Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/nv0542V-QG9XIm4H4JK5aNu-Ubc.roa
File: nv0542V-QG9XIm4H4JK5aNu-Ubc.roa (raw, json)
Hash identifier: CaYadeFY/im0yJFHrO5IRysyhLRS/VASY7aTbDF4poY=
Subject key identifier: 9E:FD:39:E3:65:7E:40:6F:57:22:6E:07:E0:92:B9:68:DB:BE:51:B7
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018437D917B28776A79B272D467516DBC3F3
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/nv0542V-QG9XIm4H4JK5aNu-Ubc.roa
Signing time: Wed 02 Nov 2022 10:18:05 +0000
ROA not before: Wed 02 Nov 2022 10:18:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39526
IP address blocks: 2a0d:2146:8580::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:d9:17:b2:87:76:a7:9b:27:2d:46:75:16:db:c3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Nov 2 10:18:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9efd39e3657e406f57226e07e092b968dbbe51b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:13:c9:ac:96:55:95:a0:4c:89:ed:34:c2:68:
03:fb:e3:44:d3:c4:85:cd:e4:dc:07:0d:88:c3:5b:
84:fd:7f:18:db:43:44:4f:88:c4:5b:54:de:49:97:
be:a0:56:3c:e1:32:59:4f:51:e3:a9:c0:24:41:ba:
28:1f:ec:d1:90:8b:5e:98:a2:c9:74:66:64:ac:32:
77:11:5e:9c:8c:eb:1b:c7:b1:79:00:bb:96:7f:5d:
c1:9a:16:96:79:9f:10:4e:97:25:51:9c:74:8a:e7:
47:52:0b:7f:eb:aa:dd:c4:0c:99:51:68:6c:04:d8:
4f:0d:d0:6f:21:fc:1c:ea:94:f9:56:2e:d9:cf:18:
2f:ce:2d:85:18:0c:6f:d7:92:4c:47:1b:10:15:d0:
82:3f:fb:fb:02:7a:80:03:d0:73:0e:36:25:bf:fd:
40:fa:6b:c2:dc:8e:e2:5e:30:32:99:5b:29:d9:cb:
ce:b7:ae:8b:a2:39:0e:5f:6d:5a:23:d1:3e:0f:5a:
f5:82:10:13:a8:49:5c:d9:ca:be:00:23:f2:65:ed:
3c:02:f2:91:d3:28:2e:4d:d2:3d:75:d9:c7:7b:c8:
c0:90:a0:92:5f:b1:cf:a2:20:02:1c:15:41:8a:e6:
5f:af:5a:93:03:81:f3:71:5b:7a:bc:09:2a:2a:29:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FD:39:E3:65:7E:40:6F:57:22:6E:07:E0:92:B9:68:DB:BE:51:B7
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/nv0542V-QG9XIm4H4JK5aNu-Ubc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8580::/44
Signature Algorithm: sha256WithRSAEncryption
4d:55:aa:82:ca:11:40:2a:e2:df:77:08:6b:1e:b0:ae:c7:8a:
ce:2c:40:66:b9:34:f1:f5:a1:c5:bf:17:d0:81:8a:72:ca:8f:
1b:c7:0c:d4:93:3d:1e:05:ee:2a:41:cd:24:4a:57:81:7e:e6:
f2:c9:48:db:a7:f9:b2:e5:1c:c6:cc:c2:64:1f:a6:52:de:e2:
78:cc:02:7a:71:40:aa:58:9b:02:e7:a9:1b:99:11:59:ab:39:
de:b4:64:7a:4f:59:d9:d2:5d:8d:24:f5:77:90:9d:1b:eb:75:
47:00:7a:e2:ca:e1:e6:df:91:d5:05:1a:1c:57:ef:3d:ae:ac:
44:73:1d:eb:12:0f:7e:c4:c1:49:ee:0d:db:85:48:a0:c0:dc:
ed:d4:e5:8c:e2:e1:8f:3c:f4:26:3c:c5:d3:68:c8:e8:3f:3b:
3c:a7:d3:d0:1e:23:1d:dc:d0:e1:ce:ce:40:44:c1:c2:bc:2c:
c2:0f:0a:99:ca:71:48:f2:a5:de:b1:cb:99:c0:12:f2:33:ce:
69:a8:d7:39:2a:67:17:80:b2:21:c8:37:8d:be:c8:c9:d1:6b:
e7:32:ba:94:bf:cb:17:5e:be:68:00:78:6c:9b:7d:47:c0:9a:
3a:60:82:b0:0e:0e:45:a1:8c:9c:08:a4:7f:fe:79:72:ac:c2:
52:1a:ae:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org