Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NzocTURZdIRrNNENQ2IYAeR74KQ.roa
File: NzocTURZdIRrNNENQ2IYAeR74KQ.roa (raw, json)
Hash identifier: 3eBcS/Wpcp0rn/pW1JHzCAoWnsG6ZTGTJjF1q05ADms=
Subject key identifier: 37:3A:1C:4D:44:59:74:84:6B:34:D1:0D:43:62:18:01:E4:7B:E0:A4
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01825E8F92EC2938F17AAED7EEAC206AC771
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NzocTURZdIRrNNENQ2IYAeR74KQ.roa
Signing time: Tue 02 Aug 2022 12:37:23 +0000
ROA not before: Tue 02 Aug 2022 12:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206238
IP address blocks: 45.137.88.0/22 maxlen: 24
45.138.52.0/22 maxlen: 24
45.137.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5e:8f:92:ec:29:38:f1:7a:ae:d7:ee:ac:20:6a:c7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 2 12:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=373a1c4d445974846b34d10d43621801e47be0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:1a:d9:97:00:65:e1:fd:0c:0c:23:00:ba:
b3:99:48:e4:b8:3d:e8:ff:fb:55:70:b8:05:55:2b:
e9:e9:e5:3f:5b:3e:c9:7c:14:d8:fd:b6:10:87:a4:
4a:25:40:b8:1e:6c:8b:a7:4c:ed:de:2a:a9:92:4a:
a2:96:13:3d:7d:a6:4e:52:1d:e8:b7:7a:8b:1a:58:
93:7e:d2:f5:95:a1:05:86:5c:96:ca:b5:0d:85:49:
8a:26:d5:2f:ff:9f:00:ec:6d:c3:a4:53:3e:61:63:
a0:ff:d1:e6:94:55:13:b3:c2:35:b1:f8:2a:42:23:
06:d0:ef:af:d4:38:8d:4e:44:fa:4c:8a:12:0d:52:
c9:42:a4:d4:a8:26:ec:eb:38:1c:3f:38:1c:17:ca:
44:11:9f:89:75:83:c1:3a:93:68:f5:e2:72:0a:24:
2a:d7:9e:fe:d4:a7:f5:cd:d0:1f:92:fa:6e:c3:6b:
08:7f:82:03:7d:78:cd:9d:01:cf:05:66:ec:84:94:
71:3c:7e:24:f3:be:5d:2d:2c:5f:fa:b0:60:d5:3c:
8f:2b:e6:f5:c4:fa:75:0a:aa:b9:50:f5:9f:35:be:
01:a4:ff:a7:51:ec:6a:b2:cb:a1:71:60:75:ee:83:
14:ce:a6:e2:82:67:32:f7:2f:22:7d:07:ff:5c:43:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:1C:4D:44:59:74:84:6B:34:D1:0D:43:62:18:01:E4:7B:E0:A4
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NzocTURZdIRrNNENQ2IYAeR74KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.88.0/22
45.137.100.0/22
45.138.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:f4:ad:f2:dc:c7:04:e5:3a:e0:d8:82:6a:92:80:a3:6a:af:
ec:7b:5d:af:18:98:19:22:ec:72:e4:6c:e9:53:68:53:c8:50:
79:9a:35:69:f3:c4:d5:7e:9e:2d:37:b9:ee:8a:e3:3a:e1:af:
f8:e2:33:72:96:be:04:bd:c5:af:e9:d0:5e:1a:2a:bd:32:ce:
67:d3:07:59:51:73:80:2e:5e:ab:ca:51:4f:31:47:5a:9d:8f:
91:75:67:c2:79:df:26:49:e8:6e:99:a4:a8:d9:68:25:8b:62:
1d:e4:5b:62:ea:26:52:70:24:5c:32:4d:e7:69:f9:91:47:00:
c0:5d:1a:4d:f8:4b:b7:bb:23:cb:12:44:76:5d:cc:fe:c5:e4:
63:f0:47:86:3b:20:98:40:65:5b:a9:c7:a3:0a:ce:d5:42:00:
e5:4a:fc:7b:24:fc:ca:26:f7:e6:91:f6:60:3d:16:35:4c:55:
43:cc:2b:b5:63:6a:13:a6:2c:e7:e4:53:44:97:8b:d6:6a:bc:
63:01:ed:0d:9f:2e:e6:81:5b:8e:61:f5:4c:06:92:d8:17:90:
42:a9:65:4d:e0:90:0f:f4:ac:9d:1d:aa:6e:90:dc:6f:00:32:
cc:14:52:04:af:20:31:92:0e:f8:6c:49:22:e9:8e:f3:a6:5a:
a9:ea:e8:81
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYJej5LsKTjxeq7X7qwgasdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjIwODAyMTIzNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzNhMWM0ZDQ0NTk3NDg0NmIzNGQxMGQ0MzYyMTgwMWU0N2JlMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vMa2ZcAZeH9DAwjALqzmUjkuD3o
//tVcLgFVSvp6eU/Wz7JfBTY/bYQh6RKJUC4HmyLp0zt3iqpkkqilhM9faZOUh3o
t3qLGliTftL1laEFhlyWyrUNhUmKJtUv/58A7G3DpFM+YWOg/9HmlFUTs8I1sfgq
QiMG0O+v1DiNTkT6TIoSDVLJQqTUqCbs6zgcPzgcF8pEEZ+JdYPBOpNo9eJyCiQq
157+1Kf1zdAfkvpuw2sIf4IDfXjNnQHPBWbshJRxPH4k875dLSxf+rBg1TyPK+b1
xPp1Cqq5UPWfNb4BpP+nUexqssuhcWB17oMUzqbigmcy9y8ifQf/XEP56QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDc6HE1EWXSEazTRDUNiGAHke+CkMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvTnpvY1RVUlpkSVJyTk5FTlEySVlBZVI3NEtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYlYAwQC
LYlkAwQCLYo0MA0GCSqGSIb3DQEBCwUAA4IBAQAu9K3y3McE5Trg2IJqkoCjaq/s
e12vGJgZIuxy5GzpU2hTyFB5mjVp88TVfp4tN7nuiuM64a/44jNylr4EvcWv6dBe
Giq9Ms5n0wdZUXOALl6rylFPMUdanY+RdWfCed8mSehumaSo2Wgli2Id5Fti6iZS
cCRcMk3nafmRRwDAXRpN+Eu3uyPLEkR2Xcz+xeRj8EeGOyCYQGVbqcejCs7VQgDl
Svx7JPzKJvfmkfZgPRY1TFVDzCu1Y2oTpizn5FNEl4vWarxjAe0Nny7mgVuOYfVM
BpLYF5BCqWVN4JAP9KydHapukNxvADLMFFIEryAxkg74bEki6Y7zplqp6uiB
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org