Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NqNpce8fl8sIQ-ZGQ7VrParDRFI.roa
File: NqNpce8fl8sIQ-ZGQ7VrParDRFI.roa (raw, json)
Hash identifier: JnJp46uQsDvxjcP4q7UAg/CDQHbqeL2HWd5WBlSnwF4=
Subject key identifier: 36:A3:69:71:EF:1F:97:CB:08:43:E6:46:43:B5:6B:3D:AA:C3:44:52
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAE1EF94F5CB201E1D8C43B88F5844
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NqNpce8fl8sIQ-ZGQ7VrParDRFI.roa
Signing time: Sun 01 Jan 2023 14:44:50 +0000
ROA not before: Sun 01 Jan 2023 14:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41786
IP address blocks: 2a02:2698:2400::/38 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e1:ef:94:f5:cb:20:1e:1d:8c:43:b8:8f:58:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36a36971ef1f97cb0843e64643b56b3daac34452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:1a:85:b2:5b:b3:1b:53:16:54:79:55:6f:
bf:29:19:a7:fe:ae:bb:05:4c:ad:4c:84:b9:c9:64:
1f:c3:6a:82:43:dc:fa:ec:1b:cf:54:68:c6:21:38:
1d:29:f7:66:33:73:cf:3d:77:1f:4d:9e:f7:29:80:
74:d7:4e:eb:19:f1:d1:e3:90:88:eb:9b:b1:c8:30:
f1:6d:b5:78:5b:ea:09:ab:27:ad:c4:7f:99:4e:35:
a0:e0:dd:b1:ce:d6:db:63:6c:98:a2:a7:e9:ef:a3:
49:b4:ea:71:f5:29:2f:89:99:5a:bb:9c:8f:8d:97:
08:f0:b1:79:3f:59:4e:ec:68:ba:f1:9c:af:4a:c5:
5c:53:9c:28:03:b8:c1:ae:39:63:b6:b8:30:a2:93:
c4:77:26:d5:ea:8b:00:f0:f9:80:d8:8d:cc:f3:fe:
5a:d7:79:ee:45:85:a9:fe:63:36:00:17:f7:41:b5:
0a:7d:cf:09:a3:80:cf:a5:6c:ca:a7:39:13:f3:63:
73:2e:8d:f1:71:42:de:77:df:05:57:fb:f2:0b:9c:
e3:02:b9:65:0c:b7:f6:d5:e2:5a:46:2f:f8:75:18:
e3:1b:16:6b:0a:10:4c:92:5b:b7:1c:5d:53:8b:72:
1b:f7:3c:f1:ef:f3:49:d0:2d:c0:eb:b2:9d:7d:57:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A3:69:71:EF:1F:97:CB:08:43:E6:46:43:B5:6B:3D:AA:C3:44:52
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/NqNpce8fl8sIQ-ZGQ7VrParDRFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:2400::/38
Signature Algorithm: sha256WithRSAEncryption
ca:46:f9:9b:57:b3:b6:07:87:33:cc:c9:77:4b:40:76:05:1c:
e1:7a:05:da:6e:c0:d5:84:78:53:cc:a4:94:52:a1:89:7f:c2:
d6:60:64:aa:3d:59:94:4e:5f:34:03:06:b6:93:56:04:13:93:
36:16:0d:1d:c9:0e:de:70:00:bf:8f:f1:88:52:14:5b:7e:ab:
92:81:55:36:6d:18:19:51:1a:e1:8c:24:4b:c6:82:5b:ec:4f:
36:18:87:97:53:fa:e3:8a:a2:05:6b:31:bc:7e:34:d6:f1:f6:
43:96:80:6d:3f:1a:86:a7:3f:d4:6f:4d:c5:f5:e9:c7:ad:f8:
46:e6:fb:1f:61:ef:33:f6:6f:be:42:28:89:da:9d:01:ea:12:
8f:3f:b5:72:df:6b:2b:1e:66:57:7e:e3:54:92:ba:8c:a6:56:
65:78:b3:0b:91:1c:9e:56:98:0c:a1:4c:a7:b8:50:80:03:23:
e2:8b:1f:27:b9:01:18:99:6f:f5:39:d5:10:bf:ef:7b:d4:34:
d3:74:24:3c:c5:c1:79:9d:54:35:70:0c:17:e1:ed:c9:ac:68:
d4:9c:69:e9:a0:20:15:c9:f7:e5:e4:21:2e:2c:a8:56:c4:0f:
09:c6:31:9f:47:35:b5:22:8b:a3:fb:0d:c5:06:86:7a:5b:3b:
1e:30:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:23 2025 by rpki-client