Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/3AaYxqs87X0C9cbP8C8ebDNwdMo.roa
File: 3AaYxqs87X0C9cbP8C8ebDNwdMo.roa (raw, json)
Hash identifier: Xujesdx7aY44I+3AJAZHaa8R10ppangYMxw6tiFUKSg=
Subject key identifier: DC:06:98:C6:AB:3C:ED:7D:02:F5:C6:CF:F0:2F:1E:6C:33:70:74:CA
Certificate issuer: /CN=9efae59ebf98b0100bf14c06ca6bee266876cced
Certificate serial: 018BB7D7
Authority key identifier: 9E:FA:E5:9E:BF:98:B0:10:0B:F1:4C:06:CA:6B:EE:26:68:76:CC:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvrlnr-YsBAL8UwGymvuJmh2zO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/3AaYxqs87X0C9cbP8C8ebDNwdMo.roa
Signing time: Sat 25 Jun 2022 11:02:10 +0000
ROA not before: Sat 25 Jun 2022 11:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209173
IP address blocks: 2.56.36.0/23 maxlen: 23
2.56.38.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25933783 (0x18bb7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efae59ebf98b0100bf14c06ca6bee266876cced
Validity
Not Before: Jun 25 11:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc0698c6ab3ced7d02f5c6cff02f1e6c337074ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:14:bb:bb:da:d9:9b:03:ec:11:fd:15:97:
c4:32:74:d5:3c:92:97:bd:cc:b5:58:c9:84:de:ad:
82:ce:d8:8c:fe:42:2e:9d:d0:e6:0b:f1:f8:65:54:
e3:ae:f9:fa:94:c6:92:6b:2a:fe:5f:be:8f:39:bf:
30:50:60:bc:15:e6:8f:9f:fd:cc:21:e9:b7:39:a6:
d1:c6:9c:69:df:62:a3:81:6d:71:ed:e5:a3:01:17:
c3:73:b8:e8:6a:9d:ca:5f:67:28:83:44:a4:1b:0f:
3f:e8:b7:36:96:88:37:07:ef:5f:6c:79:69:f7:ce:
d5:4d:3a:14:3c:98:f5:04:93:86:e4:c3:1d:2d:e6:
9b:0d:80:d3:8d:f0:ea:e1:a0:1e:38:09:f2:84:b5:
a3:3d:ed:ce:f6:46:36:2e:be:c8:1f:66:d2:21:54:
09:07:d6:2c:48:2a:bb:62:e0:45:c9:07:09:92:71:
f1:b6:88:3f:7d:08:d5:f7:27:ba:9c:0f:00:36:da:
cf:82:c4:a5:ca:6a:03:82:8e:d8:9d:d7:42:8c:12:
54:9f:60:d8:17:db:f9:51:eb:04:e6:1c:86:df:17:
4e:b2:91:58:22:19:ba:74:a6:9d:0a:f7:96:db:5b:
a9:67:e7:d2:95:05:ef:70:d2:fe:0d:b3:2d:f7:97:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:98:C6:AB:3C:ED:7D:02:F5:C6:CF:F0:2F:1E:6C:33:70:74:CA
X509v3 Authority Key Identifier:
keyid:9E:FA:E5:9E:BF:98:B0:10:0B:F1:4C:06:CA:6B:EE:26:68:76:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvrlnr-YsBAL8UwGymvuJmh2zO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/3AaYxqs87X0C9cbP8C8ebDNwdMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/nvrlnr-YsBAL8UwGymvuJmh2zO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.36.0/22
Signature Algorithm: sha256WithRSAEncryption
03:fd:94:1f:c8:cc:80:fe:a8:57:5f:02:bb:45:4c:c7:80:9d:
0c:25:9b:10:04:76:4f:99:7c:e6:db:ba:70:b7:40:71:dd:11:
13:ba:43:e2:61:9b:e4:d0:3d:fe:ac:bd:f7:55:a0:be:cc:ae:
a1:33:24:43:25:db:97:5c:bb:ef:45:f6:f8:57:c0:9b:bc:f6:
be:df:79:b6:0b:16:15:4e:d1:b4:4a:35:23:68:72:97:04:c2:
a5:54:86:35:58:49:4e:b8:67:49:e0:98:a8:05:2f:6f:f0:69:
93:b1:48:8c:34:6c:a2:3f:8d:b1:b4:ed:9e:5f:3a:3e:51:04:
62:74:8a:50:4c:65:0c:2f:6d:dc:fd:28:f9:e6:8c:4f:12:2a:
cf:df:af:81:b4:45:4b:64:c3:b0:7f:dd:fb:6e:9e:41:89:83:
38:2a:42:d3:75:a0:59:c6:61:ca:6c:65:e7:69:8c:59:08:af:
e9:fe:1f:98:10:05:5f:2c:f1:90:0b:79:1a:f4:8d:e5:a5:d7:
85:e2:ff:0d:40:ab:74:57:c1:0c:41:64:8a:8c:d4:4c:63:21:
e2:4e:28:5a:28:bf:c3:5b:64:4d:7e:1e:66:ef:b5:3a:12:31:
f3:6d:0d:56:4e:ae:f4:1e:cb:e5:3f:41:95:56:0b:9c:54:08:
aa:37:8e:77
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAYu31zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZWZhZTU5ZWJmOThiMDEwMGJmMTRjMDZjYTZiZWUyNjY4NzZjY2VkMB4XDTIyMDYy
NTExMDIxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGMwNjk4YzZhYjNj
ZWQ3ZDAyZjVjNmNmZjAyZjFlNmMzMzcwNzRjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+aFLu72tmbA+wR/RWXxDJ01TySl73MtVjJhN6tgs7YjP5C
Lp3Q5gvx+GVU4675+pTGkmsq/l++jzm/MFBgvBXmj5/9zCHptzmm0cacad9io4Ft
ce3lowEXw3O46Gqdyl9nKINEpBsPP+i3NpaINwfvX2x5affO1U06FDyY9QSThuTD
HS3mmw2A043w6uGgHjgJ8oS1oz3tzvZGNi6+yB9m0iFUCQfWLEgqu2LgRckHCZJx
8baIP30I1fcnupwPADbaz4LEpcpqA4KO2J3XQowSVJ9g2Bfb+VHrBOYcht8XTrKR
WCIZunSmnQr3lttbqWfn0pUF73DS/g2zLfeXDDcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTcBpjGqzztfQL1xs/wLx5sM3B0yjAfBgNVHSMEGDAWgBSe+uWev5iwEAvx
TAbKa+4maHbM7TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L252cmxuci1Zc0JBTDhVd0d5bXZ1Sm1oMnpPMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTcvNGYyZTA5LTY4ODQtNDY2ZS1hZmVmLWEwZjVjNzgxMjdiYi8x
LzNBYVl4cXM4N1gwQzljYlA4QzhlYkROd2RNby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcv
NGYyZTA5LTY4ODQtNDY2ZS1hZmVmLWEwZjVjNzgxMjdiYi8xL252cmxuci1Zc0JB
TDhVd0d5bXZ1Sm1oMnpPMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgI4JDANBgkqhkiG9w0BAQsFAAOC
AQEAA/2UH8jMgP6oV18Cu0VMx4CdDCWbEAR2T5l85tu6cLdAcd0RE7pD4mGb5NA9
/qy991WgvsyuoTMkQyXbl1y770X2+FfAm7z2vt95tgsWFU7RtEo1I2hylwTCpVSG
NVhJTrhnSeCYqAUvb/Bpk7FIjDRsoj+NsbTtnl86PlEEYnSKUExlDC9t3P0o+eaM
TxIqz9+vgbRFS2TDsH/d+26eQYmDOCpC03WgWcZhymxl52mMWQiv6f4fmBAFXyzx
kAt5GvSN5aXXheL/DUCrdFfBDEFkiozUTGMh4k4oWii/w1tkTX4eZu+1OhIx820N
Vk6u9B7L5T9BlVYLnFQIqjeOdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:40 2024 by rpki-client on console-ams.rpki-client.org