Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/ncmluYeo_sRXO01kbZ9uty7mm_g.roa
File: ncmluYeo_sRXO01kbZ9uty7mm_g.roa (raw, json)
Hash identifier: yltOi4KlYEObzDFxfH2EKLm0zoE8ikMmFRyitJv3r6Q=
Subject key identifier: 9D:C9:A5:B9:87:A8:FE:C4:57:3B:4D:64:6D:9F:6E:B7:2E:E6:9B:F8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 18529BE6
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/ncmluYeo_sRXO01kbZ9uty7mm_g.roa
Signing time: Sat 01 Jan 2022 01:55:08 +0000
ROA not before: Sat 01 Jan 2022 01:55:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44527
IP address blocks: 93.92.110.0/24 maxlen: 24
93.92.109.0/24 maxlen: 24
93.92.108.0/24 maxlen: 24
185.62.221.0/24 maxlen: 24
185.62.220.0/22 maxlen: 22
185.62.220.0/24 maxlen: 24
185.62.222.0/24 maxlen: 24
93.92.104.0/22 maxlen: 22
93.92.104.0/21 maxlen: 21
2a04:8040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408067046 (0x18529be6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Jan 1 01:55:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dc9a5b987a8fec4573b4d646d9f6eb72ee69bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:6c:81:06:55:d5:b3:7d:d2:0b:97:72:2b:
c0:be:20:37:39:01:a3:0f:52:da:b9:4d:07:34:70:
b3:8c:b9:27:74:d7:e1:52:55:29:c8:ba:42:82:67:
18:7e:cd:7d:43:3a:21:91:7b:5f:b4:60:c1:2d:e3:
43:e3:2b:71:43:9c:3b:75:75:09:91:cf:96:da:85:
c0:8f:f9:45:0c:cb:2e:da:8c:6d:38:be:d5:c0:38:
92:35:c1:f9:16:79:50:37:7b:a4:d0:8e:91:06:7a:
79:44:6e:90:07:31:2c:e7:6e:1d:40:9f:36:26:b9:
19:2b:73:79:45:2e:50:ec:d2:7e:9a:cf:56:8b:62:
a2:2d:c9:36:f0:4e:c5:50:8c:53:d4:a3:99:01:aa:
55:d0:63:19:74:73:2d:55:f1:54:4b:6e:5c:e9:6c:
af:f5:17:cd:6f:0f:de:34:b3:0b:41:c1:45:8f:79:
83:c0:84:56:53:e0:6c:a9:58:f8:8b:76:c6:51:04:
6e:4a:32:49:40:47:80:ac:6d:c2:e6:e1:31:e4:61:
3f:7f:c7:9f:c4:f6:0d:de:e4:16:d7:25:41:4d:75:
e0:5a:9a:2f:0c:fa:89:ac:4e:a6:54:55:9e:a2:4b:
09:93:d6:38:7f:23:76:62:1b:2f:20:d6:94:bc:73:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C9:A5:B9:87:A8:FE:C4:57:3B:4D:64:6D:9F:6E:B7:2E:E6:9B:F8
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/ncmluYeo_sRXO01kbZ9uty7mm_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.104.0/21
185.62.220.0/22
IPv6:
2a04:8040::/29
Signature Algorithm: sha256WithRSAEncryption
99:ad:20:e5:32:ba:35:5b:a2:68:16:7c:74:72:1f:9d:e4:52:
13:1f:40:11:71:87:63:78:44:75:9d:54:36:39:e5:06:37:38:
99:8d:cd:15:a5:fd:1d:79:26:c4:56:1b:58:90:da:1e:81:af:
d3:60:9d:58:69:c0:56:4f:3d:2e:de:d9:f0:6a:82:f5:b6:7a:
60:15:4c:ba:d5:2a:ca:37:07:03:97:78:2d:4a:a8:0c:93:6d:
30:1b:34:9b:23:08:ff:e3:ab:c7:04:1d:9f:12:c5:d9:92:3f:
06:a9:d2:df:12:2e:0d:ce:5f:cb:f4:de:1a:9b:a9:90:67:61:
b4:c5:98:8c:bc:4a:d1:84:b7:f4:d4:cb:b8:fe:e1:90:fa:ce:
32:69:62:08:c3:fc:dd:49:20:ca:a1:4a:1e:ad:e7:c7:b2:1b:
f1:30:b2:80:41:c9:01:3a:7a:f6:19:39:62:53:7c:b3:94:70:
bd:49:9d:4f:61:94:e2:a2:ac:d8:a1:78:1a:a6:bf:43:9f:fd:
34:8f:20:d1:46:41:39:39:75:2f:f2:b7:68:26:23:69:0d:31:
86:ff:5e:8e:00:43:27:f9:cb:ba:d5:15:27:52:f2:7b:66:f5:
51:a5:74:e8:cb:66:b0:f0:3e:08:ff:46:6c:7a:1f:d1:bc:d9:
2c:32:d7:f4
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEGFKb5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODQ4NTVlNzAxOTM5Njg2MzVhYzQ0OTJhZDcwMmE4MjQ4ZTAzM2U4MB4XDTIyMDEw
MTAxNTUwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWRjOWE1Yjk4N2E4
ZmVjNDU3M2I0ZDY0NmQ5ZjZlYjcyZWU2OWJmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKL4bIEGVdWzfdILl3IrwL4gNzkBow9S2rlNBzRws4y5J3TX
4VJVKci6QoJnGH7NfUM6IZF7X7RgwS3jQ+MrcUOcO3V1CZHPltqFwI/5RQzLLtqM
bTi+1cA4kjXB+RZ5UDd7pNCOkQZ6eURukAcxLOduHUCfNia5GStzeUUuUOzSfprP
Votioi3JNvBOxVCMU9SjmQGqVdBjGXRzLVXxVEtuXOlsr/UXzW8P3jSzC0HBRY95
g8CEVlPgbKlY+It2xlEEbkoySUBHgKxtwubhMeRhP3/Hn8T2Dd7kFtclQU114Fqa
Lwz6iaxOplRVnqJLCZPWOH8jdmIbLyDWlLxzZK8CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSdyaW5h6j+xFc7TWRtn263Luab+DAfBgNVHSMEGDAWgBRISFXnAZOWhjWs
RJKtcCqCSOAz6DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NFaFY1d0dUbG9ZMXJFU1NyWEFxZ2tqZ00tZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTMvYTc2MjM0LTY3ZDMtNDgzMS1hOGMyLWUyYzNkMzIwMzRjNC8x
L25jbWx1WWVvX3NSWE8wMWtiWjl1dHk3bW1fZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMv
YTc2MjM0LTY3ZDMtNDgzMS1hOGMyLWUyYzNkMzIwMzRjNC8xL1NFaFY1d0dUbG9Z
MXJFU1NyWEFxZ2tqZ00tZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA11caAMEArk+3DANBAIAAjAHAwUD
KgSAQDANBgkqhkiG9w0BAQsFAAOCAQEAma0g5TK6NVuiaBZ8dHIfneRSEx9AEXGH
Y3hEdZ1UNjnlBjc4mY3NFaX9HXkmxFYbWJDaHoGv02CdWGnAVk89Lt7Z8GqC9bZ6
YBVMutUqyjcHA5d4LUqoDJNtMBs0myMI/+OrxwQdnxLF2ZI/BqnS3xIuDc5fy/Te
GpupkGdhtMWYjLxK0YS39NTLuP7hkPrOMmliCMP83UkgyqFKHq3nx7Ib8TCygEHJ
ATp69hk5YlN8s5RwvUmdT2GU4qKs2KF4Gqa/Q5/9NI8g0UZBOTl1L/K3aCYjaQ0x
hv9ejgBDJ/nLutUVJ1Lye2b1UaV06MtmsPA+CP9GbHof0bzZLDLX9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org