Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/nuUqNZAMvG5OzfNp5BJcut05Il4.roa
File: nuUqNZAMvG5OzfNp5BJcut05Il4.roa (raw, json)
Hash identifier: DQYSFQwuPGR2IMOvX75sVNiymHGeeUiGeBAwexqQucA=
Subject key identifier: 9E:E5:2A:35:90:0C:BC:6E:4E:CD:F3:69:E4:12:5C:BA:DD:39:22:5E
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0A184966
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/nuUqNZAMvG5OzfNp5BJcut05Il4.roa
Signing time: Thu 28 Apr 2022 07:53:02 +0000
ROA not before: Thu 28 Apr 2022 07:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39483
IP address blocks: 82.119.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169363814 (0xa184966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Apr 28 07:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ee52a35900cbc6e4ecdf369e4125cbadd39225e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:06:cd:58:29:2e:0a:d0:fd:3f:d1:b3:7e:
26:f8:9c:28:28:15:91:29:de:a9:36:00:38:cd:30:
2e:15:84:5c:1e:40:09:6a:c6:2d:5e:3e:d1:fe:c7:
f1:33:90:4a:f9:e4:61:33:54:ac:5f:fa:1e:73:46:
34:39:98:b1:ac:86:05:31:52:b7:af:13:72:33:c4:
1b:e2:28:ba:34:ae:38:45:73:8a:96:20:b0:b3:db:
d2:8b:7b:7b:9b:cb:d6:da:c4:18:a8:13:67:27:b9:
7c:c9:5e:01:87:36:0c:e5:c4:3e:fa:08:3e:71:58:
05:b7:25:c2:7d:0a:45:9a:88:c4:62:af:05:c9:95:
2a:09:55:8b:06:e9:8a:d0:52:4b:80:0c:69:71:18:
77:9b:05:ab:f6:73:fe:bf:02:a4:81:08:f8:3f:1b:
c7:af:1e:80:d5:83:6c:99:b3:37:1f:0b:42:32:d3:
69:34:a0:37:31:67:ba:a2:7d:fa:d4:54:c6:22:fc:
00:2a:b1:9d:48:6e:71:f8:3b:07:f6:81:b3:24:47:
eb:fe:3f:3d:b7:89:95:be:33:83:d0:e4:d3:3e:78:
37:e9:3f:3e:af:ea:ce:e7:7c:84:12:0a:5b:f2:c2:
99:4f:5d:00:9e:cd:5d:0a:97:30:6e:95:1d:e2:8d:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E5:2A:35:90:0C:BC:6E:4E:CD:F3:69:E4:12:5C:BA:DD:39:22:5E
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/nuUqNZAMvG5OzfNp5BJcut05Il4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.82.0/24
Signature Algorithm: sha256WithRSAEncryption
63:38:d6:54:81:f6:27:d3:09:1d:4f:72:f6:f4:89:cc:96:81:
25:34:6c:e5:e7:04:3e:cc:14:ea:91:58:20:9c:28:7c:ac:b6:
de:cd:49:d7:56:82:46:17:58:fc:0c:a3:71:c4:71:bf:27:c6:
69:44:c6:db:ed:83:8c:ce:15:89:86:cd:5b:2b:1a:d9:48:9c:
8f:43:8e:a7:ad:1d:59:50:8f:03:27:93:63:63:bc:fa:b6:b5:
9d:a3:a5:66:bb:37:1d:42:4c:cb:37:75:f4:fb:ec:b6:b0:fd:
0c:3b:7d:06:53:c6:f6:af:36:91:8f:09:b5:d5:2c:03:67:07:
b0:72:8e:95:87:33:43:d8:b7:71:2e:ae:13:f0:5a:8d:4b:35:
54:4d:53:09:ef:e9:da:2c:eb:18:70:a7:89:4d:39:68:0d:d9:
8c:61:05:c9:a3:de:68:3a:74:e2:93:d7:85:1d:d0:7e:4c:cd:
0c:eb:4a:5e:7e:c0:b3:a2:42:fb:7d:e2:e4:4e:54:7e:83:44:
92:5d:77:04:55:85:00:13:b5:89:be:d8:70:e5:cd:64:8a:af:
65:c5:f0:3a:98:75:bf:43:19:c4:20:c7:28:d8:4d:0f:bc:0c:
32:85:b7:3e:7a:92:54:8f:e2:9b:2d:93:28:03:8f:87:fb:0b:
89:c0:a1:b4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEChhJZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MTA0YTQwODIxYzQxNzZjYzQyZTI1NWVmNmMxNzI3NDczYzNmMDBhMB4XDTIyMDQy
ODA3NTMwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWVlNTJhMzU5MDBj
YmM2ZTRlY2RmMzY5ZTQxMjVjYmFkZDM5MjI1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM2gBs1YKS4K0P0/0bN+JvicKCgVkSneqTYAOM0wLhWEXB5A
CWrGLV4+0f7H8TOQSvnkYTNUrF/6HnNGNDmYsayGBTFSt68TcjPEG+IoujSuOEVz
ipYgsLPb0ot7e5vL1trEGKgTZye5fMleAYc2DOXEPvoIPnFYBbclwn0KRZqIxGKv
BcmVKglViwbpitBSS4AMaXEYd5sFq/Zz/r8CpIEI+D8bx68egNWDbJmzNx8LQjLT
aTSgNzFnuqJ9+tRUxiL8ACqxnUhucfg7B/aBsyRH6/4/PbeJlb4zg9Dk0z54N+k/
Pq/qzud8hBIKW/LCmU9dAJ7NXQqXMG6VHeKNzH0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSe5So1kAy8bk7N82nkEly63TkiXjAfBgNVHSMEGDAWgBRBBKQIIcQXbMQu
JV72wXJ0c8PwCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FRU2tDQ0hFRjJ6RUxpVmU5c0Z5ZEhQRDhBby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvOTY5OTYyLTEyZDMtNDFiMi1hYjQzLWIyN2Q2ZTI3OGUxOC8x
L251VXFOWkFNdkc1T3pmTnA1QkpjdXQwNUlsNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
OTY5OTYyLTEyZDMtNDFiMi1hYjQzLWIyN2Q2ZTI3OGUxOC8xL1FRU2tDQ0hFRjJ6
RUxpVmU5c0Z5ZEhQRDhBby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFJ3UjANBgkqhkiG9w0BAQsFAAOC
AQEAYzjWVIH2J9MJHU9y9vSJzJaBJTRs5ecEPswU6pFYIJwofKy23s1J11aCRhdY
/AyjccRxvyfGaUTG2+2DjM4ViYbNWysa2Uicj0OOp60dWVCPAyeTY2O8+ra1naOl
Zrs3HUJMyzd19PvstrD9DDt9BlPG9q82kY8JtdUsA2cHsHKOlYczQ9i3cS6uE/Ba
jUs1VE1TCe/p2izrGHCniU05aA3ZjGEFyaPeaDp04pPXhR3QfkzNDOtKXn7As6JC
+33i5E5UfoNEkl13BFWFABO1ib7YcOXNZIqvZcXwOph1v0MZxCDHKNhND7wMMoW3
PnqSVI/imy2TKAOPh/sLicChtA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:50 2025 by rpki-client