Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nVv8Vc1GbxqgOyJEskSsRE5_vy4.roa
File: nVv8Vc1GbxqgOyJEskSsRE5_vy4.roa (raw, json)
Hash identifier: KbRX5cLy1Ed7wTNdsIgEOVRkb1jto89fcZREWAxuW7w=
Subject key identifier: 9D:5B:FC:55:CD:46:6F:1A:A0:3B:22:44:B2:44:AC:44:4E:7F:BF:2E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0100D6BF
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nVv8Vc1GbxqgOyJEskSsRE5_vy4.roa
Signing time: Sat 01 Jan 2022 00:59:26 +0000
ROA not before: Sat 01 Jan 2022 00:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39792
IP address blocks: 2a0c:b641:1c0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16832191 (0x100d6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d5bfc55cd466f1aa03b2244b244ac444e7fbf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:8c:cb:8d:6e:1f:16:ea:a9:d5:e4:ba:4a:
f6:cb:2d:0b:8d:f1:44:d9:9f:6b:6a:2a:44:c3:16:
4f:91:cd:b0:a6:88:03:a3:6d:60:28:2e:de:55:0c:
ca:2d:a7:06:12:dd:dd:0a:4c:1c:aa:2e:a3:9d:90:
7c:46:56:c8:b7:1e:5b:59:50:b1:30:91:71:04:df:
0b:fc:f2:ed:2c:16:70:57:0d:4a:a6:78:f4:a3:c5:
ad:10:1f:98:ab:ee:a5:d2:70:3e:46:e2:91:23:75:
6b:fd:b6:c4:69:ad:3c:64:db:43:1b:5c:40:4a:e5:
30:71:30:33:c9:b2:7c:81:4b:d4:d1:20:80:4c:3a:
61:55:a2:6f:d6:3b:ea:f1:c2:88:ff:35:d1:ee:2f:
1f:9c:a7:04:84:05:4e:68:76:0c:73:ec:dd:f2:a5:
8e:5a:0c:a2:41:c2:b8:37:81:cb:23:52:39:03:10:
4e:bd:32:8f:75:64:70:f8:ec:91:43:82:32:34:e7:
51:c2:16:8d:49:34:d5:d6:44:12:60:3f:da:d9:39:
bb:c7:3a:17:f2:95:bf:f5:1f:16:3c:7a:05:94:17:
d7:8a:26:b4:61:15:15:a2:8f:6f:27:07:f4:b2:43:
af:ff:cf:40:0e:ba:6b:f4:d2:ae:7b:7f:98:32:78:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:FC:55:CD:46:6F:1A:A0:3B:22:44:B2:44:AC:44:4E:7F:BF:2E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/nVv8Vc1GbxqgOyJEskSsRE5_vy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
8d:68:ae:65:9e:78:f3:2b:ef:52:d5:d0:27:aa:29:4b:2d:4c:
90:c7:dd:e2:34:67:e6:a5:39:65:05:35:89:0b:d9:b0:63:c6:
84:c3:13:a4:c3:06:a8:cd:e0:7b:23:7b:18:3c:fe:d2:e6:96:
95:17:e9:93:27:06:24:e3:9c:d6:df:58:cc:ae:a1:63:85:7e:
9b:af:df:fe:1b:5e:59:14:4f:99:79:62:90:26:be:dc:3a:29:
5b:97:24:45:77:a7:df:56:1e:e9:72:cf:d3:22:b5:ac:ab:b1:
a2:ec:c2:9e:9d:7e:a3:69:74:50:cd:15:58:a1:c5:c4:dd:ba:
41:33:51:5e:d3:8f:e0:6b:b9:78:c7:52:20:6c:56:a8:de:ec:
54:e3:70:88:cd:f1:4e:4d:0d:56:12:06:9b:37:37:be:53:f0:
0d:27:35:10:88:84:07:37:a1:c1:ee:96:d6:bd:e1:fe:10:41:
fd:c9:d9:c3:fb:2e:0a:96:4c:86:02:8f:00:2a:2b:73:05:a9:
f3:0f:62:24:7e:d0:02:a4:c1:ad:81:9b:27:74:4c:c3:20:ed:
8b:f4:cd:4c:c4:a6:84:23:5a:ff:a2:93:37:5f:ab:bc:56:c7:
30:a6:ab:f5:63:64:4d:d9:57:cd:18:60:bd:ff:f6:8f:b1:07:
ee:64:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org