Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/npAW2U38qmsvQdYc3RBGHOkU8ic.roa
File: npAW2U38qmsvQdYc3RBGHOkU8ic.roa (raw, json)
Hash identifier: dPcgU7mD/VFhtvqR60qnu5r3GFC1qE7yCKn5zl4+ieA=
Subject key identifier: 9E:90:16:D9:4D:FC:AA:6B:2F:41:D6:1C:DD:10:46:1C:E9:14:F2:27
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0182A7BC5BA2B37C15A35836C9EC164999FB
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/npAW2U38qmsvQdYc3RBGHOkU8ic.roa
Signing time: Tue 16 Aug 2022 17:38:35 +0000
ROA not before: Tue 16 Aug 2022 17:38:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.149.92.0/22 maxlen: 24
80.246.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:bc:5b:a2:b3:7c:15:a3:58:36:c9:ec:16:49:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Aug 16 17:38:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e9016d94dfcaa6b2f41d61cdd10461ce914f227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:b9:5c:62:78:33:73:35:1e:fc:28:f0:fd:
3e:5c:ff:cb:ae:d8:6b:01:f5:fd:55:09:6d:4b:c9:
a5:28:c0:70:65:0a:80:2e:f2:3a:a0:07:92:19:27:
07:d1:7e:21:aa:6a:49:a8:63:7f:e7:c8:0e:87:4d:
f5:53:77:0c:76:fa:e9:2c:a9:34:d1:04:8a:84:5c:
8b:7b:7c:57:2b:62:3d:a6:fa:2e:71:2d:13:1d:50:
72:44:e1:73:8a:5b:df:11:0c:90:a2:21:06:f7:fb:
6a:4e:90:37:50:80:c4:e1:a6:a5:8e:d7:c3:b6:57:
aa:f8:31:29:ab:e2:f4:8b:e5:01:38:b2:11:43:55:
78:e4:e2:bc:40:23:2e:78:22:82:d5:99:cd:87:ea:
44:72:61:55:42:9c:f2:e6:81:74:70:4b:9b:11:db:
d3:66:d9:a3:55:d8:37:26:5b:51:08:f9:6a:f2:92:
27:ae:9e:30:6e:b7:3c:48:41:64:d3:be:23:e5:c2:
81:19:97:c6:af:0f:66:66:99:31:99:6a:a2:c9:1a:
45:6b:e8:c3:b1:e0:d2:78:65:72:b6:af:22:32:cb:
b0:69:99:57:3f:b8:3a:15:84:47:e7:1f:b5:dc:26:
80:81:fe:8e:c7:0c:12:08:86:f9:86:9e:d4:5b:48:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:90:16:D9:4D:FC:AA:6B:2F:41:D6:1C:DD:10:46:1C:E9:14:F2:27
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/npAW2U38qmsvQdYc3RBGHOkU8ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/22
80.246.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:7a:07:84:08:35:7a:8e:d1:cf:a5:a3:07:b0:3f:f9:03:20:
2a:42:8b:bd:1b:ba:e5:df:b3:0c:00:09:2a:0f:0c:f0:a4:d8:
9a:4e:b4:7a:e0:96:80:9b:66:43:63:91:9a:ff:55:85:6b:f9:
b5:cc:c3:2a:bc:f7:92:50:c3:78:a1:96:b0:95:cc:d1:81:8d:
bf:d1:46:a7:a7:99:c6:96:38:e7:9e:6e:03:04:29:b2:1a:d8:
89:c7:57:a4:e3:d9:66:3f:31:5f:80:f6:b6:81:41:44:ef:ab:
f4:dc:32:0c:5f:86:c8:d3:cd:da:03:eb:43:42:c8:1b:d2:e4:
63:f5:71:05:ad:b5:74:6a:bd:44:fb:ab:d8:a5:10:93:20:e4:
38:99:95:27:ba:c9:e6:ae:55:87:b8:bd:a8:be:ac:f8:b0:c6:
3e:ac:cb:7a:f9:93:16:4c:02:db:46:a7:63:1e:b4:8b:15:ef:
41:41:f8:5b:66:b8:5b:4e:e4:e4:86:bb:7c:62:03:94:7a:64:
4d:2f:4e:e7:97:85:13:23:ee:da:f5:4c:58:9f:97:59:49:d5:
15:9f:53:82:d2:e7:77:6d:3f:ed:ff:f3:f5:ec:63:71:b3:bc:
4c:d2:67:67:dd:73:ae:aa:c4:c0:dd:9d:37:fa:98:4e:19:ea:
83:79:24:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKnvFuis3wVo1g2yewWSZn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjIwODE2MTczODM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTkwMTZkOTRkZmNhYTZiMmY0MWQ2MWNkZDEwNDYxY2U5MTRmMjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiO5XGJ4M3M1Hvwo8P0+XP/Lrthr
AfX9VQltS8mlKMBwZQqALvI6oAeSGScH0X4hqmpJqGN/58gOh031U3cMdvrpLKk0
0QSKhFyLe3xXK2I9pvoucS0THVByROFzilvfEQyQoiEG9/tqTpA3UIDE4aaljtfD
tleq+DEpq+L0i+UBOLIRQ1V45OK8QCMueCKC1ZnNh+pEcmFVQpzy5oF0cEubEdvT
ZtmjVdg3JltRCPlq8pInrp4wbrc8SEFk074j5cKBGZfGrw9mZpkxmWqiyRpFa+jD
seDSeGVytq8iMsuwaZlXP7g6FYRH5x+13CaAgf6OxwwSCIb5hp7UW0iwZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ6QFtlN/KprL0HWHN0QRhzpFPInMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvbnBBVzJVMzhxbXN2UWRZYzNSQkdIT2tVOGljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZVcAwQE
UPbgMA0GCSqGSIb3DQEBCwUAA4IBAQBcegeECDV6jtHPpaMHsD/5AyAqQou9G7rl
37MMAAkqDwzwpNiaTrR64JaAm2ZDY5Ga/1WFa/m1zMMqvPeSUMN4oZawlczRgY2/
0Uanp5nGljjnnm4DBCmyGtiJx1ek49lmPzFfgPa2gUFE76v03DIMX4bI083aA+tD
Qsgb0uRj9XEFrbV0ar1E+6vYpRCTIOQ4mZUnusnmrlWHuL2ovqz4sMY+rMt6+ZMW
TALbRqdjHrSLFe9BQfhbZrhbTuTkhrt8YgOUemRNL07nl4UTI+7a9UxYn5dZSdUV
n1OC0ud3bT/t//P17GNxs7xM0mdn3XOuqsTA3Z03+phOGeqDeSTM
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:13 2023 by rpki-client on console-fra.rpki-client.org