Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/nGmM7up5bHvmEx5-5freu-OWZm8.roa
File: nGmM7up5bHvmEx5-5freu-OWZm8.roa (raw, json)
Hash identifier: rjYB8zk/NxwWCumTcl19TN7qzcuhifLFqRdBVzblLLA=
Subject key identifier: 9C:69:8C:EE:EA:79:6C:7B:E6:13:1E:7E:E5:FA:DE:BB:E3:96:66:6F
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 3DCA8C84
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/nGmM7up5bHvmEx5-5freu-OWZm8.roa
Signing time: Sat 01 Jan 2022 08:56:55 +0000
ROA not before: Sat 01 Jan 2022 08:56:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34950
IP address blocks: 193.44.172.0/22 maxlen: 24
193.44.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036684420 (0x3dca8c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 08:56:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c698ceeea796c7be6131e7ee5fadebbe396666f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:cb:03:25:ac:a9:60:d1:9d:c8:c2:da:b9:
b2:b7:14:b9:62:08:6f:a7:03:5f:32:ef:7a:87:3c:
85:48:6a:4d:6d:32:44:02:6c:e4:47:9c:d5:2b:4a:
d3:f3:e0:8c:5e:79:66:7c:79:8a:85:3e:a4:4c:ad:
6c:c8:45:18:cb:f1:60:47:88:4d:a5:f6:a8:20:12:
43:b3:f2:eb:af:b0:18:14:e5:dc:40:09:20:53:c3:
fe:77:89:dc:32:97:01:35:0f:78:dd:89:61:0a:02:
6b:29:75:9f:db:46:27:be:ee:c6:33:36:94:2b:c2:
d2:0e:68:11:9a:4b:68:9e:01:8a:a6:40:dd:45:41:
14:87:90:0e:21:2d:7c:3a:f2:59:43:ca:92:88:f5:
a5:43:1e:fa:66:03:a2:16:e4:23:63:f4:ed:19:03:
4f:31:8e:58:ac:09:7a:9f:a6:05:11:d6:c9:9c:a5:
e5:bf:6e:9d:65:8a:4a:37:08:91:ae:d0:74:c4:9e:
d3:97:dc:61:b9:49:e1:98:ce:65:b3:d2:bb:a1:35:
18:5c:b7:76:22:59:85:05:4b:fa:cd:b9:4c:84:dc:
7d:fd:27:a0:57:97:2e:44:24:dc:bf:95:b4:39:3c:
3d:68:71:ef:1a:66:f5:7f:96:b7:74:92:3f:a2:5c:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:69:8C:EE:EA:79:6C:7B:E6:13:1E:7E:E5:FA:DE:BB:E3:96:66:6F
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/nGmM7up5bHvmEx5-5freu-OWZm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.44.76.0/22
193.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
81:11:29:13:f0:1d:55:39:32:fb:5e:9b:4b:6a:54:75:27:b6:
cd:3c:92:41:a1:01:c6:0b:c3:2d:0b:83:e3:c7:e9:d9:67:11:
a3:7f:e0:3f:b1:6b:c0:c6:06:ac:0d:8b:51:d2:30:66:b2:1e:
f6:85:1a:65:bb:ec:db:d5:8f:a4:df:98:02:f3:82:76:cc:fd:
32:49:72:1a:26:f2:2c:fd:05:c0:2f:8c:b3:69:3e:41:92:78:
75:6d:73:3a:12:be:ea:ca:cb:69:ac:81:18:45:38:4c:0c:99:
b8:2d:0b:24:22:d7:b9:2e:17:51:05:11:78:f6:9f:cb:12:c0:
d8:02:f6:96:5f:18:22:02:cc:59:f5:69:21:2b:94:7a:a6:71:
16:a7:68:ca:ef:73:0a:1f:16:15:f7:61:14:28:b4:84:e1:55:
fb:ba:70:0c:ca:46:09:d9:21:55:65:49:c5:eb:3d:21:89:4e:
9b:b7:a5:57:b5:bb:c4:c0:4b:dc:23:8b:1f:4a:86:41:01:0c:
ad:1e:d7:d2:fa:c2:48:84:7d:09:1b:17:c1:ed:0d:bf:b4:03:
b2:f9:df:ab:2c:ac:22:04:85:0e:60:06:f4:a4:41:a5:54:5a:
7f:70:94:d9:0e:67:ba:95:1c:b1:23:0d:2e:78:fa:3d:eb:40:
4c:4b:8f:82
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEPcqMhDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjY4MTM4ZDRlYzJlYTUxY2FjZWYwOWZmMTA1OGEzNzBhNWJlMTkwMB4XDTIyMDEw
MTA4NTY1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWM2OThjZWVlYTc5
NmM3YmU2MTMxZTdlZTVmYWRlYmJlMzk2NjY2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOqywMlrKlg0Z3Iwtq5srcUuWIIb6cDXzLveoc8hUhqTW0y
RAJs5Eec1StK0/PgjF55Znx5ioU+pEytbMhFGMvxYEeITaX2qCASQ7Py66+wGBTl
3EAJIFPD/neJ3DKXATUPeN2JYQoCayl1n9tGJ77uxjM2lCvC0g5oEZpLaJ4BiqZA
3UVBFIeQDiEtfDryWUPKkoj1pUMe+mYDohbkI2P07RkDTzGOWKwJep+mBRHWyZyl
5b9unWWKSjcIka7QdMSe05fcYblJ4ZjOZbPSu6E1GFy3diJZhQVL+s25TITcff0n
oFeXLkQk3L+VtDk8PWhx7xpm9X+Wt3SSP6JcVxsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBScaYzu6nlse+YTHn7l+t6745ZmbzAfBgNVHSMEGDAWgBQfaBONTsLqUcrO
8J/xBYo3ClvhkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0gyZ1RqVTdDNmxIS3p2Q2Y4UVdLTndwYjRaQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTcvYjlhZGY0LWY5MTAtNDM1NS1iZmM4LTYwODU2NDgzOWZkMC8x
L25HbU03dXA1Ykh2bUV4NS01ZnJldS1PV1ptOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcv
YjlhZGY0LWY5MTAtNDM1NS1iZmM4LTYwODU2NDgzOWZkMC8xL0gyZ1RqVTdDNmxI
S3p2Q2Y4UVdLTndwYjRaQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAsEsTAMEAsEsrDANBgkqhkiG9w0B
AQsFAAOCAQEAgREpE/AdVTky+16bS2pUdSe2zTySQaEBxgvDLQuD48fp2WcRo3/g
P7FrwMYGrA2LUdIwZrIe9oUaZbvs29WPpN+YAvOCdsz9MklyGibyLP0FwC+Ms2k+
QZJ4dW1zOhK+6srLaayBGEU4TAyZuC0LJCLXuS4XUQURePafyxLA2AL2ll8YIgLM
WfVpISuUeqZxFqdoyu9zCh8WFfdhFCi0hOFV+7pwDMpGCdkhVWVJxes9IYlOm7el
V7W7xMBL3COLH0qGQQEMrR7X0vrCSIR9CRsXwe0Nv7QDsvnfqyysIgSFDmAG9KRB
pVRaf3CU2Q5nupUcsSMNLnj6PetATEuPgg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-ams.rpki-client.org