Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/NJkOnCRlR7Fwma_6-UiV1Auflzc.roa
File: NJkOnCRlR7Fwma_6-UiV1Auflzc.roa (raw, json)
Hash identifier: ZD96boi4YwAc7x3LsoNn6w/amahAQIl4km5RyXm+80U=
Subject key identifier: 34:99:0E:9C:24:65:47:B1:70:99:AF:FA:F9:48:95:D4:0B:9F:97:37
Certificate issuer: /CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Certificate serial: 01856F3940EB53C4612484CFF9F39D86D259
Authority key identifier: 50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/NJkOnCRlR7Fwma_6-UiV1Auflzc.roa
Signing time: Sun 01 Jan 2023 21:25:01 +0000
ROA not before: Sun 01 Jan 2023 21:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209395
IP address blocks: 2001:678:a08::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:40:eb:53:c4:61:24:84:cf:f9:f3:9d:86:d2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Validity
Not Before: Jan 1 21:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34990e9c246547b17099affaf94895d40b9f9737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:c2:d3:28:fb:24:d0:27:eb:51:d4:61:41:
2e:52:3e:6a:05:3a:67:d7:48:38:22:40:78:de:d4:
8e:e9:f6:77:96:c8:a5:2e:cd:3d:1d:8f:ea:69:91:
b7:b3:92:16:f2:46:e5:3f:9d:1a:d3:c6:c0:3d:d5:
26:47:07:77:83:ff:34:a7:47:65:b0:45:5e:69:c0:
7a:d9:42:8b:40:f3:0f:1b:e7:6b:f9:67:94:5d:41:
a2:b4:f9:a1:dc:0b:3d:51:7d:3d:4b:56:d8:42:9f:
8c:f5:ae:51:00:93:29:41:af:4c:66:b7:9f:e5:50:
f4:d7:73:8f:55:3c:50:a1:02:28:fe:8f:fa:5f:95:
b9:cc:8b:52:45:46:d2:4e:03:a3:d0:89:f1:5d:b2:
03:27:6b:32:e9:27:d8:ed:38:f7:81:74:92:e3:e7:
5d:bc:ec:50:51:e4:83:3e:d9:d9:8e:6b:04:2e:d5:
89:41:98:f0:33:7f:04:fd:9e:17:ec:2d:f7:d6:2b:
1d:55:23:6e:35:fe:68:a0:9d:80:ea:5d:fd:03:b6:
70:14:14:14:09:cc:62:54:74:dc:f8:87:37:38:f4:
db:ba:3a:ec:1e:02:90:cf:17:50:d9:00:2f:a7:f2:
b2:cc:ba:86:8b:76:62:ab:85:62:5e:2f:cd:92:38:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:0E:9C:24:65:47:B1:70:99:AF:FA:F9:48:95:D4:0B:9F:97:37
X509v3 Authority Key Identifier:
keyid:50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/NJkOnCRlR7Fwma_6-UiV1Auflzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a08::/48
Signature Algorithm: sha256WithRSAEncryption
3a:21:4f:ad:e1:e3:d4:ef:c7:32:3b:a9:91:b6:d1:3a:05:6e:
ef:26:b2:28:c6:1d:cb:54:33:a5:2f:be:3e:12:d7:71:4f:05:
53:12:b6:ed:df:b3:f0:58:d9:a7:5f:fd:02:b5:60:d0:b9:82:
c4:58:93:28:c6:fb:27:a1:2b:7d:fc:39:82:89:b3:3f:80:33:
58:0f:6f:b0:3f:c5:8e:56:b1:cb:af:fa:64:a6:df:02:fe:32:
57:24:c4:55:79:24:fe:bf:de:42:25:cc:88:60:9e:37:be:59:
2b:8a:0d:df:89:c4:a5:e8:a6:5c:68:6c:af:6a:82:36:cf:ad:
61:79:cc:d7:57:82:cb:2a:b2:81:50:56:bc:fc:ae:f6:be:c1:
9b:08:f2:d3:06:e9:d9:cc:b0:35:41:f4:28:c5:f7:15:f5:16:
34:3e:1f:e6:5a:ef:2a:02:42:a3:28:96:e4:50:8e:13:b9:05:
6d:49:2c:2d:90:89:b5:11:fd:08:ae:e6:35:16:0b:60:a5:d4:
13:95:77:c5:8c:c0:35:ef:12:80:f4:a1:e2:b5:5d:8e:57:19:
b0:b1:b0:1d:8e:41:59:4f:ae:64:34:55:42:63:bc:e7:58:6b:
ee:cb:b7:4e:ba:87:af:f2:0b:bd:38:51:c7:8b:00:00:2c:2a:
09:fc:b0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:44:47 2025 by rpki-client