6c:08:
5d:1e:32:75:2e:5d:7d:69:a0:41:05:13:f8:b2:55:8e:cf:eb:
9e:5a:63:d5:72:e1:43:65:7a:ae:a0:b3:28:77:97:0e:dc:04:
37:38:76:70:0b:6b:7b:33:89:12:d7:5c:cf:19:53:e4:11:e2:
1a:84:05:a9:d1:23:04:c2:65:a6:47:dd:36:97:b7:60:5e:b6:
f1:33:8f:0b:20:47:42:e2:c1:fc:72:bb:66:c3:ed:91:45:94:
fa:c3:c2:10:46:c7:f8:12:55:b5:34:d3:7e:4c:17:54:18:01:
c8:5a:da:38:fe:a0:71:ba:6c:c8:c3:55:2e:3f:dc:c7:08:e3:
22:50:57:78:3d:c6:4c:94:f9:e5:89:33:29:c6:16:53:15:ec:
92:af:59:80:e1:f5:88:b0:cd:fb:0d:15:78:fc:8c:70:00:66:
72:2f:e0:ab:c9:8e:18:63:6f:95:65:49:8e:a7:4b:55:ea:5d:
f6:63:e4:1f:88:bd:04:be:0a:23:ee:29:e9:ba:77:06:18:19:
51:6c:1d:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKmIoEqHVdj/KiVm3DVvVMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjIwODE2MTAxMDU1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWE1MGU5ZThhMTAxMzMyMTE1MzhlZjBkOTA3MjVmYTFlZGE0YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE78eKzGnF2jHtf0Z0DAw8B7h5HZ
usjMMs2x6Gas9RxR2biwd5kuz37kNY7sn/M28vdCa8/NiC0QpzhV9TGGfEb8GlcA
wvGx+6jn2RCRnH9sRVqR/2MsStitSuAGyOxSMiKU7wb1IMs7Ls0AS1AZ0UYVnGSh
xEjKs3BVDxRAAMIJCP2SZ+dTJgKftFarkkPMp8PEumGGu1Zo6MX+QA2zKVEmDKwQ
fmM1KtfJg0RgeFC6lYFB3WmVGmGAGyG/YY6M2nOaHjz/jFoshiCBuJ4sEfF33Vde
SV23R2fOYNPSLjzB2/lPt4H8ziOtLlyxzMGwAu3BSP2plJScH4JlRrXjJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDWlDp6KEBMyEVOO8NkHJfoe2koUMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvTmFVT25vb1FFeklSVTQ3dzJRY2wtaDdhU2hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsDk6MA0G
CSqGSIb3DQEBCwUAA4IBAQBYuY/EP5LIsDymUSCL5dFNSzVnzLiUton4OKhgYIlC
ycsqKYWx1SlF1ddhl55hCTD/nZUpbAhdHjJ1Ll19aaBBBRP4slWOz+ueWmPVcuFD
ZXquoLMod5cO3AQ3OHZwC2t7M4kS11zPGVPkEeIahAWp0SMEwmWmR902l7dgXrbx
M48LIEdC4sH8crtmw+2RRZT6w8IQRsf4ElW1NNN+TBdUGAHIWto4/qBxumzIw1Uu
P9zHCOMiUFd4PcZMlPnliTMpxhZTFeySr1mA4fWIsM37DRV4/IxwAGZyL+CryY4Y
Y2+VZUmOp0tV6l32Y+QfiL0Evgoj7inpuncGGBlRbB1X
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org