Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/Ne-tBeFbz4pi4FhszbCwb0QkkkU.roa
File: Ne-tBeFbz4pi4FhszbCwb0QkkkU.roa (raw, json)
Hash identifier: 2IIuHGJ7abX2FlW8OehasCdy6ehdpKK3IqrrgjzBzVk=
Subject key identifier: 35:EF:AD:05:E1:5B:CF:8A:62:E0:58:6C:CD:B0:B0:6F:44:24:92:45
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 04642AE3
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/Ne-tBeFbz4pi4FhszbCwb0QkkkU.roa
Signing time: Fri 22 Apr 2022 09:11:52 +0000
ROA not before: Fri 22 Apr 2022 09:11:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32611
IP address blocks: 141.113.144.0/21 maxlen: 21
141.113.152.0/21 maxlen: 21
141.113.160.0/21 maxlen: 21
141.113.168.0/21 maxlen: 21
141.113.176.0/21 maxlen: 21
141.113.184.0/21 maxlen: 21
2a03:9e41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73673443 (0x4642ae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Apr 22 09:11:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35efad05e15bcf8a62e0586ccdb0b06f44249245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:63:3c:8b:f6:a7:56:fe:e2:35:99:a4:d6:2a:
36:34:a8:ec:55:95:0f:cf:1a:29:d4:06:98:95:ad:
47:e4:0a:61:37:5e:f6:dd:27:70:4b:b7:e9:3f:a6:
70:48:c9:27:11:bf:46:d4:41:24:8e:43:d8:e9:ed:
02:ac:bf:57:48:99:0a:2d:04:c9:67:cd:f6:4b:95:
12:92:b8:e6:17:8b:5d:68:11:c6:4f:e1:bf:11:ea:
e9:3d:5c:e1:3b:57:47:85:72:ad:89:04:bd:b8:c7:
0e:31:ed:24:ee:ca:76:3e:f0:b1:71:01:ea:f5:2c:
25:99:55:77:b0:c2:d8:8b:ce:b1:bb:34:de:c5:04:
9c:04:b8:84:6f:f1:55:c9:b4:0b:8f:fc:0c:88:a9:
7c:d2:5f:60:5d:5f:7c:8c:78:99:fa:2c:b4:0c:23:
fa:c2:1c:4a:a7:2a:a3:b5:b7:22:d5:08:0b:12:a5:
53:4f:7e:ac:0e:d7:22:2b:0b:1f:b4:c1:ef:53:d0:
05:99:6f:22:b1:71:d6:8c:23:21:13:d5:33:9f:47:
f4:d6:89:09:b4:73:c9:b7:2a:13:f8:77:65:32:3c:
bd:51:ef:0f:5f:69:a5:fb:c3:cc:68:4a:fe:5a:9c:
52:9e:e2:cb:6f:85:a0:1b:11:14:72:c4:88:32:42:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EF:AD:05:E1:5B:CF:8A:62:E0:58:6C:CD:B0:B0:6F:44:24:92:45
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/Ne-tBeFbz4pi4FhszbCwb0QkkkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.113.144.0-141.113.191.255
IPv6:
2a03:9e41::/32
Signature Algorithm: sha256WithRSAEncryption
81:15:c0:11:19:b3:00:97:b9:a7:aa:bd:46:01:57:42:84:0d:
e4:a8:d2:14:4e:50:2e:e4:03:fe:c0:e6:4f:3c:2c:be:8f:83:
98:e8:cf:e8:e4:bf:6a:2d:f6:a4:bc:b7:1a:e9:b7:24:d9:36:
04:49:94:16:0d:8e:02:f0:1b:d9:d1:10:56:d3:ea:2d:20:39:
b6:d1:be:9e:72:eb:81:af:23:5a:aa:f3:46:94:79:f6:ea:5d:
61:6f:a0:4a:b8:ad:94:42:1e:56:0d:dd:0f:35:cc:db:09:6a:
7e:17:8a:e1:9b:b1:f7:6c:d3:58:5b:22:ca:4a:87:a6:9a:b3:
5b:58:97:9d:85:76:44:2b:e9:d5:14:4c:fd:7c:d6:92:e3:db:
01:ea:f7:45:df:e4:3f:a8:90:2b:88:7f:b5:cf:48:19:a8:bf:
d1:1b:68:02:72:6e:0d:c8:2e:af:30:69:26:17:cc:81:22:34:
ac:af:c0:8b:95:af:3f:b3:19:a5:11:c6:6e:d9:18:98:d8:f7:
eb:78:89:76:31:ef:93:b8:ae:3e:e7:88:af:ea:2c:df:94:c8:
cf:7f:43:e3:e8:b0:5a:09:a3:48:e2:3e:36:05:d4:cc:dd:50:
e1:ab:cc:a9:19:b3:81:97:34:36:e7:8e:69:45:b5:5b:4a:3a:
86:b6:40:d7
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEBGQq4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZmYzNjJjMDc2NWFmYjdiOTgwNGI2ZDgxOTQ3MDAwN2IwMWYyNjJlMB4XDTIyMDQy
MjA5MTE1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzVlZmFkMDVlMTVi
Y2Y4YTYyZTA1ODZjY2RiMGIwNmY0NDI0OTI0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPdjPIv2p1b+4jWZpNYqNjSo7FWVD88aKdQGmJWtR+QKYTde
9t0ncEu36T+mcEjJJxG/RtRBJI5D2OntAqy/V0iZCi0EyWfN9kuVEpK45heLXWgR
xk/hvxHq6T1c4TtXR4VyrYkEvbjHDjHtJO7Kdj7wsXEB6vUsJZlVd7DC2IvOsbs0
3sUEnAS4hG/xVcm0C4/8DIipfNJfYF1ffIx4mfostAwj+sIcSqcqo7W3ItUICxKl
U09+rA7XIisLH7TB71PQBZlvIrFx1owjIRPVM59H9NaJCbRzybcqE/h3ZTI8vVHv
D19ppfvDzGhK/lqcUp7iy2+FoBsRFHLEiDJCzMsCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBQ1760F4VvPimLgWGzNsLBvRCSSRTAfBgNVHSMEGDAWgBRv82LAdlr7e5gE
ttgZRwAHsB8mLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JfTml3SFphLTN1WUJMYllHVWNBQjdBZkppNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjcvZTAxMTkwLTUyMDQtNDRjNS1hMTFhLWRhZmQ3NDc2M2QyMy8x
L05lLXRCZUZiejRwaTRGaHN6YkN3YjBRa2trVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcv
ZTAxMTkwLTUyMDQtNDRjNS1hMTFhLWRhZmQ3NDc2M2QyMy8xL2JfTml3SFphLTN1
WUJMYllHVWNBQjdBZkppNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwFAQCAAEwDjAMAwQEjXGQAwQGjXGAMA0EAgACMAcD
BQAqA55BMA0GCSqGSIb3DQEBCwUAA4IBAQCBFcARGbMAl7mnqr1GAVdChA3kqNIU
TlAu5AP+wOZPPCy+j4OY6M/o5L9qLfakvLca6bck2TYESZQWDY4C8BvZ0RBW0+ot
IDm20b6ecuuBryNaqvNGlHn26l1hb6BKuK2UQh5WDd0PNczbCWp+F4rhm7H3bNNY
WyLKSoemmrNbWJedhXZEK+nVFEz9fNaS49sB6vdF3+Q/qJAriH+1z0gZqL/RG2gC
cm4NyC6vMGkmF8yBIjSsr8CLla8/sxmlEcZu2RiY2PfreIl2Me+TuK4+54iv6izf
lMjPf0Pj6LBaCaNI4j42BdTM3VDhq8ypGbOBlzQ2545pRbVbSjqGtkDX
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:43 2023 by rpki-client on console-fra.rpki-client.org