Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/npky2O02zGboY-A8YNd_xyEZc2Q.roa
File: npky2O02zGboY-A8YNd_xyEZc2Q.roa (raw, json)
Hash identifier: PmseVCtEu5w5q7DhpfEPYH4vhnc/jadJEd4bZ2r4OAw=
Subject key identifier: 9E:99:32:D8:ED:36:CC:66:E8:63:E0:3C:60:D7:7F:C7:21:19:73:64
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 8C0E
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/npky2O02zGboY-A8YNd_xyEZc2Q.roa
Signing time: Thu 28 Apr 2022 12:38:42 +0000
ROA not before: Thu 28 Apr 2022 12:38:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.141.0/24 maxlen: 24
2001:67c:5dc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35854 (0x8c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Apr 28 12:38:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e9932d8ed36cc66e863e03c60d77fc721197364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:9d:3c:6e:60:de:f6:27:cb:ee:9f:50:86:
3c:29:24:14:7a:ff:25:0c:9c:d8:71:e0:19:5a:a0:
5d:e9:3a:13:80:9c:81:a0:02:c7:34:ac:ed:5c:bc:
fc:05:ee:0e:fc:51:38:ef:13:e4:15:13:a3:3a:18:
97:be:a3:54:ec:6c:15:78:de:ca:8a:fd:bc:51:77:
94:95:62:a4:bd:2c:13:dd:98:1d:c6:45:0f:9d:99:
48:e3:81:d7:ee:cc:0e:d4:c0:67:cf:0c:c9:48:09:
d1:96:93:11:06:ee:fd:89:d8:65:fe:9b:e0:b3:da:
01:6c:3a:9b:56:b4:d2:d5:6f:89:29:62:ad:b3:06:
9b:b5:fe:02:a8:13:be:1a:9d:66:37:bb:82:32:46:
e7:8a:68:35:81:56:b8:c6:e5:44:69:de:81:5a:fe:
e6:03:7a:25:b1:ec:bc:23:e9:5d:93:a2:de:80:4b:
2d:8a:12:4f:ce:f7:1c:ee:60:83:7c:d8:08:6c:26:
a9:3b:e0:71:25:24:d3:a4:35:61:98:cb:1a:d7:38:
7f:84:db:33:95:38:0f:bb:68:93:e6:39:78:c5:4c:
85:e5:26:04:43:8d:65:d0:34:83:04:c2:d5:cb:ca:
f4:91:84:fb:c5:36:4e:23:5f:be:fb:f1:91:6f:a1:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:32:D8:ED:36:CC:66:E8:63:E0:3C:60:D7:7F:C7:21:19:73:64
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/npky2O02zGboY-A8YNd_xyEZc2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.141.0/24
IPv6:
2001:67c:5dc::/48
Signature Algorithm: sha256WithRSAEncryption
92:72:f8:f9:6f:84:b5:4f:6e:db:d8:73:2b:9c:1b:4a:5f:6d:
81:ae:f9:3b:88:af:39:fc:8b:1b:5f:93:e7:04:c2:96:79:f7:
3a:9b:ea:87:1e:e3:24:eb:42:36:9a:cc:cd:fb:79:e2:ec:6a:
b5:5b:22:cd:3a:29:34:31:d4:9c:65:ff:5e:9b:5e:cc:e2:25:
84:80:3f:f9:d3:d2:7e:e5:f4:9a:14:19:75:c1:9a:4f:3f:48:
96:77:4d:cf:77:5e:45:11:65:b4:df:09:b3:a9:c9:17:ee:05:
47:c5:24:12:00:47:8d:2c:6a:05:f3:bf:7d:c9:4e:64:62:33:
7a:16:3a:6a:16:82:20:23:0c:2a:0e:79:5e:6c:01:a3:f7:1d:
8a:ee:93:45:27:74:b2:09:0d:1e:15:e8:20:41:b2:0c:00:e0:
f4:fa:f3:c1:20:18:d5:c5:18:5c:07:50:03:38:5a:be:f8:04:
4c:72:04:b2:82:1e:e7:2b:91:ff:27:92:b0:2a:6d:4a:b3:56:
18:2f:4f:83:8b:18:bd:5a:03:eb:cf:af:7f:29:31:67:00:72:
10:8c:e0:23:ef:77:b2:1a:29:e1:ec:74:25:d1:5f:9e:d2:b5:
55:87:14:cc:68:a9:e0:ac:dc:ba:57:0c:7b:de:3d:97:d6:85:
49:3d:b3:da
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIDAIwOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
N2VjZTk0ZGU1ZGY2YTFhMzRjOThlYzY2ZDNkOTY4ZTViMjliMjEwHhcNMjIwNDI4
MTIzODQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg5ZTk5MzJkOGVkMzZj
YzY2ZTg2M2UwM2M2MGQ3N2ZjNzIxMTk3MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA24qdPG5g3vYny+6fUIY8KSQUev8lDJzYceAZWqBd6ToTgJyB
oALHNKztXLz8Be4O/FE47xPkFROjOhiXvqNU7GwVeN7Kiv28UXeUlWKkvSwT3Zgd
xkUPnZlI44HX7swO1MBnzwzJSAnRlpMRBu79idhl/pvgs9oBbDqbVrTS1W+JKWKt
swabtf4CqBO+Gp1mN7uCMkbnimg1gVa4xuVEad6BWv7mA3olsey8I+ldk6LegEst
ihJPzvcc7mCDfNgIbCapO+BxJSTTpDVhmMsa1zh/hNszlTgPu2iT5jl4xUyF5SYE
Q41l0DSDBMLVy8r0kYT7xTZOI1+++/GRb6HTAwIDAQABo4ICGjCCAhYwHQYDVR0O
BBYEFJ6ZMtjtNsxm6GPgPGDXf8chGXNkMB8GA1UdIwQYMBaAFHp+zpTeXfaho0yY
7GbT2WjlspshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZW43T2xONWQ5cUdqVEpqc1p0UFphT1d5bXlFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82OS9iZjRlODgtMDA1OC00ZGY4LTk5OWEtZmFlNWZlOTAwY2JkLzEv
bnBreTJPMDJ6R2JvWS1BOFlOZF94eUVaYzJRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9i
ZjRlODgtMDA1OC00ZGY4LTk5OWEtZmFlNWZlOTAwY2JkLzEvZW43T2xONWQ5cUdq
VEpqc1p0UFphT1d5bXlFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG
CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwpONMA8EAgACMAkDBwAgAQZ8Bdww
DQYJKoZIhvcNAQELBQADggEBAJJy+PlvhLVPbtvYcyucG0pfbYGu+TuIrzn8ixtf
k+cEwpZ59zqb6oce4yTrQjaazM37eeLsarVbIs06KTQx1Jxl/16bXsziJYSAP/nT
0n7l9JoUGXXBmk8/SJZ3Tc93XkURZbTfCbOpyRfuBUfFJBIAR40sagXzv33JTmRi
M3oWOmoWgiAjDCoOeV5sAaP3HYruk0UndLIJDR4V6CBBsgwA4PT688EgGNXFGFwH
UAM4Wr74BExyBLKCHucrkf8nkrAqbUqzVhgvT4OLGL1aA+vPr38pMWcAchCM4CPv
d7IaKeHsdCXRX57StVWHFMxoqeCs3LpXDHvePZfWhUk9s9o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:34 2024 by rpki-client on console-fra.rpki-client.org