Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/NNW1XyO7DXi_HKiCOEdgqH9mp5I.roa
File: NNW1XyO7DXi_HKiCOEdgqH9mp5I.roa (raw, json)
Hash identifier: qychynmMD5NGVk8Pmb+hTlOHopZULIJ5ZaoVjf7avxs=
Subject key identifier: 34:D5:B5:5F:23:BB:0D:78:BF:1C:A8:82:38:47:60:A8:7F:66:A7:92
Certificate issuer: /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial: 09FE787C
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/NNW1XyO7DXi_HKiCOEdgqH9mp5I.roa
Signing time: Sat 01 Jan 2022 02:54:44 +0000
ROA not before: Sat 01 Jan 2022 02:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399746
IP address blocks: 185.221.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167671932 (0x9fe787c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
Validity
Not Before: Jan 1 02:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34d5b55f23bb0d78bf1ca882384760a87f66a792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:ea:04:15:c6:ec:4d:e1:49:14:33:0f:4a:
b2:4a:ca:33:99:1c:de:43:06:37:c8:02:9f:8f:3a:
bd:a2:a3:2b:12:9b:a0:f3:a4:20:60:38:29:fe:33:
00:00:16:14:36:c7:06:15:c7:4e:50:6a:2d:e0:09:
4c:f1:6a:5d:3f:59:cd:c0:32:b4:8b:7a:43:cb:8f:
30:4e:a4:53:d5:68:b6:f0:5a:1a:b4:89:c0:ca:7e:
5c:ce:b5:f3:15:af:2c:c2:b8:43:c7:f4:38:17:14:
60:83:31:e6:65:58:3c:54:4e:5d:1f:11:76:7f:30:
19:09:3e:ee:c7:ac:23:16:5a:96:3c:2b:61:98:91:
52:ee:03:aa:fb:a5:19:ca:f9:dd:9a:72:86:8f:4c:
a0:87:15:07:4a:a1:1d:4b:78:27:b3:1f:df:90:eb:
2b:12:a8:9d:7f:c2:f1:d3:37:3d:36:86:b5:e9:13:
f7:36:2d:94:ed:7b:ea:ab:24:02:c8:1e:bf:56:fb:
a5:52:71:05:fb:41:1a:e7:71:e4:05:cd:5d:a9:23:
83:ae:34:36:fb:fa:83:4f:c4:1a:30:7f:e9:11:f1:
57:08:2b:cd:f0:4b:f1:9d:5b:95:a3:3e:b0:1a:02:
bc:5a:8c:81:22:f5:0e:62:59:a0:28:b7:c1:0a:bb:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:B5:5F:23:BB:0D:78:BF:1C:A8:82:38:47:60:A8:7F:66:A7:92
X509v3 Authority Key Identifier:
keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/NNW1XyO7DXi_HKiCOEdgqH9mp5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.218.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0c:d2:4b:19:9c:96:13:d4:0c:ac:44:62:ad:0f:58:ff:90:
41:06:37:47:5a:55:7c:12:c9:80:c7:99:06:5a:04:54:44:35:
e5:4d:68:12:8b:ce:f0:aa:bf:1e:62:bd:93:79:36:d3:86:60:
42:5e:88:bf:a5:eb:78:b5:7c:c6:2e:99:a1:1a:c1:d8:52:f1:
e8:20:9b:39:48:a8:9a:fb:19:1d:70:cd:32:23:9f:c3:b1:12:
4c:1e:0a:52:29:00:9e:f6:40:17:e9:a0:a6:cf:06:2f:22:a7:
25:31:da:59:c2:40:aa:37:72:3b:a9:ec:af:fc:df:f1:17:05:
7e:e5:d6:58:f2:8b:47:1e:5c:33:d4:d2:0a:a4:c0:bd:5d:17:
86:fe:84:11:2c:20:f6:98:31:d5:60:ae:3f:cf:da:9e:a5:d5:
a8:5a:37:37:1b:e8:bf:2d:dc:01:c4:f3:fd:c2:de:03:23:02:
9f:cd:80:dc:19:37:34:8e:9e:6c:4f:29:0f:36:c9:31:b1:de:
35:d9:db:78:f9:5c:c0:c8:29:2b:2b:13:4b:e6:e7:d1:4d:4d:
23:34:4c:a3:99:ee:60:f1:77:c2:64:dc:fd:0c:05:37:85:43:
de:de:e0:8d:ec:63:94:72:e3:99:dd:05:70:13:b5:e7:5c:46:
b1:92:9f:1d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECf54fDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZDgwMDk1MGEzMWRjZGFjYWFjNTZhZGI5MzZhNDJiZWI4NDVlMjRiMB4XDTIyMDEw
MTAyNTQ0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzRkNWI1NWYyM2Ji
MGQ3OGJmMWNhODgyMzg0NzYwYTg3ZjY2YTc5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALet6gQVxuxN4UkUMw9KskrKM5kc3kMGN8gCn486vaKjKxKb
oPOkIGA4Kf4zAAAWFDbHBhXHTlBqLeAJTPFqXT9ZzcAytIt6Q8uPME6kU9VotvBa
GrSJwMp+XM618xWvLMK4Q8f0OBcUYIMx5mVYPFROXR8Rdn8wGQk+7sesIxZaljwr
YZiRUu4DqvulGcr53Zpyho9MoIcVB0qhHUt4J7Mf35DrKxKonX/C8dM3PTaGtekT
9zYtlO176qskAsgev1b7pVJxBftBGudx5AXNXakjg640Nvv6g0/EGjB/6RHxVwgr
zfBL8Z1blaM+sBoCvFqMgSL1DmJZoCi3wQq7hqcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ01bVfI7sNeL8cqII4R2Cof2ankjAfBgNVHSMEGDAWgBTtgAlQox3NrKrF
atuTakK+uEXiSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdZQUpVS01kemF5cXhXcmJrMnBDdnJoRjRrcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvOGE2ZjcyLWM4MjItNDUxZi1hNWM1LWE3ZmQ2YzhlNzBmZC8x
L05OVzFYeU83RFhpX0hLaUNPRWRncUg5bXA1SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
OGE2ZjcyLWM4MjItNDUxZi1hNWM1LWE3ZmQ2YzhlNzBmZC8xLzdZQUpVS01kemF5
cXhXcmJrMnBDdnJoRjRrcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnd2jANBgkqhkiG9w0BAQsFAAOC
AQEAQAzSSxmclhPUDKxEYq0PWP+QQQY3R1pVfBLJgMeZBloEVEQ15U1oEovO8Kq/
HmK9k3k204ZgQl6Iv6XreLV8xi6ZoRrB2FLx6CCbOUiomvsZHXDNMiOfw7ESTB4K
UikAnvZAF+mgps8GLyKnJTHaWcJAqjdyO6nsr/zf8RcFfuXWWPKLRx5cM9TSCqTA
vV0Xhv6EESwg9pgx1WCuP8/anqXVqFo3Nxvovy3cAcTz/cLeAyMCn82A3Bk3NI6e
bE8pDzbJMbHeNdnbePlcwMgpKysTS+bn0U1NIzRMo5nuYPF3wmTc/QwFN4VD3t7g
jexjlHLjmd0FcBO151xGsZKfHQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-ams.rpki-client.org