Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NA5mytCOP_Nyi4ndYMd65Jxx0bY.roa
File: NA5mytCOP_Nyi4ndYMd65Jxx0bY.roa (raw, json)
Hash identifier: JCw7uFzAipIc7ulYBQmwjtArnGa7EtQXWUh5xux2pzc=
Subject key identifier: 34:0E:66:CA:D0:8E:3F:F3:72:8B:89:DD:60:C7:7A:E4:9C:71:D1:B6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C8C7633AC5C87846D0613BF8E78C179D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NA5mytCOP_Nyi4ndYMd65Jxx0bY.roa
Signing time: Wed 30 Nov 2022 13:43:40 +0000
ROA not before: Wed 30 Nov 2022 13:43:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12396
IP address blocks: 212.109.175.0/24 maxlen: 24
195.191.18.0/23 maxlen: 24
195.49.192.0/21 maxlen: 21
194.247.168.0/23 maxlen: 23
91.219.124.0/22 maxlen: 22
195.8.34.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:c7:63:3a:c5:c8:78:46:d0:61:3b:f8:e7:8c:17:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 13:43:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=340e66cad08e3ff3728b89dd60c77ae49c71d1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:41:bd:d8:f5:16:4a:6c:b0:f9:a8:88:79:
ab:0e:e0:06:7e:8b:1f:60:c2:f7:4b:62:5c:15:89:
57:df:9f:4c:a6:b9:a1:e8:42:b1:6a:20:82:f5:8a:
79:ec:d5:20:8a:6a:87:8f:72:6d:07:17:40:67:79:
d4:96:83:6d:81:db:88:10:7b:c2:b7:38:c8:44:15:
db:13:e8:71:c7:22:0d:04:01:ad:c3:d2:ea:1a:4c:
75:a5:ed:22:57:34:8d:36:94:a6:24:6e:c0:b8:b1:
1e:17:30:3e:2f:f9:ff:4c:a6:a8:02:74:e1:59:69:
71:f3:94:60:a2:3b:e1:32:11:f0:83:53:d7:58:9b:
41:3a:21:41:c9:dd:31:82:e8:79:8d:b9:fc:e2:07:
1f:b0:8d:09:82:dc:27:da:89:66:68:06:b8:56:3e:
b1:8d:6d:39:ee:46:f9:23:2a:f4:04:c2:37:12:e8:
d7:da:65:14:85:fc:f4:b5:f7:b0:c1:d8:24:ed:ef:
e4:6c:e2:18:a6:aa:6e:78:a3:57:d8:be:80:8f:f4:
dd:84:bc:5a:f7:82:aa:52:c8:40:32:42:b0:7e:c8:
bc:55:9b:1f:10:e3:ae:f6:c0:5b:c8:c8:88:7a:d4:
24:d9:74:20:ff:c4:54:87:f4:a5:05:ce:87:e9:0c:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:66:CA:D0:8E:3F:F3:72:8B:89:DD:60:C7:7A:E4:9C:71:D1:B6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NA5mytCOP_Nyi4ndYMd65Jxx0bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.124.0/22
194.247.168.0/23
195.8.34.0/23
195.49.192.0/21
195.191.18.0/23
212.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b3:c6:df:21:10:d1:58:35:65:db:10:cb:f8:a2:22:35:52:
33:4c:46:d6:47:d1:69:a4:d8:1c:7b:d9:7d:86:85:84:c8:dc:
b8:c0:a5:25:63:23:cd:1e:a1:1a:0e:49:e5:b3:ce:50:0c:c6:
1f:bd:d1:ff:c3:23:66:10:56:e0:22:b4:d4:0f:68:cd:4e:7f:
d0:f8:b6:58:f2:ff:75:7d:26:06:7e:3f:0e:2a:4a:93:b4:5c:
0e:67:3d:9d:0e:4f:11:98:01:08:bd:e1:a6:52:f2:67:fb:c6:
f3:63:4b:72:a7:e2:e3:a3:60:32:87:c2:86:98:ba:31:41:54:
ae:5a:ba:b9:c8:0c:73:c2:c3:3d:ac:3c:87:5b:c0:8f:2b:3e:
e7:40:05:e0:5b:0c:7b:50:aa:02:a6:8a:6f:62:5c:dc:fe:13:
b8:9c:47:bb:74:75:0c:2b:a2:30:89:87:d9:33:b1:34:6a:1e:
38:2e:ea:5b:96:d1:6d:83:04:aa:b7:a0:b0:93:e6:e0:d1:ba:
db:f8:67:93:8b:d2:c7:61:f5:d2:d0:c8:71:b6:56:43:06:31:
a0:d6:c6:5d:c0:02:7b:fc:7a:96:a8:a5:78:5e:9a:36:7e:16:
fb:c8:cf:b1:57:f6:9a:eb:9f:a5:bc:33:ff:d6:d2:d1:7b:3e:
a2:bc:db:c0
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYTIx2M6xch4RtBhO/jnjBedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTMwMTM0MzQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDBlNjZjYWQwOGUzZmYzNzI4Yjg5ZGQ2MGM3N2FlNDljNzFkMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptlBvdj1FkpssPmoiHmrDuAGfosf
YML3S2JcFYlX359Mprmh6EKxaiCC9Yp57NUgimqHj3JtBxdAZ3nUloNtgduIEHvC
tzjIRBXbE+hxxyINBAGtw9LqGkx1pe0iVzSNNpSmJG7AuLEeFzA+L/n/TKaoAnTh
WWlx85RgojvhMhHwg1PXWJtBOiFByd0xguh5jbn84gcfsI0Jgtwn2olmaAa4Vj6x
jW057kb5Iyr0BMI3EujX2mUUhfz0tfewwdgk7e/kbOIYpqpueKNX2L6Aj/TdhLxa
94KqUshAMkKwfsi8VZsfEOOu9sBbyMiIetQk2XQg/8RUh/SlBc6H6QxXkQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDQOZsrQjj/zcouJ3WDHeuSccdG2MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvTkE1bXl0Q09QX055aTRuZFlNZDY1Snh4MGJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCW9t8AwQB
wveoAwQBwwgiAwQDwzHAAwQBw78SAwQA1G2vMA0GCSqGSIb3DQEBCwUAA4IBAQCM
s8bfIRDRWDVl2xDL+KIiNVIzTEbWR9FppNgce9l9hoWEyNy4wKUlYyPNHqEaDknl
s85QDMYfvdH/wyNmEFbgIrTUD2jNTn/Q+LZY8v91fSYGfj8OKkqTtFwOZz2dDk8R
mAEIveGmUvJn+8bzY0typ+Ljo2Ayh8KGmLoxQVSuWrq5yAxzwsM9rDyHW8CPKz7n
QAXgWwx7UKoCpopvYlzc/hO4nEe7dHUMK6IwiYfZM7E0ah44LupbltFtgwSqt6Cw
k+bg0brb+GeTi9LHYfXS0MhxtlZDBjGg1sZdwAJ7/HqWqKV4Xpo2fhb7yM+xV/aa
65+lvDP/1tLRez6ivNvA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:25 2024 by rpki-client on console-fra.rpki-client.org