Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/2NPcmYcMdoYuTlfbVMsAqkvrMNE.roa
File: 2NPcmYcMdoYuTlfbVMsAqkvrMNE.roa (raw, json)
Hash identifier: Nmj5vvUSYrpd3wkDa/7bNiFWoETyQ4wsTSOaY6GDZL0=
Subject key identifier: D8:D3:DC:99:87:0C:76:86:2E:4E:57:DB:54:CB:00:AA:4B:EB:30:D1
Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Certificate serial: 0182F3FD089EAB79EBD5E2C81BCDA6C39BF1
Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/2NPcmYcMdoYuTlfbVMsAqkvrMNE.roa
Signing time: Wed 31 Aug 2022 13:00:22 +0000
ROA not before: Wed 31 Aug 2022 13:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205806
IP address blocks: 156.67.152.0/22 maxlen: 22
156.67.152.0/21 maxlen: 21
156.67.148.0/22 maxlen: 22
156.67.156.0/22 maxlen: 22
156.67.144.0/21 maxlen: 21
156.67.144.0/22 maxlen: 22
156.67.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:fd:08:9e:ab:79:eb:d5:e2:c8:1b:cd:a6:c3:9b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8
Validity
Not Before: Aug 31 13:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8d3dc99870c76862e4e57db54cb00aa4beb30d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:92:d7:52:5d:59:95:24:01:08:4c:41:5e:
16:d9:7a:61:10:76:a6:38:e9:a8:e3:ef:b3:0f:40:
ac:8c:29:f2:26:f3:b8:61:42:61:d9:dc:6b:ce:ee:
2f:de:84:85:13:fa:b2:a6:a7:54:3c:55:63:dd:08:
e5:b0:c3:ba:dc:41:fd:3f:80:8c:0a:16:5d:f0:9d:
4b:b7:2f:27:2a:75:4c:bb:22:f9:6a:a6:64:c5:a4:
12:1d:d7:8d:20:b3:a3:db:83:4f:76:2c:0a:7a:6b:
6c:14:24:63:51:ac:6c:f7:15:eb:b4:f2:ab:5c:62:
e4:7f:8b:c3:91:59:19:10:ea:6d:2f:6f:36:0a:8f:
a6:bb:fc:30:65:67:ea:9b:fe:2d:19:5a:16:40:57:
cb:7b:02:7e:01:45:cc:38:98:e3:4a:cd:e9:16:97:
8b:7a:06:8d:52:4b:ee:33:56:2b:d7:d4:d1:45:ec:
3e:69:45:07:98:94:7d:5d:db:0d:5a:f6:80:18:48:
c4:bc:d8:d5:c6:e2:81:00:a6:0a:af:4d:20:be:ee:
23:6a:fc:d5:84:11:c4:2d:27:d4:20:3d:bf:da:de:
a0:4a:76:6c:7e:5a:f1:6b:e0:df:43:e8:60:04:af:
2e:70:25:bb:5e:54:db:63:dc:bf:63:1b:b0:63:e2:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:DC:99:87:0C:76:86:2E:4E:57:DB:54:CB:00:AA:4B:EB:30:D1
X509v3 Authority Key Identifier:
keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/2NPcmYcMdoYuTlfbVMsAqkvrMNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
16:d3:5a:6f:e8:da:c0:08:55:4d:8d:86:71:3a:99:eb:8e:2b:
ed:31:b6:60:c6:b5:ed:3d:4f:14:39:19:59:01:73:ba:3c:fb:
11:73:0f:2b:15:04:db:16:54:24:9f:01:07:a7:a8:52:0c:f2:
ac:fc:e5:1c:ec:19:8d:7f:77:ee:30:ed:5c:a6:75:3f:4a:ec:
1d:92:d9:cb:05:4d:d0:08:6f:90:f8:0c:c7:f8:cb:e2:fe:6c:
4b:84:8f:ab:04:eb:f2:ef:6e:69:0d:b2:66:b0:9a:44:ae:38:
dc:1e:08:88:55:63:b9:7c:a8:16:50:c8:8f:8a:0f:9e:0b:23:
3f:15:e4:bf:61:41:57:33:f9:dd:4e:2e:9a:48:c4:7d:61:a3:
c3:e7:d5:96:6a:0c:fa:49:52:0d:40:55:5c:72:24:b8:71:9e:
38:85:20:e8:fb:ee:be:8d:d4:06:b3:27:05:71:66:46:c1:5e:
fc:55:26:f5:13:eb:92:24:b3:60:71:32:c4:31:78:f3:b9:9c:
ce:76:58:2a:28:de:35:c4:c1:78:ee:7d:85:4e:b9:2d:67:e9:
19:83:66:7a:35:a6:72:62:77:9f:38:52:4c:2f:49:0e:a3:48:
36:bf:8d:90:05:a7:d6:f4:36:75:99:72:81:48:07:17:5f:5c:
40:e4:93:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLz/Qieq3nr1eLIG82mw5vxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMWFjMzY5Yzk0NTY5MTRhMTJlMDJkZmZjOGRkNzk5NzRl
YjFlZjgwHhcNMjIwODMxMTMwMDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGQzZGM5OTg3MGM3Njg2MmU0ZTU3ZGI1NGNiMDBhYTRiZWIzMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6OS11JdWZUkAQhMQV4W2XphEHam
OOmo4++zD0CsjCnyJvO4YUJh2dxrzu4v3oSFE/qypqdUPFVj3QjlsMO63EH9P4CM
ChZd8J1Lty8nKnVMuyL5aqZkxaQSHdeNILOj24NPdiwKemtsFCRjUaxs9xXrtPKr
XGLkf4vDkVkZEOptL282Co+mu/wwZWfqm/4tGVoWQFfLewJ+AUXMOJjjSs3pFpeL
egaNUkvuM1Yr19TRRew+aUUHmJR9XdsNWvaAGEjEvNjVxuKBAKYKr00gvu4javzV
hBHELSfUID2/2t6gSnZsflrxa+DfQ+hgBK8ucCW7XlTbY9y/YxuwY+I8OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjT3JmHDHaGLk5X21TLAKpL6zDRMB8GA1UdIwQY
MBaAFJ4aw2nJRWkUoS4C3/yN15l06x74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTct
ZDY4YzU3ZGI0Y2FlLzEvMk5QY21ZY01kb1l1VGxmYlZNc0Fxa3ZyTU5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTctZDY4YzU3ZGI0Y2Fl
LzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnEOQMA0G
CSqGSIb3DQEBCwUAA4IBAQAW01pv6NrACFVNjYZxOpnrjivtMbZgxrXtPU8UORlZ
AXO6PPsRcw8rFQTbFlQknwEHp6hSDPKs/OUc7BmNf3fuMO1cpnU/SuwdktnLBU3Q
CG+Q+AzH+Mvi/mxLhI+rBOvy725pDbJmsJpErjjcHgiIVWO5fKgWUMiPig+eCyM/
FeS/YUFXM/ndTi6aSMR9YaPD59WWagz6SVINQFVcciS4cZ44hSDo++6+jdQGsycF
cWZGwV78VSb1E+uSJLNgcTLEMXjzuZzOdlgqKN41xMF47n2FTrktZ+kZg2Z6NaZy
YnefOFJML0kOo0g2v42QBafW9DZ1mXKBSAcXX1xA5JP4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:30 2024 by rpki-client on console-fra.rpki-client.org