Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/njgNq2XRzEuXCrCGfJFVi7yAckg.roa
File: njgNq2XRzEuXCrCGfJFVi7yAckg.roa (raw, json)
Hash identifier: 7UeczghscBWiZE9j+4Vq9hl0SK3hVI0G9+E9PnIHdgA=
Subject key identifier: 9E:38:0D:AB:65:D1:CC:4B:97:0A:B0:86:7C:91:55:8B:BC:80:72:48
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 01825C08495DC074A397EE31BB7B4E4319A9
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/njgNq2XRzEuXCrCGfJFVi7yAckg.roa
Signing time: Tue 02 Aug 2022 00:50:23 +0000
ROA not before: Tue 02 Aug 2022 00:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202623
IP address blocks: 141.101.91.0/24 maxlen: 24
2a06:98c0:3604::/48 maxlen: 48
2a06:98c0:3607::/48 maxlen: 48
2a06:98c0:3602::/48 maxlen: 48
2a06:98c0:3605::/48 maxlen: 48
2a06:98c0:1400::/48 maxlen: 48
2a06:98c0:3603::/48 maxlen: 48
2a06:98c0:360e::/48 maxlen: 48
2a06:98c0:3606::/48 maxlen: 48
2a06:98c0:1401::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5c:08:49:5d:c0:74:a3:97:ee:31:bb:7b:4e:43:19:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Aug 2 00:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e380dab65d1cc4b970ab0867c91558bbc807248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:22:ca:2d:77:84:c6:ce:3e:14:ba:10:b9:
ae:db:d5:60:b7:3f:5a:c9:af:2d:9d:2f:96:8e:e9:
05:10:6a:78:9c:45:ec:27:3e:31:8e:06:3a:b6:c0:
35:a4:36:8d:3e:5a:bd:b1:28:c6:8e:66:ca:c7:06:
68:79:95:29:97:4f:68:d8:99:75:ec:bc:81:d5:2f:
d1:0d:12:78:a4:08:b4:28:18:08:67:cf:cf:98:03:
0e:28:ca:43:00:f7:78:da:fe:24:bc:54:59:f9:5a:
55:57:e5:a0:4f:74:d7:bf:f2:09:8f:c4:18:36:9a:
d2:58:c7:4a:e1:b3:19:be:0d:98:1c:92:5d:e7:26:
93:64:3d:e2:56:d9:50:a8:d8:5a:4b:2c:f6:63:de:
cf:3e:98:bc:7a:50:87:94:9d:c1:36:c9:5b:9a:27:
d9:26:23:f8:ea:8d:d9:c7:a4:cd:20:d4:e2:dd:51:
b0:63:81:84:d3:b2:48:10:7a:0e:97:b8:35:84:d7:
54:1f:b4:77:c4:5a:7d:3e:2f:cf:01:39:f7:40:eb:
b6:7b:91:eb:a5:db:df:e4:0e:b5:fe:8d:0e:8a:8a:
dd:8a:36:ba:c2:ce:3e:f0:09:be:4d:3a:f4:95:5d:
66:e0:d4:56:c5:22:cf:67:4f:74:22:bb:ac:b1:f6:
95:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:0D:AB:65:D1:CC:4B:97:0A:B0:86:7C:91:55:8B:BC:80:72:48
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/njgNq2XRzEuXCrCGfJFVi7yAckg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.91.0/24
IPv6:
2a06:98c0:1400::/47
2a06:98c0:3602::-2a06:98c0:3607:ffff:ffff:ffff:ffff:ffff
2a06:98c0:360e::/48
Signature Algorithm: sha256WithRSAEncryption
05:1d:73:bb:e4:99:7b:0a:f5:2b:55:b4:3c:7f:42:d0:01:39:
6a:1c:e6:95:b7:00:5c:5f:4e:d5:d7:ed:77:23:e3:33:4b:f4:
75:ed:7c:9f:23:a6:98:f8:29:dd:3b:27:f9:6b:b2:57:2a:35:
1a:21:26:a2:0c:08:85:37:e2:3e:4d:a1:21:e3:ec:c3:13:07:
d8:20:59:c9:5b:49:cb:87:d0:4c:9a:c7:c4:db:79:b3:95:84:
fa:d6:d3:df:6a:ff:1f:b2:2c:80:4f:f1:c8:56:79:38:57:04:
f9:d6:a3:47:59:3f:39:07:fe:72:6a:36:7b:7d:bf:2a:83:7c:
df:64:3c:4c:6b:c1:f7:33:99:d0:63:2f:cb:13:f7:aa:69:f1:
38:07:fc:d5:04:fd:22:bf:a8:3a:f5:22:d1:7a:3a:04:31:3f:
3d:bb:92:d6:15:cb:71:cc:94:28:22:52:73:d6:df:0f:d8:1f:
79:f9:28:55:92:3c:b1:59:f9:0d:d2:67:63:90:d9:f4:90:3f:
8c:c9:42:34:7b:4e:7c:c1:86:14:43:de:39:1a:5b:b5:48:43:
f2:d8:12:82:ad:1b:05:fb:29:95:b5:ad:a7:22:96:a5:2c:90:
46:c7:db:fd:45:aa:e7:e3:8f:48:c9:bd:1b:d6:30:1a:61:3a:
5d:bf:8b:87
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYJcCEldwHSjl+4xu3tOQxmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5
N2I5ZDAwHhcNMjIwODAyMDA1MDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTM4MGRhYjY1ZDFjYzRiOTcwYWIwODY3YzkxNTU4YmJjODA3MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNoiyi13hMbOPhS6ELmu29Vgtz9a
ya8tnS+WjukFEGp4nEXsJz4xjgY6tsA1pDaNPlq9sSjGjmbKxwZoeZUpl09o2Jl1
7LyB1S/RDRJ4pAi0KBgIZ8/PmAMOKMpDAPd42v4kvFRZ+VpVV+WgT3TXv/IJj8QY
NprSWMdK4bMZvg2YHJJd5yaTZD3iVtlQqNhaSyz2Y97PPpi8elCHlJ3BNslbmifZ
JiP46o3Zx6TNINTi3VGwY4GE07JIEHoOl7g1hNdUH7R3xFp9Pi/PATn3QOu2e5Hr
pdvf5A61/o0Oiordija6ws4+8Am+TTr0lV1m4NRWxSLPZ090IrussfaVkQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFJ44Datl0cxLlwqwhnyRVYu8gHJIMB8GA1UdIwQY
MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt
NzU1MTgwOWNiNzMxLzEvbmpnTnEyWFJ6RXVYQ3JDR2ZKRlZpN3lBY2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx
LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAMBAIAATAGAwQAjWVbMCwE
AgACMCYDBwEqBpjAFAAwEgMHASoGmMA2AgMHAyoGmMA2AAMHACoGmMA2DjANBgkq
hkiG9w0BAQsFAAOCAQEABR1zu+SZewr1K1W0PH9C0AE5ahzmlbcAXF9O1dftdyPj
M0v0de18nyOmmPgp3Tsn+WuyVyo1GiEmogwIhTfiPk2hIePswxMH2CBZyVtJy4fQ
TJrHxNt5s5WE+tbT32r/H7IsgE/xyFZ5OFcE+dajR1k/OQf+cmo2e32/KoN832Q8
TGvB9zOZ0GMvyxP3qmnxOAf81QT9Ir+oOvUi0Xo6BDE/PbuS1hXLccyUKCJSc9bf
D9gfefkoVZI8sVn5DdJnY5DZ9JA/jMlCNHtOfMGGFEPeORpbtUhD8tgSgq0bBfsp
lbWtpyKWpSyQRsfb/UWq5+OPSMm9G9YwGmE6Xb+Lhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org