Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/nXrqL4IVZ-Iyt1KBu6Dp3AOb_40.roa
File: nXrqL4IVZ-Iyt1KBu6Dp3AOb_40.roa (raw, json)
Hash identifier: EbbQpudZGAF5Kv9CStuq80/zR3prrtNGEOeVY4Vnhug=
Subject key identifier: 9D:7A:EA:2F:82:15:67:E2:32:B7:52:81:BB:A0:E9:DC:03:9B:FF:8D
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 0181D7988F8A6EC7141185E1218FD31292B8
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/nXrqL4IVZ-Iyt1KBu6Dp3AOb_40.roa
Signing time: Thu 07 Jul 2022 07:38:28 +0000
ROA not before: Thu 07 Jul 2022 07:38:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 2.57.168.0/24 maxlen: 24
45.8.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:98:8f:8a:6e:c7:14:11:85:e1:21:8f:d3:12:92:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jul 7 07:38:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d7aea2f821567e232b75281bba0e9dc039bff8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:33:86:e1:d1:60:18:b4:8a:8c:bf:f3:4a:2f:
51:7e:68:32:11:c6:e1:42:7b:44:20:4a:81:7e:db:
c9:94:45:73:85:54:52:dd:91:ae:a8:38:02:72:01:
e4:50:c5:a9:f2:43:19:7a:09:b5:7b:d1:29:cd:6c:
1d:f7:cb:52:13:24:89:c8:01:7d:28:99:1b:a9:40:
c6:8d:b3:16:4d:83:6e:06:d8:c2:cd:eb:3a:34:28:
be:c8:98:81:ff:72:1d:ea:1e:b9:f2:0c:8d:83:8c:
a4:29:b6:53:fa:95:0f:83:79:60:67:b2:b9:71:0d:
98:b3:48:d5:04:2c:77:16:2b:2c:e9:e0:36:7d:28:
92:87:07:00:fc:4d:db:fe:f6:af:4f:88:bb:9b:10:
cb:fc:9e:90:8c:25:75:57:d8:82:d7:ab:53:71:f0:
57:00:55:bd:e8:14:85:d0:d8:da:1f:8f:49:13:26:
31:ff:32:cc:2d:3f:f7:21:73:31:2f:00:d2:08:ef:
34:89:13:6c:e7:b8:1e:2c:cc:a3:ec:eb:60:9c:f6:
4b:b5:8c:5f:a3:57:35:fb:f1:2d:af:f0:7d:e9:72:
20:4d:3b:86:c4:e9:e6:79:12:c3:09:28:36:b6:2a:
54:c7:ca:ba:92:d0:27:ff:c9:9a:4c:03:c6:d9:be:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:EA:2F:82:15:67:E2:32:B7:52:81:BB:A0:E9:DC:03:9B:FF:8D
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/nXrqL4IVZ-Iyt1KBu6Dp3AOb_40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.168.0/24
45.8.17.0/24
Signature Algorithm: sha256WithRSAEncryption
07:59:ad:09:d5:aa:b8:06:96:3e:cf:6e:64:b1:6e:d6:a6:47:
e8:d9:0b:10:09:f2:a7:02:c6:b4:8f:7f:73:53:8f:d3:50:da:
ca:97:69:d2:03:5e:23:cb:fd:b7:75:20:66:52:28:5b:b4:8a:
07:b3:3b:fe:ff:b6:44:32:3e:07:8b:1f:b5:3d:44:81:41:e6:
77:af:50:a9:7d:87:80:30:36:e8:82:22:97:85:74:f6:0e:f4:
2d:f4:f8:a6:02:78:0a:36:58:58:9b:2b:e2:cd:31:04:89:5f:
66:35:87:a4:c7:1b:a6:78:2b:6c:7b:ed:cc:4c:36:6b:0a:01:
bb:51:f4:6d:4b:a5:73:51:aa:84:d4:8d:11:9a:f9:4a:ef:5d:
12:e2:ca:06:90:1e:16:08:b2:30:c7:39:90:62:09:15:e5:28:
44:29:e4:a2:f7:ef:6f:a1:7c:3a:c6:8d:d1:be:99:83:05:56:
a5:83:42:63:32:a3:62:43:a5:0c:87:ed:ef:4a:44:95:60:48:
ed:fc:bf:35:5e:ba:95:97:83:25:66:a5:0f:47:d5:3f:12:33:
ad:cc:99:23:ff:1b:7b:b5:bf:ad:ab:5d:f0:3b:c9:85:d7:e6:
43:28:b0:a1:84:de:76:63:83:d6:09:c3:e6:fc:6b:0c:54:11:
85:f4:a1:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYHXmI+KbscUEYXhIY/TEpK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjIwNzA3MDczODI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDdhZWEyZjgyMTU2N2UyMzJiNzUyODFiYmEwZTlkYzAzOWJmZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTOG4dFgGLSKjL/zSi9RfmgyEcbh
QntEIEqBftvJlEVzhVRS3ZGuqDgCcgHkUMWp8kMZegm1e9EpzWwd98tSEySJyAF9
KJkbqUDGjbMWTYNuBtjCzes6NCi+yJiB/3Id6h658gyNg4ykKbZT+pUPg3lgZ7K5
cQ2Ys0jVBCx3Fiss6eA2fSiShwcA/E3b/vavT4i7mxDL/J6QjCV1V9iC16tTcfBX
AFW96BSF0NjaH49JEyYx/zLMLT/3IXMxLwDSCO80iRNs57geLMyj7OtgnPZLtYxf
o1c1+/Etr/B96XIgTTuGxOnmeRLDCSg2tipUx8q6ktAn/8maTAPG2b5UgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ166i+CFWfiMrdSgbug6dwDm/+NMB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvblhycUw0SVZaLUl5dDFLQnU2RHAzQU9iXzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjmoAwQA
LQgRMA0GCSqGSIb3DQEBCwUAA4IBAQAHWa0J1aq4BpY+z25ksW7Wpkfo2QsQCfKn
Asa0j39zU4/TUNrKl2nSA14jy/23dSBmUihbtIoHszv+/7ZEMj4Hix+1PUSBQeZ3
r1CpfYeAMDbogiKXhXT2DvQt9PimAngKNlhYmyvizTEEiV9mNYekxxumeCtse+3M
TDZrCgG7UfRtS6VzUaqE1I0RmvlK710S4soGkB4WCLIwxzmQYgkV5ShEKeSi9+9v
oXw6xo3RvpmDBValg0JjMqNiQ6UMh+3vSkSVYEjt/L81XrqVl4MlZqUPR9U/EjOt
zJkj/xt7tb+tq13wO8mF1+ZDKLChhN52Y4PWCcPm/GsMVBGF9KFA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org