Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/NLeDgP7sXyJTeHkVbYZdzMyfXD0.roa
File: NLeDgP7sXyJTeHkVbYZdzMyfXD0.roa (raw, json)
Hash identifier: DSu6xKDrS4Khdiv/ms8Dj6egXjNBu/a3P/vPc6KCkWU=
Subject key identifier: 34:B7:83:80:FE:EC:5F:22:53:78:79:15:6D:86:5D:CC:CC:9F:5C:3D
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018313FD7EFEB14792DCE03110B246C16036
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/NLeDgP7sXyJTeHkVbYZdzMyfXD0.roa
Signing time: Tue 06 Sep 2022 18:08:43 +0000
ROA not before: Tue 06 Sep 2022 18:08:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202973
IP address blocks: 45.15.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:fd:7e:fe:b1:47:92:dc:e0:31:10:b2:46:c1:60:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Sep 6 18:08:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34b78380feec5f22537879156d865dcccc9f5c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:ac:48:4b:08:32:a9:9a:21:2b:3f:89:5b:
fc:d9:4b:5e:07:76:6d:be:09:81:bb:9b:63:21:ae:
fa:a5:4e:e8:fd:69:bf:1b:09:60:1c:91:d5:c2:42:
4a:eb:29:66:7c:14:39:0a:83:71:26:c0:d4:66:63:
4b:70:f2:0e:f1:41:fc:59:7f:e7:52:e2:55:2f:ed:
9a:33:c8:5b:a3:ac:2b:12:fb:20:ae:6e:4f:56:79:
82:b3:fe:23:b6:e4:db:fe:a2:bd:62:b5:64:0a:40:
cf:be:ee:a1:94:05:b9:58:dd:0d:2a:40:3c:9d:a7:
24:9c:16:43:9f:7e:67:f3:4b:54:10:a2:a8:da:69:
55:8b:89:85:74:8e:15:32:ec:a6:e7:28:fa:59:6d:
10:59:b5:79:ad:8e:67:54:d1:84:83:1f:ad:24:01:
75:84:2b:c1:48:52:ba:79:08:4f:1a:70:04:43:b9:
84:09:ce:31:73:1b:32:a2:a7:7d:4c:c5:cc:73:3d:
0b:9c:50:a1:47:32:e7:0d:0a:a7:d9:83:0e:3c:c8:
9a:d4:4a:47:fd:ab:05:8f:77:7e:33:85:06:77:fd:
2a:93:ee:e4:bf:d0:1c:0e:73:3c:8c:3b:d7:58:cd:
c7:a0:f8:8d:d6:67:de:72:8d:74:0b:f3:70:c1:03:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:83:80:FE:EC:5F:22:53:78:79:15:6D:86:5D:CC:CC:9F:5C:3D
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/NLeDgP7sXyJTeHkVbYZdzMyfXD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.157.0/24
Signature Algorithm: sha256WithRSAEncryption
79:22:66:52:12:a5:9e:74:60:28:23:f3:42:81:57:90:a2:a3:
ca:b0:2f:f8:c9:cf:44:cf:2f:2a:1b:9c:3e:2e:12:22:1b:97:
1f:5c:1a:53:d0:18:f9:6e:90:dc:e9:42:9b:d8:fa:fb:96:36:
5a:bc:55:1b:64:46:d6:7a:9a:47:f9:a0:ab:ff:5b:ee:4b:31:
25:f2:c1:ac:37:65:dc:31:ef:37:1b:88:c7:84:45:ee:29:5f:
d6:a2:47:3c:bc:f7:69:55:69:b0:06:06:22:4d:99:5d:85:84:
50:0a:9a:f5:be:6b:00:a1:f8:2e:e5:78:5f:13:87:27:f4:a4:
e5:26:98:62:1e:15:e2:7b:aa:5b:25:ba:51:40:60:48:29:d1:
b8:3d:7f:0e:3c:15:09:46:94:5f:95:7f:5d:f8:d4:d7:d0:e6:
24:dd:26:a9:4a:90:73:8c:d4:62:2b:4e:b4:c0:de:52:cb:14:
8f:95:80:a2:a8:8c:93:ee:31:94:6d:a6:ee:48:1c:3a:df:a4:
5f:b0:d2:82:78:19:dd:3a:98:0d:22:e5:70:85:6a:0b:35:69:
5e:d1:94:df:28:a1:31:66:da:55:01:29:22:d5:09:a2:8f:61:
82:37:b0:88:5b:81:cc:70:6e:59:36:7e:5c:27:e4:30:f5:d9:
24:3d:2a:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMT/X7+sUeS3OAxELJGwWA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjIwOTA2MTgwODQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGI3ODM4MGZlZWM1ZjIyNTM3ODc5MTU2ZDg2NWRjY2NjOWY1YzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAOsSEsIMqmaISs/iVv82UteB3Zt
vgmBu5tjIa76pU7o/Wm/GwlgHJHVwkJK6ylmfBQ5CoNxJsDUZmNLcPIO8UH8WX/n
UuJVL+2aM8hbo6wrEvsgrm5PVnmCs/4jtuTb/qK9YrVkCkDPvu6hlAW5WN0NKkA8
nacknBZDn35n80tUEKKo2mlVi4mFdI4VMuym5yj6WW0QWbV5rY5nVNGEgx+tJAF1
hCvBSFK6eQhPGnAEQ7mECc4xcxsyoqd9TMXMcz0LnFChRzLnDQqn2YMOPMia1EpH
/asFj3d+M4UGd/0qk+7kv9AcDnM8jDvXWM3HoPiN1mfeco10C/NwwQNNTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDS3g4D+7F8iU3h5FW2GXczMn1w9MB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvTkxlRGdQN3NYeUpUZUhrVmJZWmR6TXlmWEQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ+dMA0G
CSqGSIb3DQEBCwUAA4IBAQB5ImZSEqWedGAoI/NCgVeQoqPKsC/4yc9Ezy8qG5w+
LhIiG5cfXBpT0Bj5bpDc6UKb2Pr7ljZavFUbZEbWeppH+aCr/1vuSzEl8sGsN2Xc
Me83G4jHhEXuKV/Wokc8vPdpVWmwBgYiTZldhYRQCpr1vmsAofgu5XhfE4cn9KTl
JphiHhXie6pbJbpRQGBIKdG4PX8OPBUJRpRflX9d+NTX0OYk3SapSpBzjNRiK060
wN5SyxSPlYCiqIyT7jGUbabuSBw636RfsNKCeBndOpgNIuVwhWoLNWle0ZTfKKEx
ZtpVASki1Qmij2GCN7CIW4HMcG5ZNn5cJ+Qw9dkkPSqN
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:58 2025 by rpki-client