Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/NpRR-yJZlaqYhAPFXanJy2T5Xz8.roa
File: NpRR-yJZlaqYhAPFXanJy2T5Xz8.roa (raw, json)
Hash identifier: hDV6MBozyO3LwlmjTvWQWuRUyQcL+YFSpmu1n+TjmhY=
Subject key identifier: 36:94:51:FB:22:59:95:AA:98:84:03:C5:5D:A9:C9:CB:64:F9:5F:3F
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 03032DB0
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/NpRR-yJZlaqYhAPFXanJy2T5Xz8.roa
Signing time: Sat 01 Jan 2022 02:57:29 +0000
ROA not before: Sat 01 Jan 2022 02:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43623
IP address blocks: 2001:67c:4a0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50539952 (0x3032db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Jan 1 02:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=369451fb225995aa988403c55da9c9cb64f95f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:41:3f:77:35:c6:ef:53:73:b5:52:51:4d:
71:f5:b6:d0:fb:41:d5:68:54:a4:dd:df:90:97:1c:
2d:9f:16:1b:27:87:2b:61:b8:3f:ab:68:1f:4e:bc:
40:64:22:90:39:4a:59:36:72:e2:c2:c2:01:4b:20:
63:4a:61:47:28:53:4a:e5:05:90:dd:25:a3:50:7c:
29:3d:ac:88:ed:7f:40:54:43:f2:b9:47:3e:39:2f:
a1:a2:b0:2e:2f:3f:c4:b1:6d:7f:8b:4c:dd:02:62:
e5:a7:20:c9:99:06:30:5d:96:46:0d:b7:6f:30:b5:
bb:56:62:94:6f:1a:fa:76:f4:9b:72:8a:7e:aa:8b:
21:1c:82:87:ab:69:81:42:79:81:05:69:f2:74:db:
62:43:ef:26:de:88:9d:39:e8:e6:5d:c3:62:ec:c4:
fb:7e:98:fb:9b:17:b8:f7:8e:29:f7:c5:00:66:de:
75:95:f2:93:2d:ba:a6:79:cb:ca:cb:ba:c5:97:c2:
5a:eb:eb:fa:81:d6:88:b1:53:62:dd:53:f0:81:31:
e6:6b:90:2d:0f:15:bb:e4:11:3e:4e:ec:89:f5:8c:
6a:fc:4e:26:8e:8c:3d:f8:74:c2:27:cf:db:c6:84:
87:a1:bc:32:86:07:a4:1e:61:fb:eb:92:ae:b3:7f:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:51:FB:22:59:95:AA:98:84:03:C5:5D:A9:C9:CB:64:F9:5F:3F
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/NpRR-yJZlaqYhAPFXanJy2T5Xz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4a0::/48
Signature Algorithm: sha256WithRSAEncryption
05:fa:80:6e:e4:dd:a5:33:28:67:56:29:1d:77:84:6d:56:1f:
a2:a4:36:df:16:10:09:c8:33:47:27:97:a9:ff:0a:a6:20:00:
07:8b:7a:1a:e4:db:4c:67:c7:59:8e:8d:43:62:02:62:de:9a:
bf:49:27:cc:60:6a:74:75:b9:d7:66:0e:3a:ab:c9:94:6e:01:
4d:ce:c0:71:a3:b9:fb:55:53:47:5d:b5:f8:3f:9b:c0:62:d8:
d6:d5:a0:d1:e0:ab:50:ee:8d:9d:07:a4:32:ee:b2:ae:41:00:
73:af:38:b7:94:a9:13:90:a3:c2:01:14:54:d7:b2:eb:24:3d:
48:78:3c:b3:47:23:25:93:0f:72:20:74:68:97:89:d7:d7:97:
ea:72:07:45:4f:ac:e6:8f:c8:39:7d:4a:c8:85:d2:b5:11:7b:
ba:5d:7b:27:f9:27:f7:1c:10:0b:39:22:c8:dd:ca:dd:59:0e:
67:77:1c:bd:dc:9c:38:94:f2:c7:de:22:3e:e7:e2:07:58:fe:
9b:b0:71:62:25:e5:78:0b:09:c0:62:fc:67:9d:39:1b:92:b1:
2a:12:59:e6:bb:1c:e0:f4:57:d3:4a:33:37:17:cc:b6:f4:37:
1b:cd:3f:bb:b3:93:1d:3a:d9:c3:b1:51:15:84:cd:c0:15:5e:
5a:00:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:50 2024 by rpki-client on console-fra.rpki-client.org