Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/NVg3tDduaOZDQBCqYpEn9u_8fxo.roa
File: NVg3tDduaOZDQBCqYpEn9u_8fxo.roa (raw, json)
Hash identifier: 76j9EjP6bfjfD2pElkk8aPLEuaralryF7UsnapEiT3M=
Subject key identifier: 35:58:37:B4:37:6E:68:E6:43:40:10:AA:62:91:27:F6:EF:FC:7F:1A
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0182C51135C9F50C2580C2DFB7B703110908
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/NVg3tDduaOZDQBCqYpEn9u_8fxo.roa
Signing time: Mon 22 Aug 2022 10:20:15 +0000
ROA not before: Mon 22 Aug 2022 10:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197343
IP address blocks: 5.56.130.0/23 maxlen: 23
5.56.128.0/22 maxlen: 22
5.56.128.0/23 maxlen: 23
5.57.34.0/24 maxlen: 24
5.57.33.0/24 maxlen: 24
5.57.32.0/21 maxlen: 24
5.57.37.0/24 maxlen: 24
5.57.36.0/24 maxlen: 24
5.57.35.0/24 maxlen: 24
5.57.38.0/24 maxlen: 24
5.57.39.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
185.212.48.0/22 maxlen: 22
185.212.49.0/24 maxlen: 24
185.215.230.0/24 maxlen: 24
185.124.172.0/22 maxlen: 22
37.32.44.0/22 maxlen: 22
37.32.44.0/24 maxlen: 24
37.32.40.0/22 maxlen: 22
37.32.45.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
178.239.149.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
178.239.156.0/23 maxlen: 23
178.239.156.0/22 maxlen: 22
178.239.155.0/24 maxlen: 24
178.239.154.0/23 maxlen: 23
178.239.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:11:35:c9:f5:0c:25:80:c2:df:b7:b7:03:11:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 22 10:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=355837b4376e68e6434010aa629127f6effc7f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:7a:c5:eb:23:08:66:05:36:62:a3:0c:23:
33:e2:10:6f:0a:27:d4:aa:5f:07:6b:68:03:41:fd:
c9:b7:71:fd:6f:bc:6b:8c:d1:06:1a:e0:f5:9c:25:
11:fe:01:65:dd:90:cd:43:5c:24:98:1e:bd:a4:63:
06:8f:90:7a:b9:de:d4:39:4b:bc:2f:7e:55:d0:5c:
9d:9e:f0:9d:89:d2:d7:94:6c:3a:ef:4c:88:09:ac:
6d:70:2a:a8:6a:a2:51:8c:3a:e4:da:53:7e:78:c7:
ed:df:37:71:c3:5f:61:75:35:f0:24:9d:b4:f1:8a:
90:3b:e1:7d:18:09:d6:cb:4e:c5:79:e8:62:79:2e:
0f:0e:d6:5c:84:a4:b2:34:d9:aa:63:61:97:2f:b7:
07:f9:18:95:94:cc:5f:4f:9e:6b:b3:c2:46:60:47:
3a:02:e2:23:f0:4f:c0:c2:2c:b0:11:9b:eb:ca:eb:
64:23:45:dd:23:92:22:38:c2:ba:81:4f:d5:ed:14:
71:54:92:83:c6:33:84:86:8d:c1:12:f4:eb:a5:66:
79:4d:01:2a:e0:f2:00:44:97:a7:63:c5:34:4e:62:
a3:6f:33:02:fc:d4:45:71:d9:20:93:43:72:8a:e1:
7d:9f:4d:83:83:8c:10:8d:18:8a:69:c2:bb:fc:f1:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:58:37:B4:37:6E:68:E6:43:40:10:AA:62:91:27:F6:EF:FC:7F:1A
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/NVg3tDduaOZDQBCqYpEn9u_8fxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
5.57.32.0/21
37.32.40.0/21
178.239.149.0-178.239.150.255
178.239.154.0-178.239.159.255
185.124.172.0/22
185.212.48.0/22
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c6:ee:c5:dd:c6:5a:11:e8:2d:0b:b4:aa:97:30:7d:3a:b1:
d0:3e:0a:e0:29:50:5f:a8:3c:a6:84:2e:e2:0f:34:38:8a:eb:
9d:f4:40:1b:65:d1:da:1c:b3:61:7c:d1:5d:83:b6:8b:df:82:
7f:e3:92:35:86:d2:68:8f:5a:a5:42:dc:c7:57:3e:7c:0a:34:
25:b5:c3:ce:c6:79:b5:40:b5:db:58:3d:2a:ba:21:f1:4c:a4:
8d:cf:f5:6d:03:4a:da:1b:25:41:ba:7e:2e:18:78:1b:cd:70:
fa:4d:b5:0c:4a:3b:73:c8:bb:fb:cf:bd:4d:2b:eb:e7:37:1f:
db:93:63:0f:ff:c7:45:de:11:00:28:db:84:62:95:cb:e3:fc:
21:4a:2f:56:ec:1d:28:39:e9:6b:ff:74:c8:32:98:2e:36:42:
12:7d:3d:ee:f9:ea:14:e1:3f:c3:8b:6a:38:82:4e:a5:2f:ee:
d3:ba:80:59:d4:5c:67:b8:1f:75:fb:64:9b:ae:4e:b4:50:88:
05:49:c1:b3:4e:21:b0:11:85:a3:84:20:63:53:a3:b9:db:a0:
4a:2c:cd:bc:5a:c2:19:14:82:49:b7:11:fa:71:75:c3:5a:93:
df:a5:6f:70:82:49:fc:8d:16:30:81:4e:47:91:2b:3f:6a:d1:
2d:5e:4c:96
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYLFETXJ9QwlgMLft7cDEQkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjIwODIyMTAyMDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTU4MzdiNDM3NmU2OGU2NDM0MDEwYWE2MjkxMjdmNmVmZmM3ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHN6xesjCGYFNmKjDCMz4hBvCifU
ql8Ha2gDQf3Jt3H9b7xrjNEGGuD1nCUR/gFl3ZDNQ1wkmB69pGMGj5B6ud7UOUu8
L35V0FydnvCdidLXlGw670yICaxtcCqoaqJRjDrk2lN+eMft3zdxw19hdTXwJJ20
8YqQO+F9GAnWy07FeehieS4PDtZchKSyNNmqY2GXL7cH+RiVlMxfT55rs8JGYEc6
AuIj8E/AwiywEZvryutkI0XdI5IiOMK6gU/V7RRxVJKDxjOEho3BEvTrpWZ5TQEq
4PIARJenY8U0TmKjbzMC/NRFcdkgk0NyiuF9n02Dg4wQjRiKacK7/PGHDQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFDVYN7Q3bmjmQ0AQqmKRJ/bv/H8aMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvTlZnM3REZHVhT1pEUUJDcVlwRW45dV84ZnhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQCBTiAAwQD
BTkgAwQDJSAoMAwDBACy75UDBACy75YwDAMEAbLvmgMEBbLvgAMEArl8rAMEArnU
MAMEALnX5jANBgkqhkiG9w0BAQsFAAOCAQEAdsbuxd3GWhHoLQu0qpcwfTqx0D4K
4ClQX6g8poQu4g80OIrrnfRAG2XR2hyzYXzRXYO2i9+Cf+OSNYbSaI9apULcx1c+
fAo0JbXDzsZ5tUC121g9Kroh8Uykjc/1bQNK2hslQbp+Lhh4G81w+k21DEo7c8i7
+8+9TSvr5zcf25NjD//HRd4RACjbhGKVy+P8IUovVuwdKDnpa/90yDKYLjZCEn09
7vnqFOE/w4tqOIJOpS/u07qAWdRcZ7gfdftkm65OtFCIBUnBs04hsBGFo4QgY1Oj
udugSizNvFrCGRSCSbcR+nF1w1qT36VvcIJJ/I0WMIFOR5ErP2rRLV5Mlg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org