Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/NV8BS--CZ-DWTLs8amK3_e133wM.roa
File: NV8BS--CZ-DWTLs8amK3_e133wM.roa (raw, json)
Hash identifier: h1BylTL2m0b0csF+h4aP2zNAYfScPP7vcA1BBE39tek=
Subject key identifier: 35:5F:01:4B:EF:82:67:E0:D6:4C:BB:3C:6A:62:B7:FD:ED:77:DF:03
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 0FC15E75
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/NV8BS--CZ-DWTLs8amK3_e133wM.roa
Signing time: Sat 01 Jan 2022 09:57:07 +0000
ROA not before: Sat 01 Jan 2022 09:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208753
IP address blocks: 2a05:b0c6:200e::/48 maxlen: 48
2a05:b0c6:200b::/48 maxlen: 48
2a05:b0c6:200a::/48 maxlen: 48
2a05:b0c6:200d::/48 maxlen: 48
2a05:b0c6:200c::/48 maxlen: 48
2a05:b0c6:200f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264330869 (0xfc15e75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 1 09:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=355f014bef8267e0d64cbb3c6a62b7fded77df03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:2d:c6:86:7e:bc:83:bc:7c:77:4e:66:83:
c0:c1:cb:d2:01:71:8e:95:a5:de:6d:47:71:d4:5d:
2a:6e:c8:b8:ae:d9:a2:e1:39:1f:7e:d7:2d:3c:24:
af:d5:50:a0:f1:7e:08:bb:65:b6:74:ef:20:46:e1:
48:96:21:75:55:9e:36:40:47:da:e1:d7:f8:10:33:
fd:35:53:22:42:ea:84:49:1a:29:c6:e4:3d:a7:d2:
21:3e:97:d1:db:0d:8f:27:4b:ab:5f:72:4e:66:5a:
e7:46:af:f7:bb:e6:d4:5c:43:8a:8c:64:f1:54:4f:
f1:9f:91:9c:a3:72:a4:de:69:39:6f:02:3e:e3:52:
45:af:72:fb:bf:fc:73:06:71:ab:d8:ac:4d:04:54:
5b:0b:c1:c6:84:86:dd:51:69:51:89:4f:eb:52:22:
80:f2:fb:50:0d:38:c0:8c:13:ec:f5:d6:18:3f:20:
66:ef:68:1a:15:7e:3b:68:3f:4f:e1:11:36:89:6c:
f8:8f:42:83:9e:3c:16:c0:75:33:e3:5e:db:22:98:
42:38:5a:e0:c7:97:1f:35:7a:9d:3c:da:55:64:a7:
67:f0:0a:91:09:6a:87:e5:ad:d5:13:99:23:2b:cb:
6c:dd:af:70:a5:ce:66:b9:25:a1:ae:57:88:0a:0b:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:01:4B:EF:82:67:E0:D6:4C:BB:3C:6A:62:B7:FD:ED:77:DF:03
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/NV8BS--CZ-DWTLs8amK3_e133wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:200a::-2a05:b0c6:200f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:eb:b2:4b:58:50:3b:ae:7c:46:d6:a9:9e:cc:3a:7d:25:79:
68:50:35:fc:15:bf:7e:10:3e:22:7e:26:90:a7:6d:df:85:41:
14:6c:bd:3c:b2:80:fc:e3:8e:8c:9c:55:63:0e:bd:ff:0a:51:
7e:6e:e5:a9:35:6a:06:6f:91:4f:a5:65:09:3d:4b:ab:bb:7b:
94:66:45:24:a1:94:d8:9a:a9:98:e8:52:d5:d4:21:84:3a:8c:
f8:1e:62:9f:8e:6a:90:15:fb:e5:6b:8b:3b:4d:2b:34:44:9c:
f7:e4:a1:a0:78:f5:b4:86:74:b3:fd:4f:12:b5:ca:37:f1:1a:
c3:bc:f3:c1:14:85:5b:bd:45:fd:08:2d:b5:4f:7d:08:37:9c:
36:5d:ed:bb:a6:07:94:91:53:07:84:29:15:95:94:89:1f:62:
0f:90:fe:f7:8a:ca:26:37:b5:8d:7c:6a:4b:1c:a1:c3:cf:14:
41:dd:4c:e3:0a:73:ee:46:92:51:e4:b3:82:a8:46:a6:ca:f8:
60:db:7a:a9:5d:ef:cf:5c:82:4a:2f:28:8d:14:d9:47:1b:47:
ba:6c:ea:43:82:62:8a:37:35:fa:dd:ed:85:3c:09:0b:53:1f:
1f:b9:6e:29:5c:48:a4:8f:7a:d2:9c:27:9c:55:82:e2:52:7a:
b1:a5:0d:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIED8FedTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MjI4MzQ4ZTkwNTQ5NzNkN2E1ZjgxOTNiZDRlNWM0NGY2NzM5OWUxMB4XDTIyMDEw
MTA5NTcwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzU1ZjAxNGJlZjgy
NjdlMGQ2NGNiYjNjNmE2MmI3ZmRlZDc3ZGYwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALifLcaGfryDvHx3TmaDwMHL0gFxjpWl3m1HcdRdKm7IuK7Z
ouE5H37XLTwkr9VQoPF+CLtltnTvIEbhSJYhdVWeNkBH2uHX+BAz/TVTIkLqhEka
KcbkPafSIT6X0dsNjydLq19yTmZa50av97vm1FxDioxk8VRP8Z+RnKNypN5pOW8C
PuNSRa9y+7/8cwZxq9isTQRUWwvBxoSG3VFpUYlP61IigPL7UA04wIwT7PXWGD8g
Zu9oGhV+O2g/T+ERNols+I9Cg548FsB1M+Ne2yKYQjha4MeXHzV6nTzaVWSnZ/AK
kQlqh+Wt1ROZIyvLbN2vcKXOZrkloa5XiAoL9eMCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQ1XwFL74Jn4NZMuzxqYrf97XffAzAfBgNVHSMEGDAWgBTCKDSOkFSXPXpf
gZO9TlxE9nOZ4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dpZzBqcEJVbHoxNlg0R1R2VTVjUlBaem1lRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2MvZjE2Nzk0LTkxYWQtNDk4NC05YzZjLWU4OGZmZjgyZDU1My8x
L05WOEJTLS1DWi1EV1RMczhhbUszX2UxMzN3TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Mv
ZjE2Nzk0LTkxYWQtNDk4NC05YzZjLWU4OGZmZjgyZDU1My8xL3dpZzBqcEJVbHox
Nlg0R1R2VTVjUlBaem1lRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAIwFDASAwcBKgWwxiAKAwcEKgWwxiAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCO67JLWFA7rnxG1qmezDp9JXloUDX8Fb9+ED4ifiaQ
p23fhUEUbL08soD8446MnFVjDr3/ClF+buWpNWoGb5FPpWUJPUuru3uUZkUkoZTY
mqmY6FLV1CGEOoz4HmKfjmqQFfvla4s7TSs0RJz35KGgePW0hnSz/U8Stco38RrD
vPPBFIVbvUX9CC21T30IN5w2Xe27pgeUkVMHhCkVlZSJH2IPkP73isomN7WNfGpL
HKHDzxRB3UzjCnPuRpJR5LOCqEamyvhg23qpXe/PXIJKLyiNFNlHG0e6bOpDgmKK
NzX63e2FPAkLUx8fuW4pXEikj3rSnCecVYLiUnqxpQ3p
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:17 2024 by rpki-client on console-ams.rpki-client.org