Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/NljXkV3Br5Eq8l9kYu-uoe8SIJM.roa
File: NljXkV3Br5Eq8l9kYu-uoe8SIJM.roa (raw, json)
Hash identifier: YsWCQcffBc/fuNWWT8e/CVWGFr05/oEXMmJFIl8MTzE=
Subject key identifier: 36:58:D7:91:5D:C1:AF:91:2A:F2:5F:64:62:EF:AE:A1:EF:12:20:93
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 07B246
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/NljXkV3Br5Eq8l9kYu-uoe8SIJM.roa
Signing time: Thu 26 May 2022 08:55:15 +0000
ROA not before: Thu 26 May 2022 08:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207048
IP address blocks: 2a12:60c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504390 (0x7b246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: May 26 08:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3658d7915dc1af912af25f6462efaea1ef122093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:9f:2e:da:ab:22:a3:ca:56:83:48:dc:8e:
b9:60:b8:f5:e9:77:34:b8:8d:59:f3:d2:e7:e9:1c:
e7:8d:8e:57:8b:95:84:23:ca:a0:d7:ef:c2:55:0d:
09:b2:e0:99:88:a2:15:f2:7b:e2:81:4e:75:ac:3e:
b6:1f:dd:ad:40:67:5f:d1:10:56:ea:a2:80:e4:85:
04:96:60:7e:29:a1:8c:5e:db:16:8e:aa:97:ec:fa:
96:7e:d6:c8:ce:80:c2:88:d7:c0:fb:84:c5:87:10:
63:2b:9a:0b:ba:b6:f6:eb:f5:ce:3c:13:e7:cf:74:
44:be:fb:82:8b:16:a3:99:25:7e:00:71:4b:35:3a:
4e:ed:66:16:bc:d9:54:9b:a1:0c:fe:44:6b:ee:14:
14:4b:db:bd:fa:d1:db:90:40:97:a8:22:ea:da:4f:
e7:29:c1:47:44:12:bf:73:67:52:2f:6d:04:f2:7e:
16:53:90:7f:1e:16:51:f1:7c:a0:ed:e8:00:92:70:
03:48:54:bd:9c:35:ae:eb:e2:1d:fc:49:d5:37:85:
25:29:26:f9:a1:98:40:6d:91:45:2d:d5:fd:59:f3:
7c:3b:b3:fd:e4:f6:36:d1:bb:35:50:aa:3f:38:14:
c7:42:71:cb:a1:44:32:7d:9f:65:35:ba:cc:dc:89:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:58:D7:91:5D:C1:AF:91:2A:F2:5F:64:62:EF:AE:A1:EF:12:20:93
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/NljXkV3Br5Eq8l9kYu-uoe8SIJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:a3:42:cf:57:2d:66:a3:b2:7d:7b:d8:28:0e:8d:ce:c6:bd:
6c:5a:b7:4f:61:07:2b:21:67:38:f7:14:e6:23:07:de:9c:a9:
9b:cf:74:d7:6b:74:26:2c:7f:fb:50:d7:60:4d:22:6e:14:ff:
4f:5c:07:5a:7c:eb:5e:f8:fc:2b:52:29:f1:93:f5:c5:ec:02:
15:43:c1:66:b9:9a:14:7f:43:6d:7f:2f:19:1c:3b:b2:45:af:
cc:65:e4:02:a6:48:66:0b:47:d8:f8:dd:65:dd:2d:7f:f7:6e:
c8:35:2f:cd:6e:99:af:6d:90:1d:77:df:c6:6d:64:33:35:57:
bb:f1:68:f0:48:91:bc:45:68:c2:6b:51:b8:10:e4:c5:a7:ae:
50:a8:36:e8:08:22:dd:df:f5:bb:44:2c:e9:0c:dd:d7:ea:99:
1b:5e:59:ea:03:6d:e7:8d:c7:18:aa:3b:48:94:7f:61:d7:2e:
9d:8e:d3:a1:94:1c:95:18:9a:6d:3d:14:0e:33:3e:7f:c0:08:
9a:79:a8:df:44:b0:c6:fd:c0:f8:65:82:d3:77:b5:f0:0f:80:
51:49:ba:33:49:6f:a3:e8:3e:43:ef:0c:30:96:de:57:54:8c:
83:2a:56:49:78:97:05:8e:e0:a1:63:b3:82:f1:20:b9:42:b0:
a0:06:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:45 2024 by rpki-client on console-fra.rpki-client.org