Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/nqNkeBkq_PWYENk3e4sZpwoM3WY.roa
File: nqNkeBkq_PWYENk3e4sZpwoM3WY.roa (raw, json)
Hash identifier: 0oP97GRnGxiVmtaS4krvj4MSJL1X/uqu2imMw1ThuAo=
Subject key identifier: 9E:A3:64:78:19:2A:FC:F5:98:10:D9:37:7B:8B:19:A7:0A:0C:DD:66
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0184572DB4AEBCC43DE2327DF3E68965B376
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/nqNkeBkq_PWYENk3e4sZpwoM3WY.roa
Signing time: Tue 08 Nov 2022 12:18:43 +0000
ROA not before: Tue 08 Nov 2022 12:18:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47507
IP address blocks: 212.104.160.0/19 maxlen: 24
86.105.234.0/24 maxlen: 24
193.91.0.0/24 maxlen: 24
193.91.10.0/24 maxlen: 24
185.43.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:2d:b4:ae:bc:c4:3d:e2:32:7d:f3:e6:89:65:b3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Nov 8 12:18:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ea36478192afcf59810d9377b8b19a70a0cdd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:38:b5:40:01:ca:a5:8e:8e:ec:e4:fd:72:
8d:91:e8:45:e6:b9:8a:1a:e1:1e:c4:46:0a:fc:ff:
fb:bc:c5:15:1c:7b:11:2e:cf:36:3f:68:0a:b7:8b:
2e:26:c1:43:56:8e:e1:20:15:00:37:50:91:e8:db:
d9:08:bc:34:81:48:24:f0:20:27:e7:da:2e:ff:c4:
f3:f4:b4:4d:0a:36:8e:e8:24:ca:59:f7:0e:6f:56:
df:11:4c:63:a3:e5:75:27:40:db:fe:e5:f8:66:34:
ed:cc:76:cb:23:bc:a3:39:b6:c3:be:28:5e:ed:1f:
37:8a:0f:8a:3a:42:78:d7:38:db:6e:76:08:e5:0e:
a7:7f:26:1c:05:83:eb:81:42:a9:b5:2a:b3:be:4c:
7c:d8:28:5d:62:98:46:1c:97:2f:cb:75:7b:55:3c:
ab:b5:7c:35:61:0d:8d:ce:64:04:25:ed:f0:58:95:
8a:47:9a:15:80:3a:21:55:8c:b7:59:45:a0:28:5c:
2c:4c:db:27:84:fa:d0:f3:51:12:b2:30:14:d9:9f:
e5:74:81:6d:63:fe:ef:57:44:7a:fe:00:1a:76:fb:
16:2c:2b:e5:c0:e8:d7:a5:19:4c:38:44:a2:ba:54:
08:18:0f:39:b9:a6:93:7a:39:a4:47:36:22:37:6d:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:64:78:19:2A:FC:F5:98:10:D9:37:7B:8B:19:A7:0A:0C:DD:66
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/nqNkeBkq_PWYENk3e4sZpwoM3WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.234.0/24
185.43.252.0/22
193.91.0.0/24
193.91.10.0/24
212.104.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:47:d5:65:f2:2c:51:c2:e4:1b:1a:16:91:b5:63:57:fe:4d:
cc:68:24:6b:5d:fe:65:86:de:66:ef:e2:0b:35:dc:6b:36:14:
4c:72:67:33:ea:f5:6d:36:c6:c6:86:9c:b6:89:ca:37:9b:7b:
4e:d0:02:8b:6a:d7:37:db:2a:b3:47:f5:3d:56:cc:62:a7:7b:
e9:a4:bc:ab:bf:64:ab:22:e0:6b:35:9f:7e:55:38:4f:4a:66:
ee:af:48:89:ac:78:b1:31:25:73:1f:db:a4:23:a8:2c:69:ac:
26:5b:37:e6:ca:12:0e:bf:4d:f1:b2:ab:77:49:be:8f:7f:64:
fa:fd:55:0d:c4:24:7f:8b:99:2c:6a:ea:11:c1:a9:72:df:1f:
c0:1a:5e:30:96:00:c8:2d:69:23:39:82:53:d5:2a:15:14:f6:
3b:87:26:76:45:f9:bb:f4:f6:35:e9:b5:cd:2e:90:e2:27:9b:
f3:44:ba:bd:29:1c:aa:3e:24:5c:9f:97:2b:05:18:8d:98:93:
75:fe:7a:9d:2b:e1:bc:22:45:e5:14:bb:ce:11:c3:65:69:8c:
c9:92:3a:86:64:03:09:cb:a2:80:2f:ab:f2:51:23:5c:8e:8d:
ab:6f:04:38:48:e2:c2:b0:bb:53:8a:7f:41:3e:4a:62:c2:5b:
0f:27:c7:e7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYRXLbSuvMQ94jJ98+aJZbN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMTA4MTIxODQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWEzNjQ3ODE5MmFmY2Y1OTgxMGQ5Mzc3YjhiMTlhNzBhMGNkZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcw4tUAByqWOjuzk/XKNkehF5rmK
GuEexEYK/P/7vMUVHHsRLs82P2gKt4suJsFDVo7hIBUAN1CR6NvZCLw0gUgk8CAn
59ou/8Tz9LRNCjaO6CTKWfcOb1bfEUxjo+V1J0Db/uX4ZjTtzHbLI7yjObbDvihe
7R83ig+KOkJ41zjbbnYI5Q6nfyYcBYPrgUKptSqzvkx82ChdYphGHJcvy3V7VTyr
tXw1YQ2NzmQEJe3wWJWKR5oVgDohVYy3WUWgKFwsTNsnhPrQ81ESsjAU2Z/ldIFt
Y/7vV0R6/gAadvsWLCvlwOjXpRlMOESiulQIGA85uaaTejmkRzYiN20t0wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJ6jZHgZKvz1mBDZN3uLGacKDN1mMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvbnFOa2VCa3FfUFdZRU5rM2U0c1pwd29NM1dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVmnqAwQC
uSv8AwQAwVsAAwQAwVsKAwQF1GigMA0GCSqGSIb3DQEBCwUAA4IBAQCjR9Vl8ixR
wuQbGhaRtWNX/k3MaCRrXf5lht5m7+ILNdxrNhRMcmcz6vVtNsbGhpy2ico3m3tO
0AKLatc32yqzR/U9Vsxip3vppLyrv2SrIuBrNZ9+VThPSmbur0iJrHixMSVzH9uk
I6gsaawmWzfmyhIOv03xsqt3Sb6Pf2T6/VUNxCR/i5ksauoRwaly3x/AGl4wlgDI
LWkjOYJT1SoVFPY7hyZ2Rfm79PY16bXNLpDiJ5vzRLq9KRyqPiRcn5crBRiNmJN1
/nqdK+G8IkXlFLvOEcNlaYzJkjqGZAMJy6KAL6vyUSNcjo2rbwQ4SOLCsLtTin9B
PkpiwlsPJ8fn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org