Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/nbiQi5L3agD2VrQn6OlXhrCsdb8.roa
File: nbiQi5L3agD2VrQn6OlXhrCsdb8.roa (raw, json)
Hash identifier: Nk2t19iGZatJeMr2x4bNr/jifzwsSrF23+qV1uWPg68=
Subject key identifier: 9D:B8:90:8B:92:F7:6A:00:F6:56:B4:27:E8:E9:57:86:B0:AC:75:BF
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 01856E6F97020A49E714F47FCC2FC6857A6E
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/nbiQi5L3agD2VrQn6OlXhrCsdb8.roa
Signing time: Sun 01 Jan 2023 17:44:44 +0000
ROA not before: Sun 01 Jan 2023 17:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60111
IP address blocks: 185.143.252.0/22 maxlen: 22
2a07:39c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:97:02:0a:49:e7:14:f4:7f:cc:2f:c6:85:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Jan 1 17:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db8908b92f76a00f656b427e8e95786b0ac75bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:08:ee:24:9f:07:85:35:fa:93:89:47:4d:
a1:a3:b2:57:4e:0d:15:e7:0d:90:06:c9:1c:46:82:
5d:50:1b:e5:94:83:59:4d:18:0b:ad:79:31:c8:bd:
14:ff:5e:c4:a1:22:e1:a3:6f:d6:4e:52:bf:7d:8c:
5b:c8:3c:cf:20:43:04:53:2f:bf:87:17:2a:47:b3:
28:a0:46:09:6c:bc:be:e3:7e:3e:f6:c3:8e:18:5e:
24:f7:44:c2:81:3c:ae:30:a7:52:40:b7:3b:cc:6f:
46:f5:da:18:ea:73:07:7a:e7:70:c4:0a:3c:c3:69:
52:a0:0a:7b:6e:fa:08:ed:c5:b0:e0:98:78:95:31:
93:61:8e:1b:23:e2:0a:50:8c:1e:7c:20:ce:d6:1f:
80:30:39:a6:c9:a3:38:8e:89:32:90:8c:3e:74:d9:
5b:6c:73:f0:37:06:47:a6:34:da:1b:a9:21:99:a5:
ee:37:2b:52:f9:7e:65:d6:26:35:f2:0d:ec:60:e2:
f9:76:fa:35:dd:61:c5:a0:37:65:61:cb:ce:69:a7:
0f:92:f8:55:1b:57:ce:4d:9f:68:01:93:bf:88:c6:
05:20:1e:08:ff:6e:57:d3:6a:05:93:56:ad:a6:72:
73:fd:bb:02:0a:c2:ae:19:d0:dd:ea:f9:20:cf:5b:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:90:8B:92:F7:6A:00:F6:56:B4:27:E8:E9:57:86:B0:AC:75:BF
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/nbiQi5L3agD2VrQn6OlXhrCsdb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.252.0/22
IPv6:
2a07:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:af:40:6d:80:6d:8c:b5:51:89:07:c7:60:28:b1:3f:9e:13:
fd:d7:4a:d3:20:ba:92:e2:64:6d:f3:03:10:8a:ae:51:28:a4:
37:ed:9d:bb:47:ce:65:79:7c:f3:3a:16:f3:59:e3:cb:6a:e4:
79:51:61:b4:74:c7:3d:01:55:dc:68:33:a5:63:92:a9:72:05:
39:c2:5f:38:c5:ba:8a:3a:94:94:f3:8b:05:f6:1f:d5:29:7a:
09:8e:03:7b:03:ac:c4:7b:e9:07:32:5a:3c:2d:00:ea:6b:8a:
a5:02:50:17:47:f6:33:5d:9c:79:0c:09:4b:d6:c3:fa:12:c4:
a1:1e:8d:19:9b:4c:0a:4f:c9:d8:df:84:1e:c3:9f:ab:c5:27:
9a:41:1e:f7:33:a9:ad:48:7f:35:bf:a3:b5:c6:0a:35:eb:f4:
95:6b:a8:04:31:62:c6:0b:d2:81:68:3e:6c:5c:bb:b1:c5:29:
7e:07:60:5e:05:e6:78:e9:f1:8f:67:3b:ca:1f:92:1a:5a:61:
28:a6:35:0b:15:11:d5:6e:d4:e8:5c:71:c5:ee:c5:b6:97:35:
c6:f2:27:72:31:d6:46:be:7b:34:35:e6:28:a2:d4:a1:5a:ea:
f7:af:ae:45:db:1d:b4:00:52:5a:b4:d4:79:cd:54:0f:3f:b5:
cf:33:ec:c1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVub5cCCknnFPR/zC/GhXpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMWNlZjZmOWU5ZWRjNDVlM2NkMjhlZjQwMjUxOTc5NTJk
NDYwZTkwHhcNMjMwMTAxMTc0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGI4OTA4YjkyZjc2YTAwZjY1NmI0MjdlOGU5NTc4NmIwYWM3NWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+wI7iSfB4U1+pOJR02ho7JXTg0V
5w2QBskcRoJdUBvllINZTRgLrXkxyL0U/17EoSLho2/WTlK/fYxbyDzPIEMEUy+/
hxcqR7MooEYJbLy+434+9sOOGF4k90TCgTyuMKdSQLc7zG9G9doY6nMHeudwxAo8
w2lSoAp7bvoI7cWw4Jh4lTGTYY4bI+IKUIwefCDO1h+AMDmmyaM4jokykIw+dNlb
bHPwNwZHpjTaG6khmaXuNytS+X5l1iY18g3sYOL5dvo13WHFoDdlYcvOaacPkvhV
G1fOTZ9oAZO/iMYFIB4I/25X02oFk1atpnJz/bsCCsKuGdDd6vkgz1v7FQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ24kIuS92oA9la0J+jpV4awrHW/MB8GA1UdIwQY
MBaAFLoc72+entxF480o70AlGXlS1GDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yMWQ2NjMtNjg3NC00ODljLWFiOWUt
ZDljYTAzZTY2ZmZiLzEvbmJpUWk1TDNhZ0QyVnJRbjZPbFhockNzZGI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yMWQ2NjMtNjg3NC00ODljLWFiOWUtZDljYTAzZTY2ZmZi
LzEvdWh6dmI1NmUzRVhqelNqdlFDVVplVkxVWU9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY/8MA0E
AgACMAcDBQMqBznAMA0GCSqGSIb3DQEBCwUAA4IBAQBLr0BtgG2MtVGJB8dgKLE/
nhP910rTILqS4mRt8wMQiq5RKKQ37Z27R85leXzzOhbzWePLauR5UWG0dMc9AVXc
aDOlY5KpcgU5wl84xbqKOpSU84sF9h/VKXoJjgN7A6zEe+kHMlo8LQDqa4qlAlAX
R/YzXZx5DAlL1sP6EsShHo0Zm0wKT8nY34Qew5+rxSeaQR73M6mtSH81v6O1xgo1
6/SVa6gEMWLGC9KBaD5sXLuxxSl+B2BeBeZ46fGPZzvKH5IaWmEopjULFRHVbtTo
XHHF7sW2lzXG8idyMdZGvns0NeYootShWur3r65F2x20AFJatNR5zVQPP7XPM+zB
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:38 2025 by rpki-client