Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/xk6_NBnYK913W5ccNu8ZclB5xHI.roa
File: xk6_NBnYK913W5ccNu8ZclB5xHI.roa (raw, json)
Hash identifier: iZKvBorO/lTy0/YjA+/ZdgB61sJ55Wd41OQgVsJP+RY=
Subject key identifier: C6:4E:BF:34:19:D8:2B:DD:77:5B:97:1C:36:EF:19:72:50:79:C4:72
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 1561CFD2
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/xk6_NBnYK913W5ccNu8ZclB5xHI.roa
Signing time: Sat 01 Jan 2022 08:04:51 +0000
ROA not before: Sat 01 Jan 2022 08:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48806
IP address blocks: 62.100.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358731730 (0x1561cfd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 08:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c64ebf3419d82bdd775b971c36ef19725079c472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:d7:14:0d:8f:fd:78:fe:38:96:3e:27:19:
8f:6d:8b:56:c9:9e:21:84:99:6d:d9:c2:9c:76:bf:
a5:2d:fe:56:f6:d2:fa:b2:43:3a:e4:d5:fd:ba:9a:
00:b5:3a:1b:16:04:41:52:f9:64:c1:a2:ea:a0:7f:
64:43:91:c9:4f:61:53:fb:7f:8c:34:59:a5:fc:67:
bb:10:42:57:0e:ed:64:f1:8a:87:49:bf:17:5b:41:
b8:17:55:55:ed:b3:17:f3:b3:3b:6e:b0:b5:e3:2a:
1f:68:6d:8d:cd:7e:4e:23:15:62:91:33:97:ca:70:
e1:27:2b:0a:5f:71:a4:21:b1:9d:a8:a4:6f:92:6c:
eb:8c:56:20:4c:c0:90:78:ed:94:9e:53:d8:79:94:
db:26:50:2a:db:86:6b:e4:bc:e3:ed:b2:06:7c:03:
d7:9c:18:d3:1d:67:ed:2a:c0:c0:4d:18:8c:2f:4f:
56:68:bb:d4:1a:69:1e:5d:3d:70:57:1a:67:10:e1:
30:eb:eb:5b:a8:e0:12:14:98:bb:8d:ad:80:30:4f:
db:41:8b:82:6d:b2:cd:8a:35:15:3f:d2:0c:1b:84:
a5:0a:05:b0:0d:21:b4:71:18:87:da:8f:a4:ba:a5:
b4:66:56:84:8d:77:8b:ad:20:c3:64:03:a0:1f:8f:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:BF:34:19:D8:2B:DD:77:5B:97:1C:36:EF:19:72:50:79:C4:72
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/xk6_NBnYK913W5ccNu8ZclB5xHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.210.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8f:40:5a:7f:1e:57:60:90:e7:7f:d4:87:7e:36:fd:08:33:
e8:6a:04:fc:59:51:77:fb:cb:01:72:20:b8:aa:69:b4:30:90:
64:62:47:19:fa:24:3b:3c:1c:a3:ef:42:86:8e:9f:a9:51:8b:
49:5e:d5:5c:71:61:82:70:28:4d:e3:1b:32:fb:bf:c2:f8:53:
59:e5:c6:f6:61:a9:08:f9:38:b9:2b:3e:d7:90:d9:d1:89:df:
54:dc:2f:4f:ad:f4:1e:06:6f:f5:46:73:67:af:1d:d0:fe:9e:
91:07:c8:17:62:f8:24:c1:99:bb:a5:3e:48:4d:20:29:3e:d5:
fa:e9:74:fc:4e:89:b1:01:26:ee:46:b9:ca:b2:1e:1a:85:f5:
21:4a:0f:77:14:bd:e5:62:19:db:dd:24:88:33:2c:b4:5a:0a:
55:fe:82:5b:a9:aa:36:d8:92:02:14:5a:a7:20:21:20:cb:27:
4d:39:78:c1:ca:ab:a0:52:c3:91:6e:08:78:27:76:35:94:f5:
e5:cb:75:b8:f5:0a:b3:77:0c:95:ec:c8:73:6e:f1:97:f6:4a:
58:41:52:59:db:6c:1d:48:9b:21:88:7b:63:66:37:40:40:63:
eb:f8:c8:b3:e3:5e:43:d0:20:66:98:c9:be:7b:67:22:6b:cf:
04:59:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:15 2023 by rpki-client on console-ams.rpki-client.org