Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/nSjd0GuDDOYfzvftafPn6vQNBg4.roa
File: nSjd0GuDDOYfzvftafPn6vQNBg4.roa (raw, json)
Hash identifier: 0ol54n1j37LshNfEuDIITHKWg8YgXqBeIW2zDsz4i8M=
Subject key identifier: 9D:28:DD:D0:6B:83:0C:E6:1F:CE:F7:ED:69:F3:E7:EA:F4:0D:06:0E
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 0515B97E
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/nSjd0GuDDOYfzvftafPn6vQNBg4.roa
Signing time: Fri 04 Feb 2022 04:40:29 +0000
ROA not before: Fri 04 Feb 2022 04:40:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 328778
IP address blocks: 2a02:f406:fed0::/48 maxlen: 48
2a02:f406:ff50::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85309822 (0x515b97e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Feb 4 04:40:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d28ddd06b830ce61fcef7ed69f3e7eaf40d060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:00:cd:64:a7:b8:a8:84:13:4e:b0:aa:da:
17:ef:48:52:6c:87:5c:9f:09:0a:c1:b3:26:65:62:
66:8d:8c:40:53:dc:9f:3b:6a:ec:12:eb:b7:28:d5:
ca:77:f4:16:f1:f0:0d:81:aa:49:26:e4:a4:cd:b2:
f8:b5:08:0f:d2:68:fd:cb:6c:06:e0:b7:7d:67:f5:
de:98:a3:e7:c1:db:b3:a7:8e:9e:5c:96:94:34:c5:
bc:00:42:47:7d:4c:ac:3e:ce:33:d2:1a:b2:44:c1:
dc:91:7d:7f:00:de:fa:53:13:eb:14:3d:21:4e:28:
98:66:60:1b:84:53:f0:e7:2c:d7:30:a4:ec:37:99:
a8:d3:5f:1b:de:41:c8:4a:4b:c1:01:b2:a1:f5:2b:
ea:c7:b2:c1:70:fd:28:b9:24:98:03:cc:75:29:aa:
37:8e:ee:f3:2a:b2:fc:28:59:b7:69:af:81:53:8b:
87:5a:cf:d2:cf:44:68:d3:ee:b8:4a:0d:a5:b8:54:
c0:96:4b:48:cf:fc:a7:46:a5:98:f9:36:b6:90:ea:
1f:6e:05:78:13:21:72:ea:f8:df:e9:ba:2c:9a:59:
14:c9:58:79:57:d6:b7:d3:09:dc:e8:e9:4e:6f:3f:
2b:52:6a:be:6e:83:c7:24:f7:a1:4e:46:b8:c5:84:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:28:DD:D0:6B:83:0C:E6:1F:CE:F7:ED:69:F3:E7:EA:F4:0D:06:0E
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/nSjd0GuDDOYfzvftafPn6vQNBg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f406:fed0::/48
2a02:f406:ff50::/48
Signature Algorithm: sha256WithRSAEncryption
55:e5:d9:6e:02:6c:d7:7e:e2:f4:bc:d1:ae:94:9b:0e:61:e7:
1a:16:fd:79:43:82:8c:13:2d:67:29:45:f0:bf:63:2c:f8:73:
26:83:88:d8:33:33:70:29:eb:de:fc:de:54:27:64:21:7a:ea:
68:0a:16:aa:17:64:86:ac:72:2c:99:03:04:48:8f:45:5d:12:
1e:4f:58:32:b0:0a:9a:b8:16:ff:2d:ec:d7:dd:0d:ab:6e:49:
73:78:10:2b:a5:d6:f5:de:37:92:13:b4:a5:5f:b0:c9:1c:4b:
87:96:9f:17:f0:5e:8d:f1:6c:20:be:45:f2:77:80:40:13:23:
7d:30:a2:a0:66:f8:d2:e6:9a:ef:f5:f8:29:a1:05:38:83:4c:
2d:2b:0f:7a:f7:10:b8:86:3f:df:94:13:c3:90:e2:b5:29:7d:
2f:1e:43:4c:86:0d:7d:c0:ca:b5:50:59:aa:58:50:a7:e0:53:
02:0c:19:17:70:20:7a:ba:f3:96:c0:a2:7b:90:bd:df:fe:29:
18:d7:6d:3c:52:11:c0:2a:ce:63:80:a4:94:1a:bf:72:5b:b8:
15:6d:68:d8:06:b1:f1:40:d7:61:14:fb:8c:1b:bc:32:5b:b5:
8f:8e:15:6d:9b:00:5d:9f:fa:6c:90:b7:06:f4:60:7e:b3:61:
c0:55:af:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:09 2024 by rpki-client on console-ams.rpki-client.org