Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Nd1x-tXEFTmKsLYfiw00mWV_esY.roa
File: Nd1x-tXEFTmKsLYfiw00mWV_esY.roa (raw, json)
Hash identifier: sgAFUdbTCQeL/u9XNozmApfm/DQKk4Ed1LM/2vb3D5I=
Subject key identifier: 35:DD:71:FA:D5:C4:15:39:8A:B0:B6:1F:8B:0D:34:99:65:7F:7A:C6
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 134CD13C
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Nd1x-tXEFTmKsLYfiw00mWV_esY.roa
Signing time: Sat 01 Jan 2022 05:54:03 +0000
ROA not before: Sat 01 Jan 2022 05:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42688
IP address blocks: 37.157.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323801404 (0x134cd13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 1 05:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35dd71fad5c415398ab0b61f8b0d3499657f7ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:ae:a7:45:c5:ec:2d:d5:fd:64:24:07:9e:
13:d4:00:6a:5e:99:f0:d8:14:25:e5:4b:6a:9c:91:
67:7a:28:08:a2:e2:51:81:dd:af:3d:68:36:06:3f:
90:c0:25:33:c7:a2:fb:10:9e:4f:b1:28:f3:89:e0:
02:aa:e2:a7:70:fb:e8:f4:b8:d8:ab:cb:6b:12:37:
be:3a:db:d8:da:bc:cf:22:87:a1:5e:ff:8a:73:20:
fe:7f:db:82:a2:29:7a:4b:43:96:52:13:42:7a:66:
ad:94:fd:91:8e:4c:14:53:e7:99:ba:10:0a:d3:19:
2d:bd:98:62:56:a5:81:68:38:f9:15:c8:cd:1d:73:
30:2e:63:6c:db:99:25:d2:a3:93:71:14:b5:43:73:
06:9d:0d:20:f3:01:8d:b8:06:19:83:26:7c:8a:8b:
d0:d0:54:99:b5:12:9b:dc:57:22:9e:d1:3b:d6:46:
3d:a3:4e:94:a3:93:1f:95:74:aa:40:0b:e3:05:14:
2c:e4:f4:44:5c:5f:f3:cf:cc:7b:03:f7:19:57:26:
e7:1e:16:cc:e4:91:0a:4d:7f:53:6d:4a:df:61:23:
9a:08:8e:b6:d7:2e:35:8f:8a:4a:c3:e6:c9:63:d2:
a3:b5:c5:eb:ce:07:61:6e:30:a7:94:a1:58:12:d7:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:71:FA:D5:C4:15:39:8A:B0:B6:1F:8B:0D:34:99:65:7F:7A:C6
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Nd1x-tXEFTmKsLYfiw00mWV_esY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fc:de:36:f9:7c:b3:24:42:f9:8d:ee:e2:11:78:08:89:3c:
a0:29:8b:0c:ba:60:f3:4e:78:0b:a6:e1:be:f6:e5:1c:92:07:
fa:85:a4:65:a7:a2:6f:30:85:ba:bd:99:39:59:1c:d1:f6:87:
e8:76:69:eb:f4:bf:49:e2:ea:4f:05:9a:5a:ae:82:ed:66:72:
fc:e2:c7:1e:c0:8f:3e:34:11:31:d2:b3:c9:bf:08:18:86:4a:
e2:23:dc:42:9a:08:d9:b5:7e:c7:d0:0a:d7:e7:b6:e5:f3:17:
0a:fa:1b:66:ca:93:05:13:df:8f:e0:17:22:33:f1:be:2d:ef:
ec:19:e0:e4:65:e8:d7:7e:17:d0:93:9b:41:f4:a3:89:cf:4d:
36:61:3c:21:44:ef:2e:68:5b:10:ae:43:4f:53:d2:d2:53:43:
18:2d:2a:1d:33:aa:6c:5c:ec:5c:af:7f:27:b3:87:99:cf:66:
c9:44:77:e4:53:38:0e:d5:05:d3:18:3d:69:5d:b1:ca:0c:b5:
a8:1c:5a:eb:63:e1:f8:fc:a5:61:95:00:f9:f9:32:df:41:a8:
77:ed:2b:b6:be:d0:16:c4:84:06:88:e4:96:45:d6:50:4a:fd:
f8:2f:b3:c5:b2:2a:7d:1f:42:d6:ae:7a:9c:1a:f0:42:0b:22:
9a:07:e0:16
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEE0zRPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YzkwYzM1NmUyODY0ZjQzODk0ODU3NDQzNTU1ZDhiNWMwMzUyODE5MB4XDTIyMDEw
MTA1NTQwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzVkZDcxZmFkNWM0
MTUzOThhYjBiNjFmOGIwZDM0OTk2NTdmN2FjNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJA2rqdFxewt1f1kJAeeE9QAal6Z8NgUJeVLapyRZ3ooCKLi
UYHdrz1oNgY/kMAlM8ei+xCeT7Eo84ngAqrip3D76PS42KvLaxI3vjrb2Nq8zyKH
oV7/inMg/n/bgqIpektDllITQnpmrZT9kY5MFFPnmboQCtMZLb2YYlalgWg4+RXI
zR1zMC5jbNuZJdKjk3EUtUNzBp0NIPMBjbgGGYMmfIqL0NBUmbUSm9xXIp7RO9ZG
PaNOlKOTH5V0qkAL4wUULOT0RFxf88/MewP3GVcm5x4WzOSRCk1/U21K32EjmgiO
ttcuNY+KSsPmyWPSo7XF684HYW4wp5ShWBLXS5kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ13XH61cQVOYqwth+LDTSZZX96xjAfBgNVHSMEGDAWgBQMkMNW4oZPQ4lI
V0Q1Vdi1wDUoGTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RKRERWdUtHVDBPSlNGZEVOVlhZdGNBMUtCay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvYWM1YTU2LTE2M2EtNDk3YS05NTQ3LWUzNzk5YWRlOWRmZS8x
L05kMXgtdFhFRlRtS3NMWWZpdzAwbVdWX2VzWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
YWM1YTU2LTE2M2EtNDk3YS05NTQ3LWUzNzk5YWRlOWRmZS8xL0RKRERWdUtHVDBP
SlNGZEVOVlhZdGNBMUtCay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACWd0DANBgkqhkiG9w0BAQsFAAOC
AQEApfzeNvl8syRC+Y3u4hF4CIk8oCmLDLpg8054C6bhvvblHJIH+oWkZaeibzCF
ur2ZOVkc0faH6HZp6/S/SeLqTwWaWq6C7WZy/OLHHsCPPjQRMdKzyb8IGIZK4iPc
QpoI2bV+x9AK1+e25fMXCvobZsqTBRPfj+AXIjPxvi3v7Bng5GXo134X0JObQfSj
ic9NNmE8IUTvLmhbEK5DT1PS0lNDGC0qHTOqbFzsXK9/J7OHmc9myUR35FM4DtUF
0xg9aV2xygy1qBxa62Ph+PylYZUA+fky30God+0rtr7QFsSEBojklkXWUEr9+C+z
xbIqfR9C1q56nBrwQgsimgfgFg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:55 2025 by rpki-client