Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/NhbF6cxnfegFBNVpQJpKSfjhAY8.roa
File: NhbF6cxnfegFBNVpQJpKSfjhAY8.roa (raw, json)
Hash identifier: elbKOsPnu1i3uzzSorY0EyHaWm18XPS+91MHG+8jAds=
Subject key identifier: 36:16:C5:E9:CC:67:7D:E8:05:04:D5:69:40:9A:4A:49:F8:E1:01:8F
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 018572B3FDB8DBD331C52E86FDF5E70CF038
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/NhbF6cxnfegFBNVpQJpKSfjhAY8.roa
Signing time: Mon 02 Jan 2023 13:37:56 +0000
ROA not before: Mon 02 Jan 2023 13:37:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41728
IP address blocks: 194.37.250.0/23 maxlen: 24
194.39.78.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b3:fd:b8:db:d3:31:c5:2e:86:fd:f5:e7:0c:f0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Jan 2 13:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3616c5e9cc677de80504d569409a4a49f8e1018f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:33:d7:55:43:72:b7:28:43:c3:c3:e7:02:5f:
29:e3:f4:a1:b4:e8:a4:c0:66:f5:3c:41:f6:0d:dd:
d4:0a:1d:5d:fd:2c:46:3a:5e:30:ef:dc:7d:df:87:
e5:1a:52:7f:72:7c:35:c0:15:17:0c:93:e8:b8:24:
ea:0b:16:f9:a2:41:ed:15:d2:71:61:b2:3f:bc:d6:
f2:12:da:b3:f4:9f:8b:e1:6a:c6:b3:86:5a:2e:ef:
de:82:bf:df:35:ce:1b:51:26:c1:d3:ce:04:d8:2c:
b2:f1:1d:ab:eb:d0:b8:fd:fa:76:b2:c8:50:d6:f8:
3b:82:0c:43:a0:08:4b:dd:b6:0d:e5:a7:2f:87:00:
93:97:be:4f:ee:c9:5a:4d:1f:b9:32:70:0c:00:3e:
8f:40:4f:7e:fe:d8:50:fb:a2:ab:25:bd:2a:c0:91:
fe:5d:80:33:e2:0a:21:c2:51:35:f3:3e:6d:73:08:
72:aa:c5:83:e6:8a:6d:56:8d:dc:22:ae:f4:3b:84:
de:c8:20:51:60:2c:3c:57:1e:0d:e0:c1:96:b1:6c:
5a:cb:c2:97:f9:30:2a:b7:97:9b:11:df:4a:cc:c5:
d9:ca:82:2e:86:a7:03:ef:f1:c4:58:f6:f9:b3:e4:
1f:f4:27:f9:59:d0:11:24:06:11:e8:09:cb:1c:40:
8c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:C5:E9:CC:67:7D:E8:05:04:D5:69:40:9A:4A:49:F8:E1:01:8F
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/NhbF6cxnfegFBNVpQJpKSfjhAY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.250.0/23
194.39.78.0/23
Signature Algorithm: sha256WithRSAEncryption
40:82:bc:13:19:60:b8:3b:fd:35:0b:79:7e:8f:50:53:c2:04:
c8:a2:b2:6c:bc:92:65:5a:f6:cc:bf:10:e1:9e:f1:4f:25:72:
66:dd:12:65:47:44:7d:80:76:1c:84:1b:63:49:e2:80:bf:1c:
2c:c8:20:20:2b:3d:e5:12:f7:58:1f:dd:04:76:c3:fb:35:c5:
a1:0f:7e:67:59:a6:48:11:cd:a1:44:14:7c:66:b4:53:7e:72:
62:96:f2:3c:b6:72:1d:6c:1c:6c:b2:11:18:fc:2c:0d:94:7c:
38:3b:31:2a:2c:58:c4:80:b5:bb:0e:f1:1e:7b:6d:6b:66:63:
71:ce:b7:cf:d7:60:81:d3:b7:02:88:52:29:fc:6c:cc:28:53:
d4:c7:fa:f1:bb:c6:27:a4:d7:d9:43:55:0d:7d:3b:66:c9:99:
78:9a:a7:a3:49:32:0a:8e:53:6a:36:16:3c:9e:e9:6e:92:fe:
43:e6:64:9a:43:f1:91:1b:99:03:dc:8f:a8:c4:6f:09:bd:77:
09:47:be:ca:bd:37:ba:cf:67:b4:7c:a6:9a:af:c8:34:c5:c6:
df:48:82:54:f3:23:01:13:20:28:59:7b:60:43:4a:82:b8:94:
f9:5b:f4:5d:98:cf:a9:07:4f:78:5a:00:9d:48:70:14:22:84:
5d:6c:03:06
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVys/2429MxxS6G/fXnDPA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw
MDg3ZDQwHhcNMjMwMTAyMTMzNzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjE2YzVlOWNjNjc3ZGU4MDUwNGQ1Njk0MDlhNGE0OWY4ZTEwMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDPXVUNytyhDw8PnAl8p4/ShtOik
wGb1PEH2Dd3UCh1d/SxGOl4w79x934flGlJ/cnw1wBUXDJPouCTqCxb5okHtFdJx
YbI/vNbyEtqz9J+L4WrGs4ZaLu/egr/fNc4bUSbB084E2Cyy8R2r69C4/fp2sshQ
1vg7ggxDoAhL3bYN5acvhwCTl75P7slaTR+5MnAMAD6PQE9+/thQ+6KrJb0qwJH+
XYAz4gohwlE18z5tcwhyqsWD5optVo3cIq70O4TeyCBRYCw8Vx4N4MGWsWxay8KX
+TAqt5ebEd9KzMXZyoIuhqcD7/HEWPb5s+Qf9Cf5WdARJAYR6AnLHECM6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDYWxenMZ33oBQTVaUCaSkn44QGPMB8GA1UdIwQY
MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt
ZTVmY2ViZGFhN2YyLzEvTmhiRjZjeG5mZWdGQk5WcFFKcEtTZmpoQVk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy
LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwiX6AwQB
widOMA0GCSqGSIb3DQEBCwUAA4IBAQBAgrwTGWC4O/01C3l+j1BTwgTIorJsvJJl
WvbMvxDhnvFPJXJm3RJlR0R9gHYchBtjSeKAvxwsyCAgKz3lEvdYH90EdsP7NcWh
D35nWaZIEc2hRBR8ZrRTfnJilvI8tnIdbBxsshEY/CwNlHw4OzEqLFjEgLW7DvEe
e21rZmNxzrfP12CB07cCiFIp/GzMKFPUx/rxu8YnpNfZQ1UNfTtmyZl4mqejSTIK
jlNqNhY8nulukv5D5mSaQ/GRG5kD3I+oxG8JvXcJR77KvTe6z2e0fKaar8g0xcbf
SIJU8yMBEyAoWXtgQ0qCuJT5W/RdmM+pB094WgCdSHAUIoRdbAMG
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:12 2025 by rpki-client