Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/NLncr3x2ZruCh7s683hhT9eiSlI.roa
File: NLncr3x2ZruCh7s683hhT9eiSlI.roa (raw, json)
Hash identifier: d3OqLQuP2HO1uRpQ7ob+5SzS1DgFP2qA7l/TR5Wk6xs=
Subject key identifier: 34:B9:DC:AF:7C:76:66:BB:82:87:BB:3A:F3:78:61:4F:D7:A2:4A:52
Certificate issuer: /CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Certificate serial: 0642FD3D
Authority key identifier: 7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/NLncr3x2ZruCh7s683hhT9eiSlI.roa
Signing time: Sat 01 Jan 2022 09:02:14 +0000
ROA not before: Sat 01 Jan 2022 09:02:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201299
IP address blocks: 45.155.136.0/22 maxlen: 24
45.155.136.0/24 maxlen: 24
45.155.139.0/24 maxlen: 24
45.155.137.0/24 maxlen: 24
45.155.138.0/24 maxlen: 24
2a0f:c500::/29 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105053501 (0x642fd3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a18fcaac6c8409f24d3fa90df8e30218ee9c3ff
Validity
Not Before: Jan 1 09:02:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34b9dcaf7c7666bb8287bb3af378614fd7a24a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:f3:9c:b0:62:83:2a:db:1c:86:16:4c:c3:
a1:d1:72:88:89:01:7d:c3:38:64:c9:4e:86:81:d8:
96:e7:36:07:b2:d7:9f:b3:70:c1:98:fd:6c:63:6b:
85:b4:9c:55:bb:bc:52:f5:a3:33:e5:80:e7:ae:da:
10:f9:3a:a0:b1:05:90:71:96:f5:d0:47:c2:8e:52:
b7:de:9c:0d:17:03:ad:d5:5c:7b:2b:11:06:98:4b:
32:0f:15:7b:11:25:64:a4:da:31:9c:1f:ea:42:99:
8b:13:ec:78:f9:07:f7:25:01:92:f9:1f:83:0b:b7:
c1:36:98:2e:88:6c:86:97:7c:0e:42:d6:6e:75:63:
ac:64:a0:c6:a8:4b:4d:02:c0:1b:08:97:4d:5a:b3:
cc:e9:a0:7f:66:bb:89:b0:9c:99:3b:17:62:e3:45:
83:c5:3c:44:71:ff:45:a2:5e:4c:19:b7:12:3e:88:
37:22:0c:4c:3b:dc:4a:c2:b8:92:1e:a0:bc:95:b1:
a1:54:d9:86:cb:ce:97:41:8d:95:19:c4:ee:2d:36:
8c:33:cb:50:1b:4c:f9:02:72:0e:cb:8c:c4:1e:05:
d4:23:90:85:e3:50:97:e8:e2:97:f4:37:ba:fa:e7:
18:cf:0e:cf:22:b8:f7:48:1d:e5:b2:f9:93:ab:2f:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:DC:AF:7C:76:66:BB:82:87:BB:3A:F3:78:61:4F:D7:A2:4A:52
X509v3 Authority Key Identifier:
keyid:7A:18:FC:AA:C6:C8:40:9F:24:D3:FA:90:DF:8E:30:21:8E:E9:C3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehj8qsbIQJ8k0_qQ344wIY7pw_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/NLncr3x2ZruCh7s683hhT9eiSlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/58a86c-b882-42ff-b743-c41b8aa2df95/1/ehj8qsbIQJ8k0_qQ344wIY7pw_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.136.0/22
IPv6:
2a0f:c500::/29
Signature Algorithm: sha256WithRSAEncryption
4d:bf:0c:a9:0d:10:5b:37:0c:f8:66:18:65:d0:db:be:71:da:
9b:4d:b6:16:b9:66:b8:5c:c1:f1:24:15:58:80:b3:97:4a:31:
0f:c8:43:f3:81:0d:93:06:eb:23:a8:88:a1:8e:17:35:5a:6b:
15:07:4a:20:0b:45:34:65:f0:85:c0:95:f8:ec:57:9f:97:f6:
cf:c0:94:df:a1:2a:99:da:9b:1b:9d:a9:bb:d3:5d:1b:24:d8:
a2:d4:54:05:a3:d0:a2:37:06:dd:b2:c8:3c:fe:75:df:3b:f8:
a2:d4:46:ab:0f:4f:6b:cc:64:86:56:b7:44:71:50:cd:b0:79:
10:55:76:9b:27:69:b1:5e:6c:f7:01:fb:c0:56:52:03:c4:60:
2d:b2:16:7e:ea:9c:32:2e:07:f4:5c:2b:a3:19:19:e8:b9:a9:
97:87:7e:33:8c:bc:35:75:8e:5c:40:4a:f7:fe:4b:52:c8:8a:
b5:4c:21:b9:0d:d1:2b:30:2e:85:99:d5:9d:e3:2c:6f:2a:a6:
28:41:aa:56:b4:a5:0a:da:99:e6:3a:cf:dc:5c:2c:52:59:73:
7d:be:73:e3:89:42:f4:f0:f3:40:4c:ca:b4:3e:63:59:f8:ce:
8d:45:a3:a2:08:d6:50:8d:0b:b3:be:33:e2:40:3e:81:b6:a6:
60:f3:78:f3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBkL9PTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YTE4ZmNhYWM2Yzg0MDlmMjRkM2ZhOTBkZjhlMzAyMThlZTljM2ZmMB4XDTIyMDEw
MTA5MDIxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzRiOWRjYWY3Yzc2
NjZiYjgyODdiYjNhZjM3ODYxNGZkN2EyNGE1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJbE85ywYoMq2xyGFkzDodFyiIkBfcM4ZMlOhoHYluc2B7LX
n7NwwZj9bGNrhbScVbu8UvWjM+WA567aEPk6oLEFkHGW9dBHwo5St96cDRcDrdVc
eysRBphLMg8VexElZKTaMZwf6kKZixPsePkH9yUBkvkfgwu3wTaYLohshpd8DkLW
bnVjrGSgxqhLTQLAGwiXTVqzzOmgf2a7ibCcmTsXYuNFg8U8RHH/RaJeTBm3Ej6I
NyIMTDvcSsK4kh6gvJWxoVTZhsvOl0GNlRnE7i02jDPLUBtM+QJyDsuMxB4F1COQ
heNQl+jil/Q3uvrnGM8OzyK490gd5bL5k6svjAECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQ0udyvfHZmu4KHuzrzeGFP16JKUjAfBgNVHSMEGDAWgBR6GPyqxshAnyTT
+pDfjjAhjunD/zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Voajhxc2JJUUo4azBfcVEzNDR3SVk3cHdfOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNThhODZjLWI4ODItNDJmZi1iNzQzLWM0MWI4YWEyZGY5NS8x
L05MbmNyM3gyWnJ1Q2g3czY4M2hoVDllaVNsSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NThhODZjLWI4ODItNDJmZi1iNzQzLWM0MWI4YWEyZGY5NS8xL2Voajhxc2JJUUo4
azBfcVEzNDR3SVk3cHdfOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2biDANBAIAAjAHAwUDKg/FADAN
BgkqhkiG9w0BAQsFAAOCAQEATb8MqQ0QWzcM+GYYZdDbvnHam022FrlmuFzB8SQV
WICzl0oxD8hD84ENkwbrI6iIoY4XNVprFQdKIAtFNGXwhcCV+OxXn5f2z8CU36Eq
mdqbG52pu9NdGyTYotRUBaPQojcG3bLIPP513zv4otRGqw9Pa8xkhla3RHFQzbB5
EFV2mydpsV5s9wH7wFZSA8RgLbIWfuqcMi4H9FwroxkZ6Lmpl4d+M4y8NXWOXEBK
9/5LUsiKtUwhuQ3RKzAuhZnVneMsbyqmKEGqVrSlCtqZ5jrP3FwsUllzfb5z44lC
9PDzQEzKtD5jWfjOjUWjogjWUI0Ls74z4kA+gbamYPN48w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:10 2023 by rpki-client on console-fra.rpki-client.org