Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/nIaew_kfn75-DqtrEflM9QDgJtw.roa
File: nIaew_kfn75-DqtrEflM9QDgJtw.roa (raw, json)
Hash identifier: yHNElmnpe0QRTKv3eR8QTW+n8x0TFG8+M6NzF4GdlwU=
Subject key identifier: 9C:86:9E:C3:F9:1F:9F:BE:7E:0E:AB:6B:11:F9:4C:F5:00:E0:26:DC
Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial: 083E50E2
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/nIaew_kfn75-DqtrEflM9QDgJtw.roa
Signing time: Mon 20 Jun 2022 21:53:44 +0000
ROA not before: Mon 20 Jun 2022 21:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 807
IP address blocks: 193.57.173.0/24 maxlen: 24
193.57.200.0/24 maxlen: 24
193.57.223.0/24 maxlen: 24
193.57.224.0/24 maxlen: 24
2a0f:8640::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138301666 (0x83e50e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Validity
Not Before: Jun 20 21:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c869ec3f91f9fbe7e0eab6b11f94cf500e026dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:aa:62:d3:3d:28:64:63:2c:6b:21:34:57:
07:85:f2:0f:70:a1:5a:5b:55:5b:4c:32:66:fd:a0:
b1:b1:1e:49:39:67:95:ba:7c:e2:80:0e:8e:82:f3:
67:f2:d6:6e:d3:84:8e:5d:ff:62:c1:7f:6f:c7:f9:
db:58:56:90:ba:01:9b:0b:0e:38:7e:cd:dd:4c:77:
83:c2:4c:12:22:61:8c:dd:38:3f:6b:1c:c7:a5:66:
54:ad:e1:8f:d8:ac:87:81:95:00:d4:fb:96:18:e1:
4c:65:0e:f8:09:32:d5:67:65:51:c2:ac:0f:12:09:
6d:c3:ee:fb:ac:72:90:b2:bf:31:46:a4:75:39:93:
33:c8:01:ed:64:6b:c9:dd:0b:98:f3:f3:ab:58:dc:
68:d0:18:20:d3:db:87:07:51:7b:f6:2c:cd:d6:fe:
a2:81:16:74:aa:a8:fe:57:16:5b:15:02:e0:ad:98:
1d:d8:de:28:3b:49:b3:5b:d3:ca:1f:f6:16:f3:b1:
90:ed:76:3f:7b:08:17:ba:72:6c:ce:c5:5e:7a:33:
de:22:dd:96:05:66:2a:68:9e:d7:84:ca:57:aa:9b:
25:0a:ca:4d:d0:9d:38:e4:f6:c7:97:b6:8b:8a:8e:
15:e2:b9:e7:22:8a:48:7a:d5:82:d4:6d:02:bc:55:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:9E:C3:F9:1F:9F:BE:7E:0E:AB:6B:11:F9:4C:F5:00:E0:26:DC
X509v3 Authority Key Identifier:
keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/nIaew_kfn75-DqtrEflM9QDgJtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.173.0/24
193.57.200.0/24
193.57.223.0-193.57.224.255
IPv6:
2a0f:8640::/29
Signature Algorithm: sha256WithRSAEncryption
75:62:22:46:ff:02:c5:db:c4:d0:8a:75:65:dc:4b:25:50:7d:
1f:87:e1:e7:b0:01:ec:ad:ee:08:0d:53:47:83:05:7a:02:a7:
b1:71:14:b7:83:f1:bf:75:a2:88:66:c8:94:44:a4:d7:e2:f0:
d1:d7:cc:ea:c7:df:3d:e7:27:36:88:77:7f:ce:fb:b9:aa:ab:
b8:69:8f:74:64:a1:d0:51:9f:4d:f0:a1:1f:2f:14:7e:10:2a:
c1:9d:80:99:4e:41:49:8a:72:0d:d9:97:e7:7c:cc:a3:5c:42:
f7:9a:81:ad:82:f2:93:bf:c8:29:15:d3:c7:42:dd:02:db:06:
aa:8f:20:76:32:d4:15:bb:19:af:6d:d3:4e:7a:f7:eb:27:b0:
ac:c8:5d:1e:eb:a1:42:57:4d:bb:e6:14:a8:5f:e8:cf:42:b6:
7b:5d:59:98:15:67:ac:e1:d4:46:c2:0d:d4:01:78:7c:7e:cb:
b4:d9:8b:28:93:08:0f:02:7e:c2:5f:74:ba:39:f6:e7:68:a3:
ec:fa:be:10:75:60:19:95:b6:c1:3a:d4:f2:65:65:26:d5:52:
00:7b:fe:cd:8d:ae:14:65:3b:aa:31:57:5b:e8:44:ea:42:4b:
44:5f:ee:82:bf:30:69:3a:e5:68:7f:24:e2:63:56:64:4b:9f:
bf:50:58:41
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIECD5Q4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YmNkNDBkMTBiNTZmM2I1MzJmYTBkZmQwMWQ4MTdlZjkzZGExYTM0MB4XDTIyMDYy
MDIxNTM0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWM4NjllYzNmOTFm
OWZiZTdlMGVhYjZiMTFmOTRjZjUwMGUwMjZkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6VqmLTPShkYyxrITRXB4XyD3ChWltVW0wyZv2gsbEeSTln
lbp84oAOjoLzZ/LWbtOEjl3/YsF/b8f521hWkLoBmwsOOH7N3Ux3g8JMEiJhjN04
P2scx6VmVK3hj9ish4GVANT7lhjhTGUO+Aky1WdlUcKsDxIJbcPu+6xykLK/MUak
dTmTM8gB7WRryd0LmPPzq1jcaNAYINPbhwdRe/Yszdb+ooEWdKqo/lcWWxUC4K2Y
HdjeKDtJs1vTyh/2FvOxkO12P3sIF7pybM7FXnoz3iLdlgVmKmie14TKV6qbJQrK
TdCdOOT2x5e2i4qOFeK55yKKSHrVgtRtArxVydcCAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBSchp7D+R+fvn4Oq2sR+Uz1AOAm3DAfBgNVHSMEGDAWgBRbzUDRC1bztTL6
Df0B2Bfvk9oaNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1c4MUEwUXRXODdVeS1nMzlBZGdYNzVQYUdqUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvYmZmNzU4LTRiODMtNDczZC1iMDcyLWEyY2UxY2M4Yjg3Zi8x
L25JYWV3X2tmbjc1LURxdHJFZmxNOVFEZ0p0dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
YmZmNzU4LTRiODMtNDczZC1iMDcyLWEyY2UxY2M4Yjg3Zi8xL1c4MUEwUXRXODdV
eS1nMzlBZGdYNzVQYUdqUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwIAQCAAEwGgMEAME5rQMEAME5yDAMAwQAwTnfAwQA
wTngMA0EAgACMAcDBQMqD4ZAMA0GCSqGSIb3DQEBCwUAA4IBAQB1YiJG/wLF28TQ
inVl3EslUH0fh+HnsAHsre4IDVNHgwV6AqexcRS3g/G/daKIZsiURKTX4vDR18zq
x9895yc2iHd/zvu5qqu4aY90ZKHQUZ9N8KEfLxR+ECrBnYCZTkFJinIN2ZfnfMyj
XEL3moGtgvKTv8gpFdPHQt0C2waqjyB2MtQVuxmvbdNOevfrJ7CsyF0e66FCV027
5hSoX+jPQrZ7XVmYFWes4dRGwg3UAXh8fsu02YsokwgPAn7CX3S6OfbnaKPs+r4Q
dWAZlbbBOtTyZWUm1VIAe/7Nja4UZTuqMVdb6ETqQktEX+6CvzBpOuVofyTiY1Zk
S5+/UFhB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:37 2025 by rpki-client