Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/C-1-NBXZIr7DAmXCVWGeBwX3AyQ.roa
File: C-1-NBXZIr7DAmXCVWGeBwX3AyQ.roa (raw, json)
Hash identifier: N/Q8eV3r9MZScJCmxm2KOvnr9+0NGrMitMxafMd0M14=
Subject key identifier: 0B:ED:7E:34:15:D9:22:BE:C3:02:65:C2:55:61:9E:07:05:F7:03:24
Certificate issuer: /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial: 018210048DC4844E9885A6A9EA13266B70FF
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/C-1-NBXZIr7DAmXCVWGeBwX3AyQ.roa
Signing time: Mon 18 Jul 2022 06:35:09 +0000
ROA not before: Mon 18 Jul 2022 06:35:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12785
IP address blocks: 91.223.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:04:8d:c4:84:4e:98:85:a6:a9:ea:13:26:6b:70:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
Validity
Not Before: Jul 18 06:35:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bed7e3415d922bec30265c255619e0705f70324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:00:35:ab:e7:7e:c4:37:03:bb:71:d9:19:2d:
40:6a:6d:9c:33:8c:3d:7d:29:e0:c0:ee:b4:09:af:
58:8b:11:91:12:cc:98:1a:76:fb:37:40:d4:e7:55:
d1:19:19:80:8f:bf:87:6b:88:5c:10:27:cc:07:92:
09:aa:c4:c8:4d:2a:09:d7:cf:2b:79:21:d4:39:06:
e8:08:1d:2b:70:d4:59:f2:16:d3:5d:88:20:b1:c1:
c8:4e:62:ce:b0:92:cb:50:b3:ed:6e:4d:34:e1:5e:
8e:b4:00:53:24:25:9b:20:d0:96:51:77:db:e1:1a:
bf:e7:c5:38:d7:10:b8:9d:50:0b:71:7f:4e:22:19:
14:75:dd:ef:92:06:9d:b7:e4:a4:0a:8c:d2:9d:8c:
b3:e5:53:ca:97:f7:b2:28:c8:cf:33:cb:90:f1:1b:
75:b6:f0:39:75:79:a2:5c:a8:fe:b3:31:64:44:90:
dc:e7:9e:12:21:fa:05:fc:d3:77:a0:6a:f5:e1:59:
db:19:cd:7e:3c:6a:80:fe:9b:14:54:1d:df:c8:75:
e4:de:cc:d0:9b:4b:08:37:85:d6:fe:e4:44:ca:31:
a8:de:42:58:81:94:3f:6f:07:9c:91:01:fc:54:2a:
59:fb:85:90:8a:0a:5c:2c:c1:79:66:cb:7d:2c:d7:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:7E:34:15:D9:22:BE:C3:02:65:C2:55:61:9E:07:05:F7:03:24
X509v3 Authority Key Identifier:
keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/C-1-NBXZIr7DAmXCVWGeBwX3AyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:61:18:21:f1:59:de:4b:88:1b:d8:7f:4b:d5:8a:50:03:11:
be:14:10:ba:75:cc:8f:1d:f7:43:84:07:db:14:67:6f:d7:7b:
c2:d3:76:e9:dc:ef:5a:09:b8:b5:42:8d:e2:0f:84:c8:40:99:
0c:e1:da:c1:71:15:00:d2:01:ce:3d:38:ae:a1:24:4d:31:c8:
33:cb:0c:a8:8a:ae:58:70:91:ed:c8:36:02:c9:cd:7f:72:68:
37:6b:02:29:09:11:00:17:e4:c1:6c:b8:db:2d:c5:d6:67:3e:
c7:c3:b9:8b:ed:d3:f8:8b:47:71:f6:29:36:3f:c8:4b:f4:49:
15:3a:eb:31:af:44:a0:c1:48:3b:4b:84:b6:3c:0e:73:0c:cb:
88:87:4c:3f:c9:7c:18:e8:35:9b:25:c6:a9:39:2a:dc:40:e1:
43:cb:94:9d:67:0a:b3:1f:8f:42:61:bb:18:df:c2:5f:f6:51:
79:08:64:1a:69:cc:c0:0b:0c:e4:92:da:4d:b4:92:42:46:eb:
20:f8:45:d8:4e:af:78:23:c0:4f:04:0a:d4:2f:ca:18:b8:42:
74:7f:2c:14:59:ad:b3:28:31:0d:4d:2b:5c:cd:e0:a3:b8:aa:
3b:5d:11:9d:4a:d2:99:d3:f8:99:0c:74:a9:40:fd:de:9b:4d:
e4:f0:24:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIQBI3EhE6Yhaap6hMma3D/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg4OWM0NDEwYjQzMTcyZjQxYzhjMTRhZWE4OTliYmIy
YWRhYmQwHhcNMjIwNzE4MDYzNTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmVkN2UzNDE1ZDkyMmJlYzMwMjY1YzI1NTYxOWUwNzA1ZjcwMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQA1q+d+xDcDu3HZGS1Aam2cM4w9
fSngwO60Ca9YixGREsyYGnb7N0DU51XRGRmAj7+Ha4hcECfMB5IJqsTITSoJ188r
eSHUOQboCB0rcNRZ8hbTXYggscHITmLOsJLLULPtbk004V6OtABTJCWbINCWUXfb
4Rq/58U41xC4nVALcX9OIhkUdd3vkgadt+SkCozSnYyz5VPKl/eyKMjPM8uQ8Rt1
tvA5dXmiXKj+szFkRJDc554SIfoF/NN3oGr14VnbGc1+PGqA/psUVB3fyHXk3szQ
m0sIN4XW/uREyjGo3kJYgZQ/bweckQH8VCpZ+4WQigpcLMF5Zst9LNcgEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvtfjQV2SK+wwJlwlVhngcF9wMkMB8GA1UdIwQY
MBaAFCdIicRBC0MXL0HIwUrqiZu7Ktq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MmJhY2ItYTk1Zi00MzBiLWFmZjkt
MTlhM2VkYTA1MjRlLzEvQy0xLU5CWFpJcjdEQW1YQ1ZXR2VCd1gzQXlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82MmJhY2ItYTk1Zi00MzBiLWFmZjktMTlhM2VkYTA1MjRl
LzEvSjBpSnhFRUxReGN2UWNqQlN1cUptN3NxMnIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/mMA0G
CSqGSIb3DQEBCwUAA4IBAQB+YRgh8VneS4gb2H9L1YpQAxG+FBC6dcyPHfdDhAfb
FGdv13vC03bp3O9aCbi1Qo3iD4TIQJkM4drBcRUA0gHOPTiuoSRNMcgzywyoiq5Y
cJHtyDYCyc1/cmg3awIpCREAF+TBbLjbLcXWZz7Hw7mL7dP4i0dx9ik2P8hL9EkV
Ousxr0SgwUg7S4S2PA5zDMuIh0w/yXwY6DWbJcapOSrcQOFDy5SdZwqzH49CYbsY
38Jf9lF5CGQaaczACwzkktpNtJJCRusg+EXYTq94I8BPBArUL8oYuEJ0fywUWa2z
KDENTStczeCjuKo7XRGdStKZ0/iZDHSpQP3em03k8CT1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:14 2024 by rpki-client on console-fra.rpki-client.org