Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/nl3x2LJPk8xnfN0kCozqeHKN2Eg.roa
File: nl3x2LJPk8xnfN0kCozqeHKN2Eg.roa (raw, json)
Hash identifier: ItUZsvUYyDykWEgIQshUkBEFLQUi4p1SfKfjABQ54pc=
Subject key identifier: 9E:5D:F1:D8:B2:4F:93:CC:67:7C:DD:24:0A:8C:EA:78:72:8D:D8:48
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 0556689C
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/nl3x2LJPk8xnfN0kCozqeHKN2Eg.roa
Signing time: Sat 01 Jan 2022 03:02:21 +0000
ROA not before: Sat 01 Jan 2022 03:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12085
IP address blocks: 176.121.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89548956 (0x556689c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 1 03:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e5df1d8b24f93cc677cdd240a8cea78728dd848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:dd:c5:e7:2b:aa:45:a8:10:2e:a6:bb:ce:
d3:6e:b0:32:52:2a:6d:d1:04:9a:fe:4a:5a:a3:5b:
ce:85:88:a0:2c:88:d8:64:f4:bf:9e:81:ae:1e:6f:
51:7d:a0:51:7e:6a:e6:91:e8:9a:ce:55:88:b2:a3:
8e:03:bd:a9:2a:42:05:fa:e7:b7:5a:5f:3c:a9:ef:
25:6d:f8:bb:dd:e1:6b:c2:d6:44:8a:c8:07:39:78:
04:74:22:4b:aa:c8:e4:5c:4e:e6:b3:44:f1:76:be:
25:7c:78:99:38:25:64:91:f6:64:67:23:99:d8:7a:
f0:36:fc:10:89:ff:63:ed:93:ff:e4:5e:8d:21:72:
8f:33:42:ce:3f:e9:d5:80:9a:f0:4f:d1:3e:1f:bd:
a3:12:44:81:32:b6:1b:9a:b8:2b:c1:c8:c3:b3:2e:
d5:b9:03:61:81:8f:29:ed:25:2b:1a:2d:07:1e:e5:
44:4d:b0:d9:ee:ec:cb:6e:0a:42:3c:ea:2e:1b:a7:
9a:0f:8d:85:1c:ba:83:a2:0a:17:ad:4c:9b:62:57:
76:a8:f8:9f:df:60:57:cd:d4:ec:c2:c7:24:a8:58:
30:37:cf:7e:b4:85:95:25:35:54:49:bb:6d:0b:5a:
c1:26:ee:33:7e:11:ca:9b:81:50:b2:3a:8f:b5:37:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5D:F1:D8:B2:4F:93:CC:67:7C:DD:24:0A:8C:EA:78:72:8D:D8:48
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/nl3x2LJPk8xnfN0kCozqeHKN2Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.88.0/24
Signature Algorithm: sha256WithRSAEncryption
69:2c:a0:da:a2:8f:f7:2c:15:54:b5:82:12:b9:68:50:f7:36:
48:09:41:57:e0:77:a1:b5:05:b7:f8:7e:3f:d5:59:2f:5d:08:
3e:03:75:84:e9:80:8e:b8:bd:db:29:3d:fc:d8:ad:66:dc:5d:
ee:c4:08:7c:4c:8e:71:f5:0b:15:7e:02:16:16:8c:f2:aa:72:
ff:b0:45:9f:19:94:84:56:2a:bc:bc:aa:91:5d:5f:57:87:ba:
1c:bb:e4:51:be:da:83:b5:04:22:a5:6c:11:eb:3e:fa:3f:6f:
27:02:25:21:8a:9b:96:e1:ac:83:42:3c:da:7b:62:7f:2e:47:
89:a1:d8:e2:9f:c2:4c:67:07:47:60:51:cb:fe:e8:49:76:66:
ad:01:89:09:d8:8c:db:d0:8d:e5:19:93:c6:de:cd:f8:d3:b6:
a9:b9:11:1a:29:7c:16:4e:f2:2f:b1:a0:18:e4:de:b4:6d:44:
41:f4:8f:dd:04:05:fa:25:7d:dd:57:23:95:5c:0f:83:c7:02:
be:e4:c9:71:11:9a:8e:7b:27:a3:e5:11:45:0b:d9:f9:b2:91:
9d:d7:87:24:03:cc:b6:f9:28:6d:8f:8d:9a:9b:85:6b:f1:bb:
3a:8f:89:37:c7:6c:34:1c:fb:5b:18:d4:8c:f1:e4:fc:b5:f2:
96:68:fd:4a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBVZonDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Mzg5ZTcwMzViMDhlMTgxYTM0MWYzN2VkYTczNDNkMjNmMWNhZmE0MB4XDTIyMDEw
MTAzMDIyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWU1ZGYxZDhiMjRm
OTNjYzY3N2NkZDI0MGE4Y2VhNzg3MjhkZDg0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJCx3cXnK6pFqBAuprvO026wMlIqbdEEmv5KWqNbzoWIoCyI
2GT0v56Brh5vUX2gUX5q5pHoms5ViLKjjgO9qSpCBfrnt1pfPKnvJW34u93ha8LW
RIrIBzl4BHQiS6rI5FxO5rNE8Xa+JXx4mTglZJH2ZGcjmdh68Db8EIn/Y+2T/+Re
jSFyjzNCzj/p1YCa8E/RPh+9oxJEgTK2G5q4K8HIw7Mu1bkDYYGPKe0lKxotBx7l
RE2w2e7sy24KQjzqLhunmg+NhRy6g6IKF61Mm2JXdqj4n99gV83U7MLHJKhYMDfP
frSFlSU1VEm7bQtawSbuM34RypuBULI6j7U3HM0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSeXfHYsk+TzGd83SQKjOp4co3YSDAfBgNVHSMEGDAWgBSjiecDWwjhgaNB
837ac0PSPxyvpDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L280bm5BMXNJNFlHalFmTi0ybk5EMGo4Y3I2US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvZjA1M2NkLTFkNzktNDNhMS05YWFiLTBlNzI0MTZiNGRjNy8x
L25sM3gyTEpQazh4bmZOMGtDb3pxZUhLTjJFZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
ZjA1M2NkLTFkNzktNDNhMS05YWFiLTBlNzI0MTZiNGRjNy8xL280bm5BMXNJNFlH
alFmTi0ybk5EMGo4Y3I2US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB5WDANBgkqhkiG9w0BAQsFAAOC
AQEAaSyg2qKP9ywVVLWCErloUPc2SAlBV+B3obUFt/h+P9VZL10IPgN1hOmAjri9
2yk9/NitZtxd7sQIfEyOcfULFX4CFhaM8qpy/7BFnxmUhFYqvLyqkV1fV4e6HLvk
Ub7ag7UEIqVsEes++j9vJwIlIYqbluGsg0I82ntify5HiaHY4p/CTGcHR2BRy/7o
SXZmrQGJCdiM29CN5RmTxt7N+NO2qbkRGil8Fk7yL7GgGOTetG1EQfSP3QQF+iV9
3VcjlVwPg8cCvuTJcRGajnsno+URRQvZ+bKRndeHJAPMtvkobY+NmpuFa/G7Oo+J
N8dsNBz7WxjUjPHk/LXylmj9Sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:30 2024 by rpki-client on console-ams.rpki-client.org