Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/nMN99qP-E1UVP67k1LW0NPX2iA8.roa
File: nMN99qP-E1UVP67k1LW0NPX2iA8.roa (raw, json)
Hash identifier: HpA3IhnrvKhxZ4Aks+fNtNt7vbn8KSD/oCCUBoSAdhk=
Subject key identifier: 9C:C3:7D:F6:A3:FE:13:55:15:3F:AE:E4:D4:B5:B4:34:F5:F6:88:0F
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 01856D2F359604F205B64FAC61640D5FFC31
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/nMN99qP-E1UVP67k1LW0NPX2iA8.roa
Signing time: Sun 01 Jan 2023 11:54:48 +0000
ROA not before: Sun 01 Jan 2023 11:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59891
IP address blocks: 185.150.31.0/24 maxlen: 24
185.150.28.0/24 maxlen: 24
185.150.29.0/24 maxlen: 24
185.150.30.0/24 maxlen: 24
185.32.124.0/24 maxlen: 24
185.32.125.0/24 maxlen: 24
185.32.127.0/24 maxlen: 24
185.32.126.0/24 maxlen: 24
2a07:6d81::/32 maxlen: 32
2a07:6d85::/32 maxlen: 32
2a00:c1e2::/32 maxlen: 32
2a07:6d84::/32 maxlen: 32
2a00:c1e5::/32 maxlen: 32
2a07:6d82::/32 maxlen: 32
2a00:c1e1::/32 maxlen: 32
2a00:c1e4::/32 maxlen: 32
2a00:c1e7::/32 maxlen: 32
2a07:6d83::/32 maxlen: 32
2a07:6d87::/32 maxlen: 32
2a07:6d80::/32 maxlen: 32
2a00:c1e6::/32 maxlen: 32
2a00:c1e3::/32 maxlen: 32
2a07:6d86::/32 maxlen: 32
2a00:c1e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:35:96:04:f2:05:b6:4f:ac:61:64:0d:5f:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Jan 1 11:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cc37df6a3fe1355153faee4d4b5b434f5f6880f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:e4:94:78:06:b1:14:33:46:89:2e:05:e8:
12:71:fa:83:28:0a:a5:71:7d:c3:13:f3:aa:72:c5:
65:03:8b:37:9a:bf:23:7c:bb:09:4e:c6:0d:8b:d7:
95:f0:76:af:2a:fc:73:49:72:e7:06:db:03:f6:bf:
65:78:7b:56:f3:90:09:f0:5d:30:7f:87:b6:08:fe:
ed:e0:40:8c:ec:f8:82:02:25:d1:eb:41:d4:4b:0e:
c6:0f:a8:87:0b:06:02:82:49:1b:01:bc:f4:bf:61:
11:8c:b9:e9:c9:c9:61:41:7c:02:bb:31:17:94:8a:
a8:46:cd:ff:b8:f8:fe:6e:4e:dd:01:a0:ca:a2:5a:
f8:3f:93:0d:11:55:54:fe:04:e0:6d:77:00:28:b5:
12:b4:21:32:69:c5:a3:ec:d7:0b:98:37:76:21:e7:
57:00:f1:77:f4:ee:9e:e3:3d:4c:ec:85:26:1a:40:
bc:90:ac:99:f9:a3:b1:80:7d:fd:fc:41:dd:04:93:
12:b5:e8:98:87:f9:02:81:8f:a6:7e:19:1a:32:6a:
c0:a7:de:5f:db:7f:50:d9:28:45:43:87:c8:5a:5e:
38:a5:d2:96:91:cb:69:b5:73:b9:2d:66:d8:5a:da:
20:18:a3:80:cb:c8:cf:d3:26:51:d7:6c:bd:65:81:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:7D:F6:A3:FE:13:55:15:3F:AE:E4:D4:B5:B4:34:F5:F6:88:0F
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/nMN99qP-E1UVP67k1LW0NPX2iA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.124.0/22
185.150.28.0/22
IPv6:
2a00:c1e0::/29
2a07:6d80::/29
Signature Algorithm: sha256WithRSAEncryption
2e:ac:12:08:06:54:d9:93:59:a7:fd:fe:c9:27:e6:2e:6f:14:
22:9e:4f:15:c0:e5:4b:52:86:20:a0:8c:16:d6:be:20:d5:ea:
5b:ab:50:03:ec:c5:e8:d8:d3:ae:f8:9b:70:3c:b4:5b:b7:d0:
4e:4a:02:1b:b3:b8:44:1d:cf:25:42:81:e4:65:d3:45:0e:36:
01:d8:6a:e8:da:59:40:be:65:d0:8c:bc:20:2b:3c:65:7c:4c:
01:4e:c6:7b:ae:73:c2:56:bd:51:5a:fe:b2:a0:6a:40:30:bd:
4d:cc:11:70:47:ce:32:ed:50:f6:5d:52:fe:e1:d7:bc:97:ef:
9b:87:73:8f:d6:2c:43:67:0c:0d:26:48:95:ba:aa:29:f2:50:
42:c5:8b:d6:e7:65:c2:bf:d9:b9:23:0d:42:da:07:58:90:1f:
11:7b:ca:ba:1f:43:64:f5:60:cf:ba:2e:71:be:c2:38:07:11:
4e:8e:1e:a9:f2:7f:7a:4b:91:74:87:e0:b7:76:bc:15:0d:fb:
ab:7c:50:cc:4e:71:dc:ff:c0:95:ca:ef:83:d3:ff:89:3b:58:
89:60:a8:c8:4c:4f:df:b1:6f:17:09:22:ad:5a:fe:ab:5f:58:
7b:1e:12:fa:77:f2:13:d4:a3:15:57:02:c5:db:be:79:e2:ae:
cb:26:c5:4f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYVtLzWWBPIFtk+sYWQNX/wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NzdjZTE0MzQyMzJkODA4MTk1ZDBjYTcwYWIzOTFkZmIw
N2FmMmQwHhcNMjMwMTAxMTE1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2MzN2RmNmEzZmUxMzU1MTUzZmFlZTRkNGI1YjQzNGY1ZjY4ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAPklHgGsRQzRokuBegScfqDKAql
cX3DE/OqcsVlA4s3mr8jfLsJTsYNi9eV8HavKvxzSXLnBtsD9r9leHtW85AJ8F0w
f4e2CP7t4ECM7PiCAiXR60HUSw7GD6iHCwYCgkkbAbz0v2ERjLnpyclhQXwCuzEX
lIqoRs3/uPj+bk7dAaDKolr4P5MNEVVU/gTgbXcAKLUStCEyacWj7NcLmDd2IedX
APF39O6e4z1M7IUmGkC8kKyZ+aOxgH39/EHdBJMSteiYh/kCgY+mfhkaMmrAp95f
239Q2ShFQ4fIWl44pdKWkctptXO5LWbYWtogGKOAy8jP0yZR12y9ZYEn8QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJzDffaj/hNVFT+u5NS1tDT19ogPMB8GA1UdIwQY
MBaAFNV3zhQ0Iy2AgZXQynCrOR37B68tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZDYxNWUtMjRkYi00N2VmLTlhYTMt
NjBlNmIxNDhkMjhiLzEvbk1OOTlxUC1FMVVWUDY3azFMVzBOUFgyaUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8wZDYxNWUtMjRkYi00N2VmLTlhYTMtNjBlNmIxNDhkMjhi
LzEvMVhmT0ZEUWpMWUNCbGRES2NLczVIZnNIcnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuSB8AwQC
uZYcMBQEAgACMA4DBQMqAMHgAwUDKgdtgDANBgkqhkiG9w0BAQsFAAOCAQEALqwS
CAZU2ZNZp/3+ySfmLm8UIp5PFcDlS1KGIKCMFta+INXqW6tQA+zF6NjTrvibcDy0
W7fQTkoCG7O4RB3PJUKB5GXTRQ42Adhq6NpZQL5l0Iy8ICs8ZXxMAU7Ge65zwla9
UVr+sqBqQDC9TcwRcEfOMu1Q9l1S/uHXvJfvm4dzj9YsQ2cMDSZIlbqqKfJQQsWL
1udlwr/ZuSMNQtoHWJAfEXvKuh9DZPVgz7oucb7COAcRTo4eqfJ/ekuRdIfgt3a8
FQ37q3xQzE5x3P/Alcrvg9P/iTtYiWCoyExP37FvFwkirVr+q19Yex4S+nfyE9Sj
FVcCxdu+eeKuyybFTw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:39 2025 by rpki-client