Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/nQmSnQq8CV_QfZ7PrpDjDJQkRDc.roa
File: nQmSnQq8CV_QfZ7PrpDjDJQkRDc.roa (raw, json)
Hash identifier: 0p+LXAb1sNioG6FxdK6ilo0+lwu+i/Ofg+RwX0fl7MQ=
Subject key identifier: 9D:09:92:9D:0A:BC:09:5F:D0:7D:9E:CF:AE:90:E3:0C:94:24:44:37
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0FB5FECD
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/nQmSnQq8CV_QfZ7PrpDjDJQkRDc.roa
Signing time: Sat 01 Jan 2022 07:02:08 +0000
ROA not before: Sat 01 Jan 2022 07:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 87.238.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263585485 (0xfb5fecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 1 07:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d09929d0abc095fd07d9ecfae90e30c94244437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:6c:df:34:5d:74:c7:74:44:e2:e7:a6:72:
df:6c:7f:1a:ae:4f:7a:3e:c9:1b:3b:d4:00:17:06:
c9:69:70:3f:52:36:1f:a9:e0:ed:9a:61:cc:59:2d:
25:87:d1:57:83:5c:31:c9:e3:79:f7:b8:5e:21:de:
d6:cd:35:b4:77:0b:80:c6:d5:17:72:ec:20:01:20:
d5:38:ca:25:12:5f:30:af:43:6f:aa:2c:84:70:ea:
4a:06:ef:75:72:d2:3d:1e:6a:91:d0:c5:f2:1b:dc:
b6:06:6b:78:4d:3e:f5:07:10:25:74:01:66:eb:76:
d1:84:2c:39:c5:3b:60:ae:da:3e:ca:6b:08:c9:54:
0a:d5:ea:ff:62:20:6c:f0:c2:a2:7d:08:7a:66:b5:
e2:93:b6:10:c5:eb:9d:69:c2:d2:b7:f6:46:11:89:
4b:ad:f7:d8:95:62:b0:ba:14:73:42:ef:48:e0:84:
23:7f:cf:ad:78:a6:d3:37:40:18:ff:de:ec:60:59:
44:a3:c8:ef:49:e0:f4:70:b1:97:05:13:df:7e:85:
fc:18:2e:86:1d:d4:fc:0e:54:ae:11:8d:31:67:08:
3a:38:2d:68:da:45:b1:b8:21:3f:4d:b6:d5:fa:ec:
40:8c:a2:e6:1d:ef:5b:ba:d7:79:0e:e8:77:ac:71:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:09:92:9D:0A:BC:09:5F:D0:7D:9E:CF:AE:90:E3:0C:94:24:44:37
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/nQmSnQq8CV_QfZ7PrpDjDJQkRDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.139.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:11:7b:61:5a:18:b3:cd:82:f5:f5:e9:f1:45:f6:fa:ed:20:
e5:2a:64:bf:9d:a6:66:57:8f:c6:38:29:85:e8:44:37:69:7e:
15:82:2a:66:f6:46:95:99:50:71:51:4a:6b:e8:3e:73:f3:d6:
f0:fc:69:6b:4c:a4:4d:23:2f:44:2e:b4:21:37:a4:66:0f:63:
22:1c:b4:51:9e:bf:8f:0e:81:ed:6b:2f:6d:f9:fb:f7:e8:60:
13:4f:8f:26:18:5c:e1:df:38:8b:2c:c4:be:22:d9:c6:1d:25:
97:d1:41:91:70:a7:fa:23:60:9a:33:82:a2:15:e9:81:c9:1d:
6b:e6:71:a8:ba:51:6b:80:cf:f3:41:0d:30:09:c4:70:56:d3:
17:d6:89:52:2e:f7:52:54:5c:d4:6f:b7:5e:b2:72:4e:a3:95:
e3:8c:cf:7c:a2:0e:b5:35:33:e8:9a:ae:a1:87:4b:91:7a:17:
8a:91:a8:1b:0e:a2:5f:5f:7e:37:fe:62:51:1c:99:21:cf:bf:
1d:81:4f:26:43:a4:f5:d7:a3:8a:a0:26:e6:71:31:85:e6:d8:
0c:96:6e:d1:2e:78:25:0f:c7:7f:d2:2b:3e:72:1a:f2:78:7b:
fc:48:bb:08:0a:00:d8:7f:40:9d:26:b8:7b:ff:56:37:64:23:
02:b5:dc:d0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED7X+zTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzJmMGU0MmIwOGFhNDUxZmM1ODNhMzU4ZWMzNzBmZmJkMmRhYzY4MB4XDTIyMDEw
MTA3MDIwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWQwOTkyOWQwYWJj
MDk1ZmQwN2Q5ZWNmYWU5MGUzMGM5NDI0NDQzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKh1bN80XXTHdETi56Zy32x/Gq5Pej7JGzvUABcGyWlwP1I2
H6ng7ZphzFktJYfRV4NcMcnjefe4XiHe1s01tHcLgMbVF3LsIAEg1TjKJRJfMK9D
b6oshHDqSgbvdXLSPR5qkdDF8hvctgZreE0+9QcQJXQBZut20YQsOcU7YK7aPspr
CMlUCtXq/2IgbPDCon0Iema14pO2EMXrnWnC0rf2RhGJS6332JVisLoUc0LvSOCE
I3/PrXim0zdAGP/e7GBZRKPI70ng9HCxlwUT336F/Bguhh3U/A5UrhGNMWcIOjgt
aNpFsbghP0221frsQIyi5h3vW7rXeQ7od6xxL2kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSdCZKdCrwJX9B9ns+ukOMMlCRENzAfBgNVHSMEGDAWgBRnLw5CsIqkUfxY
OjWOw3D/vS2saDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1p5OE9RckNLcEZIOFdEbzFqc053XzcwdHJHZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTMvNTlhNmI5LWNkMjAtNGNkNy1iNGE3LWYwYjk2MmY1MjQxNC8x
L25RbVNuUXE4Q1ZfUWZaN1BycERqREpRa1JEYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMv
NTlhNmI5LWNkMjAtNGNkNy1iNGE3LWYwYjk2MmY1MjQxNC8xL1p5OE9RckNLcEZI
OFdEbzFqc053XzcwdHJHZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFfuizANBgkqhkiG9w0BAQsFAAOC
AQEA0RF7YVoYs82C9fXp8UX2+u0g5Spkv52mZlePxjgphehEN2l+FYIqZvZGlZlQ
cVFKa+g+c/PW8Pxpa0ykTSMvRC60ITekZg9jIhy0UZ6/jw6B7Wsvbfn79+hgE0+P
Jhhc4d84iyzEviLZxh0ll9FBkXCn+iNgmjOCohXpgckda+ZxqLpRa4DP80ENMAnE
cFbTF9aJUi73UlRc1G+3XrJyTqOV44zPfKIOtTUz6JquoYdLkXoXipGoGw6iX19+
N/5iURyZIc+/HYFPJkOk9dejiqAm5nExhebYDJZu0S54JQ/Hf9IrPnIa8nh7/Ei7
CAoA2H9AnSa4e/9WN2QjArXc0A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:17 2024 by rpki-client on console-ams.rpki-client.org