Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/NXsy15LwR22P5y_8Darlv4NoqMg.roa
File: NXsy15LwR22P5y_8Darlv4NoqMg.roa (raw, json)
Hash identifier: 3zHxxPUIkGCLjkq3BhAcCigWstCOT5w1KsfmeLFVzqs=
Subject key identifier: 35:7B:32:D7:92:F0:47:6D:8F:E7:2F:FC:0D:AA:E5:BF:83:68:A8:C8
Certificate issuer: /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial: 09B41228
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/NXsy15LwR22P5y_8Darlv4NoqMg.roa
Signing time: Sat 01 Jan 2022 04:59:06 +0000
ROA not before: Sat 01 Jan 2022 04:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 185.254.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162796072 (0x9b41228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Validity
Not Before: Jan 1 04:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=357b32d792f0476d8fe72ffc0daae5bf8368a8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:6d:cb:f2:97:ac:78:a6:5a:8e:4d:92:cb:
bc:bd:e1:dc:82:63:98:af:79:cd:42:12:d8:3b:c5:
e7:1f:c0:37:a1:b5:31:04:3c:71:06:1e:6c:55:83:
ba:b1:14:58:76:39:2c:de:f4:11:a9:a1:58:db:7a:
88:b2:af:7b:b2:67:90:8c:a0:61:8e:dc:b9:44:60:
d4:12:bb:11:83:03:71:14:45:e2:1d:cf:b0:80:d9:
5e:74:1a:2c:b6:54:6d:13:cf:c6:29:07:a7:9f:cf:
bf:ef:09:fa:71:83:5c:eb:1f:34:9a:0c:5d:d8:82:
72:ff:b2:14:f7:5a:15:1e:f4:ab:36:e1:97:41:96:
68:5d:6c:fc:18:d1:39:5e:03:a1:21:00:a1:82:70:
cd:ee:17:3a:f7:76:43:c0:4c:72:ce:32:0f:f1:9a:
09:9f:be:b7:f8:d2:cf:c8:c6:3a:ba:17:4d:b1:76:
89:1d:18:f3:b1:13:af:63:a4:c3:0b:f8:06:13:34:
0d:72:77:cb:17:84:f4:48:7b:35:23:99:70:89:5e:
a1:be:74:c9:5d:81:a6:55:10:e2:0b:45:e9:b6:e5:
6b:de:2a:69:f7:07:48:87:77:45:51:13:2b:63:08:
e7:8c:1e:97:17:27:38:00:49:5d:3a:77:82:7b:39:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7B:32:D7:92:F0:47:6D:8F:E7:2F:FC:0D:AA:E5:BF:83:68:A8:C8
X509v3 Authority Key Identifier:
keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/NXsy15LwR22P5y_8Darlv4NoqMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.172.0/22
Signature Algorithm: sha256WithRSAEncryption
38:01:97:71:2c:21:3f:d5:fe:0e:46:26:ef:32:05:08:b5:99:
2a:ec:ba:f0:d6:76:cf:c6:8a:87:05:c1:93:82:61:6f:e6:93:
df:65:d4:35:9e:31:b6:7e:a1:5d:d3:2b:0a:1a:42:e5:d7:f6:
2a:86:2f:02:d6:2d:0d:91:fb:02:f8:a8:ba:0b:d1:98:e1:0d:
32:b3:d5:4b:89:af:67:0c:d6:13:51:2b:d8:08:93:fb:5d:76:
8d:55:6b:cc:1f:56:f2:53:96:ba:df:76:46:37:67:1f:b4:52:
ba:52:96:a9:8f:30:84:5d:cc:5a:d5:aa:21:be:0e:03:78:18:
b5:20:83:4d:ac:5e:9a:55:1d:c6:50:54:c9:9e:4d:1f:12:e2:
4d:de:29:f2:6b:fe:5c:22:2c:c4:27:79:90:b6:f0:4a:f4:fc:
96:a7:92:1b:b0:e5:22:f3:54:8a:01:39:6e:bd:47:b5:10:5a:
51:20:a7:fc:f2:67:76:78:7e:95:ae:da:9b:47:83:49:80:1b:
7a:87:75:80:48:40:0c:2b:1b:ec:11:bc:e6:7e:75:70:11:b9:
1a:94:59:72:8e:c2:e3:54:18:37:d0:a1:3c:12:ca:71:c7:ad:
08:8b:0b:9b:f2:bc:e0:7f:2a:fb:c9:f0:20:d6:98:2e:93:fb:
36:ce:ef:eb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECbQSKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZjViYzQ5ZDVmMDFhMjM1YWY5Mjg5Y2Y0OTI2YWZmZWY3YWY5MmIwMB4XDTIyMDEw
MTA0NTkwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzU3YjMyZDc5MmYw
NDc2ZDhmZTcyZmZjMGRhYWU1YmY4MzY4YThjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKudbcvyl6x4plqOTZLLvL3h3IJjmK95zUIS2DvF5x/AN6G1
MQQ8cQYebFWDurEUWHY5LN70EamhWNt6iLKve7JnkIygYY7cuURg1BK7EYMDcRRF
4h3PsIDZXnQaLLZUbRPPxikHp5/Pv+8J+nGDXOsfNJoMXdiCcv+yFPdaFR70qzbh
l0GWaF1s/BjROV4DoSEAoYJwze4XOvd2Q8BMcs4yD/GaCZ++t/jSz8jGOroXTbF2
iR0Y87ETr2Okwwv4BhM0DXJ3yxeE9Eh7NSOZcIleob50yV2BplUQ4gtF6bbla94q
afcHSId3RVETK2MI54welxcnOABJXTp3gns5VFsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ1ezLXkvBHbY/nL/wNquW/g2ioyDAfBgNVHSMEGDAWgBSvW8SdXwGiNa+S
ic9JJq/+96+SsDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3IxdkVuVjhCb2pXdmtvblBTU2F2X3ZldmtyQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvZjJmYmQ4LWQ2ZTEtNDdhZC1hYTIxLTE0N2U0NTcyODczYS8x
L05Yc3kxNUx3UjIyUDV5XzhEYXJsdjROb3FNZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
ZjJmYmQ4LWQ2ZTEtNDdhZC1hYTIxLTE0N2U0NTcyODczYS8xL3IxdkVuVjhCb2pX
dmtvblBTU2F2X3ZldmtyQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn+rDANBgkqhkiG9w0BAQsFAAOC
AQEAOAGXcSwhP9X+DkYm7zIFCLWZKuy68NZ2z8aKhwXBk4Jhb+aT32XUNZ4xtn6h
XdMrChpC5df2KoYvAtYtDZH7AviougvRmOENMrPVS4mvZwzWE1Er2AiT+112jVVr
zB9W8lOWut92RjdnH7RSulKWqY8whF3MWtWqIb4OA3gYtSCDTaxemlUdxlBUyZ5N
HxLiTd4p8mv+XCIsxCd5kLbwSvT8lqeSG7DlIvNUigE5br1HtRBaUSCn/PJndnh+
la7am0eDSYAbeod1gEhADCsb7BG85n51cBG5GpRZco7C41QYN9ChPBLKccetCIsL
m/K84H8q+8nwINaYLpP7Ns7v6w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-ams.rpki-client.org