Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/NFiqGuNCGLUIrriHI2nC9FswSFM.roa
File: NFiqGuNCGLUIrriHI2nC9FswSFM.roa (raw, json)
Hash identifier: zz1+CAfdpQeKfxWEPLFukfxb+M2LCzzX4TfWaFY9Eqo=
Subject key identifier: 34:58:AA:1A:E3:42:18:B5:08:AE:B8:87:23:69:C2:F4:5B:30:48:53
Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial: 018452BCB814177B3F66F47FB28DC25C5BD6
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/NFiqGuNCGLUIrriHI2nC9FswSFM.roa
Signing time: Mon 07 Nov 2022 15:36:50 +0000
ROA not before: Mon 07 Nov 2022 15:36:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24951
IP address blocks: 185.50.224.0/24 maxlen: 24
185.50.226.0/24 maxlen: 24
185.50.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:bc:b8:14:17:7b:3f:66:f4:7f:b2:8d:c2:5c:5b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Validity
Not Before: Nov 7 15:36:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3458aa1ae34218b508aeb8872369c2f45b304853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:a6:cc:5d:c1:58:8f:ca:73:60:56:f9:a0:
dd:e8:29:13:0d:75:5d:31:ff:1e:6f:13:6e:8f:5c:
d2:48:a6:f4:fa:78:04:a3:7a:b3:f1:ef:50:77:c9:
72:71:c2:22:52:79:58:bf:23:b9:5e:ba:9b:60:3f:
65:1c:d0:1a:c7:96:f1:1f:49:18:42:8d:20:cc:65:
1c:b7:4a:bb:75:c2:5f:30:d7:23:12:bb:d1:04:5b:
13:6c:40:de:3c:94:1c:6f:e4:81:70:3f:fc:1b:e7:
8e:0a:ad:56:46:e9:d2:03:18:7e:a1:9e:c2:fc:f7:
9f:62:1a:fa:5b:68:18:4c:aa:1e:84:51:29:1b:ed:
a9:82:f8:a2:d8:4f:90:1b:da:27:08:f9:94:34:ea:
00:44:69:64:c4:c2:b3:34:ae:40:e7:58:a6:60:78:
5b:5b:fd:f9:fe:8d:e4:6e:ab:55:ce:a1:ea:64:16:
04:8c:85:43:91:d2:90:60:f1:8f:62:43:30:87:26:
5b:9c:af:f1:13:bf:b5:19:85:40:44:fc:0d:3d:59:
d4:25:00:58:af:63:a2:20:c7:c5:77:12:43:54:74:
f2:ca:e9:c8:18:f2:63:22:ef:86:6d:77:3f:a3:dc:
c3:1c:ad:9e:10:3a:d3:c8:87:6a:fe:b2:d4:4c:bf:
bb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:58:AA:1A:E3:42:18:B5:08:AE:B8:87:23:69:C2:F4:5B:30:48:53
X509v3 Authority Key Identifier:
keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/NFiqGuNCGLUIrriHI2nC9FswSFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.224.0-185.50.226.255
Signature Algorithm: sha256WithRSAEncryption
a1:cc:e9:09:a5:10:c1:4d:05:89:0c:1c:c7:ca:94:e3:cc:1a:
a5:92:83:48:53:6e:f1:41:9d:c4:ec:34:e6:c9:ef:ad:b7:be:
4f:23:c5:5d:27:34:3f:d0:e2:39:29:8d:c4:c9:5c:46:25:2c:
17:09:84:6b:33:e5:2e:92:ec:2d:17:26:33:11:97:c4:4b:e1:
2c:3f:16:25:46:c4:3f:38:fb:8c:9f:b2:51:47:36:5a:4a:73:
0d:52:2f:ea:fa:51:97:f1:7d:92:b4:8d:7e:47:02:51:24:fd:
f4:e4:62:71:aa:dd:b8:95:7e:4c:8b:00:6d:55:5e:f1:7a:6f:
a0:55:00:e4:a2:2d:8e:9d:cc:37:9e:59:26:b0:62:70:ae:18:
da:71:a0:57:b7:6d:85:37:f2:68:76:02:d9:17:db:1f:b8:c5:
65:71:62:45:61:57:63:19:ff:6f:df:a8:ff:e1:05:76:52:73:
f9:f8:cb:b3:c7:40:fc:b9:a0:50:6a:59:aa:5e:3b:6b:05:4e:
da:19:85:3a:a7:c3:a5:e1:43:98:9e:29:34:7f:df:eb:ee:9d:
1a:2c:30:b1:99:89:bc:7f:1e:b4:45:ea:49:ef:99:7a:a8:6b:
7b:cb:85:bb:9f:26:8d:34:c3:c2:f2:5b:a5:48:11:48:6a:d1:
2d:f3:a9:6e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYRSvLgUF3s/ZvR/so3CXFvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YzFiYjNmYjEzNmFiZjQwN2EwYTUxYTRhMDc2NTE3NGZm
ZGY0NzQwHhcNMjIxMTA3MTUzNjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDU4YWExYWUzNDIxOGI1MDhhZWI4ODcyMzY5YzJmNDViMzA0ODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR2mzF3BWI/Kc2BW+aDd6CkTDXVd
Mf8ebxNuj1zSSKb0+ngEo3qz8e9Qd8lyccIiUnlYvyO5XrqbYD9lHNAax5bxH0kY
Qo0gzGUct0q7dcJfMNcjErvRBFsTbEDePJQcb+SBcD/8G+eOCq1WRunSAxh+oZ7C
/PefYhr6W2gYTKoehFEpG+2pgvii2E+QG9onCPmUNOoARGlkxMKzNK5A51imYHhb
W/35/o3kbqtVzqHqZBYEjIVDkdKQYPGPYkMwhyZbnK/xE7+1GYVARPwNPVnUJQBY
r2OiIMfFdxJDVHTyyunIGPJjIu+GbXc/o9zDHK2eEDrTyIdq/rLUTL+7hwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDRYqhrjQhi1CK64hyNpwvRbMEhTMB8GA1UdIwQY
MBaAFBnBuz+xNqv0B6ClGkoHZRdP/fR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEt
ZGFkMThkNWIyYTNjLzEvTkZpcUd1TkNHTFVJcnJpSEkybkM5RnN3U0ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEtZGFkMThkNWIyYTNj
LzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAW5MuAD
BAC5MuIwDQYJKoZIhvcNAQELBQADggEBAKHM6QmlEMFNBYkMHMfKlOPMGqWSg0hT
bvFBncTsNObJ7623vk8jxV0nND/Q4jkpjcTJXEYlLBcJhGsz5S6S7C0XJjMRl8RL
4Sw/FiVGxD84+4yfslFHNlpKcw1SL+r6UZfxfZK0jX5HAlEk/fTkYnGq3biVfkyL
AG1VXvF6b6BVAOSiLY6dzDeeWSawYnCuGNpxoFe3bYU38mh2AtkX2x+4xWVxYkVh
V2MZ/2/fqP/hBXZSc/n4y7PHQPy5oFBqWapeO2sFTtoZhTqnw6XhQ5ieKTR/3+vu
nRosMLGZibx/HrRF6knvmXqoa3vLhbufJo00w8LyW6VIEUhq0S3zqW4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:36 2023 by rpki-client on console-ams.rpki-client.org