Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NmIUxwfeERDby4L__MGAml0jxlU.roa
File: NmIUxwfeERDby4L__MGAml0jxlU.roa (raw, json)
Hash identifier: iR44naKvTuDt3UrlktL0EtJymkdt9XyEX/9JY9kXgcw=
Subject key identifier: 36:62:14:C7:07:DE:11:10:DB:CB:82:FF:FC:C1:80:9A:5D:23:C6:55
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0181D86BFBC7590C006E1D17DEEFBDED5D85
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NmIUxwfeERDby4L__MGAml0jxlU.roa
Signing time: Thu 07 Jul 2022 11:29:24 +0000
ROA not before: Thu 07 Jul 2022 11:29:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60118
IP address blocks: 89.42.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:6b:fb:c7:59:0c:00:6e:1d:17:de:ef:bd:ed:5d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jul 7 11:29:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=366214c707de1110dbcb82fffcc1809a5d23c655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:45:57:ec:d7:f2:cb:e7:fb:9b:6d:b2:9c:
ed:ca:82:b8:5f:a1:3c:9f:b8:44:5a:3b:bf:71:99:
34:19:71:0c:e9:e7:d9:43:5d:b6:dc:2a:9a:05:2d:
48:20:65:b9:17:48:67:27:30:0d:9b:1b:4f:93:bc:
c9:7e:77:52:57:4c:e6:fc:38:32:2e:05:c9:4b:74:
9b:d8:ce:85:04:84:b3:d1:29:ba:65:8c:71:7e:64:
7f:5b:0b:19:10:4c:ae:1b:a5:f9:8e:bc:be:2c:79:
ac:a1:a7:08:38:ca:69:26:e0:0e:71:89:95:98:00:
33:0d:2d:19:db:d0:b6:fd:f1:77:5d:fa:1b:a1:0e:
79:83:05:9f:91:48:41:19:5c:59:1d:73:5e:b8:f1:
43:82:08:17:28:a6:b9:52:b2:40:d5:39:10:d1:49:
90:79:f2:37:7f:11:0b:a8:c9:9c:44:97:69:16:42:
31:a3:8a:27:cb:17:87:74:c7:04:f9:27:c5:4b:21:
26:c0:97:6e:98:d7:3a:63:86:dd:54:98:85:c5:d3:
31:f9:e6:fe:bd:36:fe:5a:7d:70:19:34:e0:6d:84:
77:71:28:fa:9f:d3:f6:b4:a9:b4:08:af:3a:d0:2b:
51:a9:21:5c:3e:a8:77:f6:16:11:e0:18:90:b9:4c:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:14:C7:07:DE:11:10:DB:CB:82:FF:FC:C1:80:9A:5D:23:C6:55
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NmIUxwfeERDby4L__MGAml0jxlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:cb:30:f2:cb:f4:da:55:65:a7:ad:6e:f5:bd:12:4c:5e:cf:
72:8b:af:80:7a:e9:e4:45:27:8f:81:2e:c9:d4:ed:5c:e1:3f:
4f:8b:9a:4f:a1:2d:bb:c4:f6:b7:36:82:15:e7:21:d5:23:aa:
54:87:f9:de:58:f8:2a:a0:d8:c4:cb:5c:e8:b8:79:27:89:dc:
06:b6:d6:e3:bd:e2:49:2d:dc:58:96:91:af:7f:5d:45:f7:30:
89:29:a3:31:ed:d2:91:47:21:2d:26:71:33:5c:42:d3:2a:13:
68:43:ad:d7:07:19:44:26:e5:e4:92:7c:e7:12:af:de:4b:df:
b9:50:0d:1d:a7:a9:34:f7:1d:ff:be:37:f5:81:0b:ba:b4:38:
92:50:8d:52:0e:a3:84:6e:29:04:25:89:74:a1:b4:f3:ef:42:
fe:41:ef:d3:cc:c8:d3:93:78:34:33:f9:63:48:28:2c:0a:a7:
b0:cd:1e:ef:c2:d3:2e:6e:99:33:46:ad:c2:72:e3:0f:a2:bf:
5e:2c:37:34:e4:e9:b2:cb:55:2a:ed:a7:af:a2:73:6d:6f:58:
3b:9f:1a:88:97:3f:72:eb:de:20:46:42:c5:a2:db:7d:2f:1a:
96:b7:bf:59:96:47:b1:46:62:56:de:44:a5:ee:fb:b0:75:bc:
27:64:ae:ef
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYHYa/vHWQwAbh0X3u+97V2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjIwNzA3MTEyOTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjYyMTRjNzA3ZGUxMTEwZGJjYjgyZmZmY2MxODA5YTVkMjNjNjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxlFV+zX8svn+5ttspztyoK4X6E8
n7hEWju/cZk0GXEM6efZQ1223CqaBS1IIGW5F0hnJzANmxtPk7zJfndSV0zm/Dgy
LgXJS3Sb2M6FBISz0Sm6ZYxxfmR/WwsZEEyuG6X5jry+LHmsoacIOMppJuAOcYmV
mAAzDS0Z29C2/fF3XfoboQ55gwWfkUhBGVxZHXNeuPFDgggXKKa5UrJA1TkQ0UmQ
efI3fxELqMmcRJdpFkIxo4onyxeHdMcE+SfFSyEmwJdumNc6Y4bdVJiFxdMx+eb+
vTb+Wn1wGTTgbYR3cSj6n9P2tKm0CK860CtRqSFcPqh39hYR4BiQuUxXlQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDZiFMcH3hEQ28uC//zBgJpdI8ZVMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL05tSVV4d2ZlRVJEYnk0TF9fTUdBbWwwanhsVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZKhow
DQYJKoZIhvcNAQELBQADggEBALXLMPLL9NpVZaetbvW9Ekxez3KLr4B66eRFJ4+B
LsnU7VzhP0+Lmk+hLbvE9rc2ghXnIdUjqlSH+d5Y+Cqg2MTLXOi4eSeJ3Aa21uO9
4kkt3FiWka9/XUX3MIkpozHt0pFHIS0mcTNcQtMqE2hDrdcHGUQm5eSSfOcSr95L
37lQDR2nqTT3Hf++N/WBC7q0OJJQjVIOo4RuKQQliXShtPPvQv5B79PMyNOTeDQz
+WNIKCwKp7DNHu/C0y5umTNGrcJy4w+iv14sNzTk6bLLVSrtp6+ic21vWDufGoiX
P3Lr3iBGQsWi230vGpa3v1mWR7FGYlbeRKXu+7B1vCdkru8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org