Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NlyB_lntHR_eqAWDPz8GoY1W1os.roa
File: NlyB_lntHR_eqAWDPz8GoY1W1os.roa (raw, json)
Hash identifier: 2aZd6KKZ7eZ4IBTrgSJij+2y3WLBGVLGLRB66uARBAA=
Subject key identifier: 36:5C:81:FE:59:ED:1D:1F:DE:A8:05:83:3F:3F:06:A1:8D:56:D6:8B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018414C10CB1D1E28B99AAB93ED49000D75B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NlyB_lntHR_eqAWDPz8GoY1W1os.roa
Signing time: Wed 26 Oct 2022 14:45:06 +0000
ROA not before: Wed 26 Oct 2022 14:45:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43673
IP address blocks: 82.196.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:c1:0c:b1:d1:e2:8b:99:aa:b9:3e:d4:90:00:d7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 14:45:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=365c81fe59ed1d1fdea805833f3f06a18d56d68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:53:d6:cf:ee:2b:51:07:83:8a:42:9b:9c:49:
33:b4:81:cd:55:3b:a7:6f:1d:95:55:48:e5:f9:45:
83:52:3e:b5:58:17:1e:7b:07:54:16:43:e1:c0:85:
b5:50:34:81:17:d9:eb:e9:80:9f:52:f2:eb:a1:d6:
59:e7:96:2d:98:d5:ff:e4:dc:6d:41:6f:58:0b:2d:
5b:eb:5c:5c:ff:8e:b4:96:c3:10:b9:0a:dc:4b:3b:
76:05:37:5f:8c:fb:14:e3:fc:ef:c7:ee:b2:24:47:
40:3b:00:93:4c:7a:f6:21:b2:f4:3b:2d:42:aa:7f:
cc:55:55:37:d4:2d:fd:67:81:a1:58:00:94:ae:f1:
0c:c9:38:52:53:05:b3:1a:52:d3:8c:d3:57:02:7a:
72:e1:5c:44:a9:f0:d0:d0:3f:88:e8:a8:39:df:01:
06:b9:83:6f:28:dc:48:f2:b0:fe:ad:d0:f3:14:dc:
b4:01:ee:14:53:f4:4f:e5:9b:98:85:88:5e:ff:73:
31:c1:ab:bc:e9:dd:52:5d:fc:8b:07:ff:c4:52:4e:
fb:c5:5b:17:9d:df:ef:c5:b5:65:a0:50:1e:9c:56:
0a:ee:87:3b:94:81:0b:4b:a3:c7:66:33:c3:7d:07:
05:c3:66:80:d4:31:8e:81:d8:4e:29:0e:66:fb:57:
b2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5C:81:FE:59:ED:1D:1F:DE:A8:05:83:3F:3F:06:A1:8D:56:D6:8B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/NlyB_lntHR_eqAWDPz8GoY1W1os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.67.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:7f:23:28:46:51:ce:a2:85:68:e9:2d:c7:27:f9:72:1d:14:
b3:1e:34:ab:ab:d4:b5:ad:47:ad:23:81:a6:c9:44:ed:e3:ce:
67:10:7b:75:37:d9:e6:db:af:1a:7e:9d:f2:22:ee:e8:27:13:
f6:d7:96:0f:f4:68:48:d1:b5:58:f3:03:30:f6:fa:e3:63:59:
0a:29:dd:1f:f6:95:f2:37:18:4b:1b:dc:da:8c:e5:4f:f4:4d:
b2:8b:42:15:83:82:0a:e7:7d:de:d5:52:42:07:1e:66:fe:89:
75:2c:35:f8:ef:ee:4b:dd:f6:5c:53:2c:8e:29:9a:85:ac:43:
0c:b0:a6:cd:7c:8b:9b:af:a9:66:02:20:2d:97:07:12:94:14:
0b:b3:cb:6e:93:21:e5:00:73:db:89:83:f0:d6:46:5e:da:79:
69:74:6d:99:6b:73:4c:8c:18:39:ea:9d:e2:2a:c0:b6:1d:9b:
be:b0:08:01:63:0f:b7:2f:e9:e5:d1:6f:42:83:39:74:15:05:
82:ed:6c:be:60:c8:e1:6a:56:38:45:22:2f:47:1b:98:41:5a:
4b:40:55:03:14:4d:fe:00:1d:8a:4d:af:7f:69:65:5c:d3:84:
c7:7d:8c:ec:61:50:13:56:0f:c2:6d:66:d1:2b:bf:7f:2e:81:
20:fb:ec:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQUwQyx0eKLmaq5PtSQANdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI2MTQ0NTA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjVjODFmZTU5ZWQxZDFmZGVhODA1ODMzZjNmMDZhMThkNTZkNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VPWz+4rUQeDikKbnEkztIHNVTun
bx2VVUjl+UWDUj61WBceewdUFkPhwIW1UDSBF9nr6YCfUvLrodZZ55YtmNX/5Nxt
QW9YCy1b61xc/460lsMQuQrcSzt2BTdfjPsU4/zvx+6yJEdAOwCTTHr2IbL0Oy1C
qn/MVVU31C39Z4GhWACUrvEMyThSUwWzGlLTjNNXAnpy4VxEqfDQ0D+I6Kg53wEG
uYNvKNxI8rD+rdDzFNy0Ae4UU/RP5ZuYhYhe/3Mxwau86d1SXfyLB//EUk77xVsX
nd/vxbVloFAenFYK7oc7lIELS6PHZjPDfQcFw2aA1DGOgdhOKQ5m+1eySwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZcgf5Z7R0f3qgFgz8/BqGNVtaLMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvTmx5Ql9sbnRIUl9lcUFXRFB6OEdvWTFXMW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsRDMA0G
CSqGSIb3DQEBCwUAA4IBAQA8fyMoRlHOooVo6S3HJ/lyHRSzHjSrq9S1rUetI4Gm
yUTt485nEHt1N9nm268afp3yIu7oJxP215YP9GhI0bVY8wMw9vrjY1kKKd0f9pXy
NxhLG9zajOVP9E2yi0IVg4IK533e1VJCBx5m/ol1LDX47+5L3fZcUyyOKZqFrEMM
sKbNfIubr6lmAiAtlwcSlBQLs8tukyHlAHPbiYPw1kZe2nlpdG2Za3NMjBg56p3i
KsC2HZu+sAgBYw+3L+nl0W9Cgzl0FQWC7Wy+YMjhalY4RSIvRxuYQVpLQFUDFE3+
AB2KTa9/aWVc04THfYzsYVATVg/CbWbRK79/LoEg++xn
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:26:00 2025 by rpki-client