Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/2NLDZfruolImnSLap55QTr502zk.roa
File: 2NLDZfruolImnSLap55QTr502zk.roa (raw, json)
Hash identifier: A8ZosAs4jeUeN0GGlXadx7MYBrUXO+kePL8Omvn1+3U=
Subject key identifier: D8:D2:C3:65:FA:EE:A2:52:26:9D:22:DA:A7:9E:50:4E:BE:74:DB:39
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 03B000FF
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/2NLDZfruolImnSLap55QTr502zk.roa
Signing time: Sat 01 Jan 2022 04:02:08 +0000
ROA not before: Sat 01 Jan 2022 04:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24940
IP address blocks: 195.60.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61866239 (0x3b000ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Jan 1 04:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8d2c365faeea252269d22daa79e504ebe74db39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:5f:d5:76:f2:b2:52:cd:e0:b5:2a:dd:9d:
69:30:2d:51:84:ae:17:93:26:95:a2:60:df:35:5f:
91:e8:12:e0:a5:c2:b4:9d:c6:8f:66:cc:cb:78:0f:
9d:7f:34:7f:12:27:14:98:6b:28:2f:39:2b:a8:49:
a4:84:6b:f9:40:8c:fc:82:37:04:34:cc:de:1a:b0:
1c:d5:f4:06:6a:9a:b9:54:af:d1:9a:ca:1b:8e:c5:
17:ee:7e:89:6d:8b:1a:7b:d8:db:21:0a:90:74:dc:
be:fb:e4:92:27:dd:99:6b:47:4f:fa:6d:89:dc:0a:
c2:b4:67:7d:43:0b:be:be:9c:37:f5:5c:9f:4a:2e:
33:72:95:3e:e2:76:4e:71:68:e3:0d:a8:d6:76:e7:
86:41:b0:f1:4b:1d:8a:92:14:e6:df:71:84:31:6d:
bd:d8:94:4c:88:06:78:c7:a3:28:f3:f5:ad:de:2a:
59:16:44:ce:f5:f5:41:c3:5e:38:76:fe:78:dd:66:
8b:f0:3b:10:75:c0:f0:76:f2:39:e4:cf:e6:23:cb:
53:df:a0:f4:b6:e8:e4:87:9b:a7:f6:3b:07:57:a3:
f3:56:c0:b1:0c:fd:b1:06:54:d6:f1:a4:d3:ab:24:
2f:af:c0:07:b4:af:5e:dc:09:31:03:6c:11:17:33:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D2:C3:65:FA:EE:A2:52:26:9D:22:DA:A7:9E:50:4E:BE:74:DB:39
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/2NLDZfruolImnSLap55QTr502zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.226.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5f:a6:ea:90:fe:3f:70:e4:45:c7:41:c2:78:d0:ba:2c:1d:
23:ea:fb:32:39:72:f6:f5:e5:af:f7:d5:84:ce:04:3b:2f:f0:
df:cf:67:86:1c:8a:9e:54:67:96:15:70:c7:80:fa:4b:00:26:
2e:9c:84:14:96:21:b9:30:85:f6:89:1d:7a:0e:a9:85:fa:9b:
fc:41:9c:d2:4d:aa:d8:cb:0e:37:29:e9:31:d8:49:b5:9e:2c:
35:60:43:ed:06:df:4e:90:fe:f5:ea:8e:0f:9d:8c:c8:82:4f:
65:4a:21:75:d4:2d:5b:86:5a:b2:2c:9b:e4:a4:10:5f:17:15:
2f:5b:03:65:05:93:e5:1c:5e:1f:da:5a:79:62:57:f1:3b:8a:
e5:de:a2:7a:d8:a3:08:c9:ec:10:9a:e0:6c:18:bb:0b:12:a6:
f1:00:f0:55:d6:8b:44:69:95:e8:f6:19:4b:25:92:99:8f:48:
f2:cc:e8:b5:ef:c0:ba:ac:ed:81:c4:71:b3:39:fc:ae:99:8f:
eb:d3:d0:57:dc:a7:d2:12:2c:9d:18:f3:64:f0:44:5a:c4:3a:
36:b4:56:1f:8f:a3:f8:1a:25:54:61:bf:3a:ba:74:58:d6:b7:
19:97:bc:a1:fe:62:e7:e2:9b:f7:39:cf:69:dc:7e:54:16:be:
a8:e7:57:12
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA7AA/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZjBmNWE5YmQyYWQxZTk2ODY1ZjAwZDA4NTIyYjlhYWQzZTkxYTRkMB4XDTIyMDEw
MTA0MDIwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDhkMmMzNjVmYWVl
YTI1MjI2OWQyMmRhYTc5ZTUwNGViZTc0ZGIzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJX4X9V28rJSzeC1Kt2daTAtUYSuF5MmlaJg3zVfkegS4KXC
tJ3Gj2bMy3gPnX80fxInFJhrKC85K6hJpIRr+UCM/II3BDTM3hqwHNX0BmqauVSv
0ZrKG47FF+5+iW2LGnvY2yEKkHTcvvvkkifdmWtHT/ptidwKwrRnfUMLvr6cN/Vc
n0ouM3KVPuJ2TnFo4w2o1nbnhkGw8UsdipIU5t9xhDFtvdiUTIgGeMejKPP1rd4q
WRZEzvX1QcNeOHb+eN1mi/A7EHXA8HbyOeTP5iPLU9+g9Lbo5Iebp/Y7B1ej81bA
sQz9sQZU1vGk06skL6/AB7SvXtwJMQNsERcztrECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTY0sNl+u6iUiadItqnnlBOvnTbOTAfBgNVHSMEGDAWgBSvD1qb0q0eloZf
ANCFIrmq0+kaTTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3J3OWFtOUt0SHBhR1h3RFFoU0s1cXRQcEdrMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmUvNmFkOWI4LTlmMGUtNGFkMC1hMjIwLTNhYzNiNjczNzA0Mi8x
LzJOTERaZnJ1b2xJbW5TTGFwNTVRVHI1MDJ6ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUv
NmFkOWI4LTlmMGUtNGFkMC1hMjIwLTNhYzNiNjczNzA0Mi8xL3J3OWFtOUt0SHBh
R1h3RFFoU0s1cXRQcEdrMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMM84jANBgkqhkiG9w0BAQsFAAOC
AQEAY1+m6pD+P3DkRcdBwnjQuiwdI+r7Mjly9vXlr/fVhM4EOy/w389nhhyKnlRn
lhVwx4D6SwAmLpyEFJYhuTCF9okdeg6phfqb/EGc0k2q2MsONynpMdhJtZ4sNWBD
7QbfTpD+9eqOD52MyIJPZUohddQtW4Zasiyb5KQQXxcVL1sDZQWT5RxeH9paeWJX
8TuK5d6ietijCMnsEJrgbBi7CxKm8QDwVdaLRGmV6PYZSyWSmY9I8szote/Auqzt
gcRxszn8rpmP69PQV9yn0hIsnRjzZPBEWsQ6NrRWH4+j+BolVGG/Orp0WNa3GZe8
of5i5+Kb9znPadx+VBa+qOdXEg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:16 2025 by rpki-client