Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/nltW77CE3Vb705ge9sikjPXZ1E8.roa
File: nltW77CE3Vb705ge9sikjPXZ1E8.roa (raw, json)
Hash identifier: 2HAowU73bOUr+3YcXXgpdHd+INepdU01bWUHx6+qRCs=
Subject key identifier: 9E:5B:56:EF:B0:84:DD:56:FB:D3:98:1E:F6:C8:A4:8C:F5:D9:D4:4F
Certificate issuer: /CN=8226a9974102ba582217188be6d49d8776d3bebb
Certificate serial: 050DD32C
Authority key identifier: 82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/nltW77CE3Vb705ge9sikjPXZ1E8.roa
Signing time: Sat 01 Jan 2022 05:55:42 +0000
ROA not before: Sat 01 Jan 2022 05:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204382
IP address blocks: 185.250.176.0/22 maxlen: 22
2a0c:1040::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84792108 (0x50dd32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8226a9974102ba582217188be6d49d8776d3bebb
Validity
Not Before: Jan 1 05:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e5b56efb084dd56fbd3981ef6c8a48cf5d9d44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:e8:38:7b:84:dd:3c:75:86:66:d1:10:56:
9f:0b:56:f6:eb:e7:d9:4d:bf:b7:5c:92:a2:72:d5:
71:4e:5c:a3:9c:07:ed:6d:14:17:b4:85:22:f4:6c:
4d:fc:2c:01:7a:26:6d:bc:fb:85:88:11:b7:80:4a:
09:11:e9:b2:eb:5f:86:b1:37:e1:de:ec:07:08:88:
d3:5a:ff:ba:19:02:d6:3f:40:53:dd:eb:80:fa:6d:
04:1d:b4:b7:16:a4:d6:eb:4a:12:76:e4:bc:94:ee:
b2:d0:f0:62:8c:42:cf:43:2c:d9:18:d6:37:8f:85:
22:ba:0c:2d:f7:d8:d8:70:75:8b:43:c0:3e:ec:b8:
fc:3f:50:07:37:79:72:30:60:36:0f:4f:cc:10:62:
37:f6:50:65:af:ff:39:00:1d:3a:c2:ad:53:f7:ad:
d3:22:31:41:f4:a4:a6:29:6a:88:42:3b:0a:c0:74:
7d:15:7a:9b:64:f0:30:4b:e7:0d:ee:fb:5d:da:57:
8d:5c:4e:12:a8:a2:70:42:5b:2d:be:e6:70:f0:b3:
c5:63:c3:0d:a9:b4:dc:a8:e7:04:4d:b9:61:77:b8:
51:3c:bd:92:b3:78:47:3e:de:25:0c:06:78:71:3b:
de:c3:16:38:3d:af:56:b3:27:ae:75:74:05:44:c1:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5B:56:EF:B0:84:DD:56:FB:D3:98:1E:F6:C8:A4:8C:F5:D9:D4:4F
X509v3 Authority Key Identifier:
keyid:82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/nltW77CE3Vb705ge9sikjPXZ1E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.176.0/22
IPv6:
2a0c:1040::/29
Signature Algorithm: sha256WithRSAEncryption
68:79:51:3a:c9:78:87:d5:2e:63:d7:b6:90:73:c8:ee:3e:94:
d4:05:28:61:7c:91:8e:ab:60:c5:e1:e8:65:a2:6f:22:48:57:
9c:3d:98:72:8a:a7:54:34:c3:bf:60:6f:f8:b3:f0:d0:ca:3a:
79:de:97:2c:b2:a7:2c:fc:5d:7e:6d:dd:35:9c:6b:a1:38:7d:
2e:17:0f:2c:21:9a:3d:00:33:09:93:4c:13:30:79:76:50:a9:
6a:c2:0a:ed:f8:fc:7c:30:8a:da:4c:a5:56:7d:b0:58:df:e1:
a9:65:cd:9b:16:48:f2:2f:0a:fc:c1:fe:c0:c8:5a:ba:cf:af:
7f:ad:c0:ac:ab:be:ea:e6:a5:b8:9b:5e:27:3a:3e:1c:63:53:
df:d5:0c:e5:06:20:5f:9d:24:ef:99:1a:4a:64:7a:67:f9:64:
01:28:5a:d0:e4:87:0b:be:c9:e2:f0:f9:b8:6a:c1:b7:c9:2c:
16:8d:84:76:03:a2:85:ca:6f:14:79:06:fc:c3:c6:c2:92:46:
22:ee:1b:c5:4b:dc:3a:55:e9:72:65:8c:8e:cb:82:d1:8a:5f:
ae:6a:3b:82:c7:96:ef:77:d1:97:48:01:f7:1b:ac:af:30:04:
7b:64:81:fb:72:51:0f:fb:68:2c:9e:94:69:45:40:69:4c:7b:
13:39:c5:c1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBQ3TLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MjI2YTk5NzQxMDJiYTU4MjIxNzE4OGJlNmQ0OWQ4Nzc2ZDNiZWJiMB4XDTIyMDEw
MTA1NTU0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWU1YjU2ZWZiMDg0
ZGQ1NmZiZDM5ODFlZjZjOGE0OGNmNWQ5ZDQ0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALba6Dh7hN08dYZm0RBWnwtW9uvn2U2/t1ySonLVcU5co5wH
7W0UF7SFIvRsTfwsAXombbz7hYgRt4BKCRHpsutfhrE34d7sBwiI01r/uhkC1j9A
U93rgPptBB20txak1utKEnbkvJTustDwYoxCz0Ms2RjWN4+FIroMLffY2HB1i0PA
Puy4/D9QBzd5cjBgNg9PzBBiN/ZQZa//OQAdOsKtU/et0yIxQfSkpilqiEI7CsB0
fRV6m2TwMEvnDe77XdpXjVxOEqiicEJbLb7mcPCzxWPDDam03KjnBE25YXe4UTy9
krN4Rz7eJQwGeHE73sMWOD2vVrMnrnV0BUTBo/0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSeW1bvsITdVvvTmB72yKSM9dnUTzAfBgNVHSMEGDAWgBSCJqmXQQK6WCIX
GIvm1J2HdtO+uzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dpYXBsMEVDdWxnaUZ4aUw1dFNkaDNiVHZycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjEvMzU0NzdmLTgwZDAtNGVhNC1iYmRlLTc2N2I3MmViNDA3Yi8x
L25sdFc3N0NFM1ZiNzA1Z2U5c2lralBYWjFFOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEv
MzU0NzdmLTgwZDAtNGVhNC1iYmRlLTc2N2I3MmViNDA3Yi8xL2dpYXBsMEVDdWxn
aUZ4aUw1dFNkaDNiVHZycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArn6sDANBAIAAjAHAwUDKgwQQDAN
BgkqhkiG9w0BAQsFAAOCAQEAaHlROsl4h9UuY9e2kHPI7j6U1AUoYXyRjqtgxeHo
ZaJvIkhXnD2YcoqnVDTDv2Bv+LPw0Mo6ed6XLLKnLPxdfm3dNZxroTh9LhcPLCGa
PQAzCZNMEzB5dlCpasIK7fj8fDCK2kylVn2wWN/hqWXNmxZI8i8K/MH+wMhaus+v
f63ArKu+6ualuJteJzo+HGNT39UM5QYgX50k75kaSmR6Z/lkASha0OSHC77J4vD5
uGrBt8ksFo2EdgOihcpvFHkG/MPGwpJGIu4bxUvcOlXpcmWMjsuC0Ypfrmo7gseW
73fRl0gB9xusrzAEe2SB+3JRD/toLJ6UaUVAaUx7EznFwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:15 2024 by rpki-client on console-fra.rpki-client.org