Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/naGQa6vFze53CTOd7L70ipuZwIk.roa
File: naGQa6vFze53CTOd7L70ipuZwIk.roa (raw, json)
Hash identifier: cafl5gJ5+J7YVPZLYeVElVwTgInVWJJJzM0zSdU/MB8=
Subject key identifier: 9D:A1:90:6B:AB:C5:CD:EE:77:09:33:9D:EC:BE:F4:8A:9B:99:C0:89
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 05A11866
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/naGQa6vFze53CTOd7L70ipuZwIk.roa
Signing time: Sat 01 Jan 2022 07:04:04 +0000
ROA not before: Sat 01 Jan 2022 07:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57034
IP address blocks: 93.174.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94443622 (0x5a11866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 07:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9da1906babc5cdee7709339decbef48a9b99c089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:70:00:3f:dc:85:dc:ee:85:de:02:a5:7c:
d0:81:e2:fa:38:a6:8d:0e:ee:0f:1a:13:89:d7:64:
74:a0:e4:a3:49:58:3d:5e:54:21:6b:a7:4b:6f:00:
63:28:4b:e8:0b:39:e1:fb:a2:3b:a0:79:30:6b:ba:
e7:72:77:ae:18:86:12:31:30:78:02:18:06:5c:fa:
f1:d1:91:a2:ee:37:ca:8d:49:48:4e:26:22:66:37:
80:bd:2e:81:16:aa:73:31:be:2b:3a:d7:ce:9c:23:
33:03:5b:45:18:65:ce:7d:61:ff:6b:a0:56:cb:9b:
e9:b3:22:eb:ce:4c:69:1e:29:1a:01:55:bd:5a:de:
16:3e:5f:48:17:de:3c:d2:47:5c:53:06:b1:0b:a4:
26:83:a4:42:05:ba:41:af:50:cd:e2:35:04:36:a9:
f2:fb:cd:3b:bd:c6:45:1d:eb:43:84:73:65:f1:6c:
13:87:bf:25:34:c0:fc:d7:0c:de:5c:90:f3:2f:a3:
fe:64:45:a1:a8:30:06:3f:c9:fe:94:b3:ba:dc:b0:
0e:89:54:62:02:fc:12:fe:85:e1:36:dc:eb:1b:87:
54:20:23:e7:a9:4d:a5:4c:8c:a5:c2:a5:66:3b:13:
2f:e4:dd:26:fd:17:35:48:d5:de:18:76:be:31:ba:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:90:6B:AB:C5:CD:EE:77:09:33:9D:EC:BE:F4:8A:9B:99:C0:89
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/naGQa6vFze53CTOd7L70ipuZwIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.164.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4a:11:b5:c8:ee:fc:a3:8b:a1:1a:bb:13:4b:64:59:65:f3:
ca:62:d8:09:24:5d:fb:76:36:1e:3b:a3:a1:07:8e:c7:ba:a7:
fc:4e:0e:67:42:f3:40:9e:72:4d:bf:56:3c:54:9b:ae:2a:07:
76:92:7f:d1:fc:a8:f2:cd:dc:05:b0:e0:f0:f6:5b:76:02:da:
dd:b5:af:b0:bb:e2:f4:f6:04:9b:73:6a:49:84:9f:a3:9b:66:
6b:0c:24:6c:3f:13:92:16:e2:bd:ec:6a:2a:14:3f:3f:39:39:
32:9b:4c:8f:7b:59:c8:11:14:dd:ff:05:90:8d:e4:d1:7f:a6:
9c:a8:cf:3c:f1:f9:3c:eb:9e:3e:3d:4e:ef:36:8d:ed:74:64:
10:b3:79:54:e3:b3:8b:25:ed:11:a0:e1:94:45:a5:0a:4e:20:
79:32:dc:0a:df:af:79:e4:17:79:8a:26:8c:19:8e:74:09:6c:
4a:b6:04:21:dd:87:02:3f:74:b5:39:3e:8f:b3:24:87:8c:c3:
53:16:fb:d6:87:95:c9:62:20:45:67:b9:13:e3:6a:37:7f:1d:
81:8a:94:c9:f0:a8:ff:a0:ce:c2:6a:35:5f:86:0c:02:15:a5:
6a:3b:40:0c:5f:50:25:37:31:21:c7:d7:3c:0a:66:7c:20:73:
b9:d6:e0:08
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBaEYZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2VmNThkNGNmYTM1NTQzZjg0ODhhMjc1NmU2OTI0ZTY0N2I0NTg5MB4XDTIyMDEw
MTA3MDQwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWRhMTkwNmJhYmM1
Y2RlZTc3MDkzMzlkZWNiZWY0OGE5Yjk5YzA4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANwtcAA/3IXc7oXeAqV80IHi+jimjQ7uDxoTiddkdKDko0lY
PV5UIWunS28AYyhL6As54fuiO6B5MGu653J3rhiGEjEweAIYBlz68dGRou43yo1J
SE4mImY3gL0ugRaqczG+KzrXzpwjMwNbRRhlzn1h/2ugVsub6bMi685MaR4pGgFV
vVreFj5fSBfePNJHXFMGsQukJoOkQgW6Qa9QzeI1BDap8vvNO73GRR3rQ4RzZfFs
E4e/JTTA/NcM3lyQ8y+j/mRFoagwBj/J/pSzutywDolUYgL8Ev6F4Tbc6xuHVCAj
56lNpUyMpcKlZjsTL+TdJv0XNUjV3hh2vjG6OdcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSdoZBrq8XN7ncJM53svvSKm5nAiTAfBgNVHSMEGDAWgBTc71jUz6NVQ/hI
iidW5pJOZHtFiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNPOVkxTS1qVlVQNFNJb25WdWFTVG1SN1JZay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8x
L25hR1FhNnZGemU1M0NUT2Q3TDcwaXB1WndJay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
ZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8xLzNPOVkxTS1qVlVQ
NFNJb25WdWFTVG1SN1JZay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2upDANBgkqhkiG9w0BAQsFAAOC
AQEAckoRtcju/KOLoRq7E0tkWWXzymLYCSRd+3Y2HjujoQeOx7qn/E4OZ0LzQJ5y
Tb9WPFSbrioHdpJ/0fyo8s3cBbDg8PZbdgLa3bWvsLvi9PYEm3NqSYSfo5tmawwk
bD8TkhbivexqKhQ/Pzk5MptMj3tZyBEU3f8FkI3k0X+mnKjPPPH5POuePj1O7zaN
7XRkELN5VOOziyXtEaDhlEWlCk4geTLcCt+veeQXeYomjBmOdAlsSrYEId2HAj90
tTk+j7Mkh4zDUxb71oeVyWIgRWe5E+NqN38dgYqUyfCo/6DOwmo1X4YMAhWlajtA
DF9QJTcxIcfXPApmfCBzudbgCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:43 2024 by rpki-client on console-ams.rpki-client.org