Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/nPxQKZhju73dBHCZUCrWGElTHA4.roa
File: nPxQKZhju73dBHCZUCrWGElTHA4.roa (raw, json)
Hash identifier: lU8ujOomMabTU8mxQd5w8UqAclBm6cn9RTgE6nf+Q+4=
Subject key identifier: 9C:FC:50:29:98:63:BB:BD:DD:04:70:99:50:2A:D6:18:49:53:1C:0E
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 018B14EB709814E1C9411D921AEBCF88DE93
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/nPxQKZhju73dBHCZUCrWGElTHA4.roa
Signing time: Mon 09 Oct 2023 14:50:55 +0000
ROA not before: Mon 09 Oct 2023 14:50:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208626
IP address blocks: 2a11:7e40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:eb:70:98:14:e1:c9:41:1d:92:1a:eb:cf:88:de:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Oct 9 14:50:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cfc50299863bbbddd047099502ad61849531c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:75:1e:87:79:6a:9c:e8:9d:52:a9:df:a3:
85:28:28:d3:97:22:64:0c:cf:d6:f6:c2:75:06:4c:
80:44:eb:42:54:33:c0:74:5f:62:16:f5:42:e7:4d:
e2:12:54:28:45:33:1a:c8:e4:75:06:9c:0b:a7:eb:
88:ee:e2:d9:7f:5d:ca:12:de:45:a2:c2:27:fb:92:
2f:7e:ee:5e:52:b3:b0:ff:56:d6:ef:1a:c1:a2:63:
fd:9c:0d:31:3a:ef:2e:b2:d3:e3:ac:db:f7:01:2a:
fd:86:ed:a2:fb:50:65:1e:35:d5:6f:8b:be:81:af:
d5:88:eb:28:bd:0c:dd:81:a5:cf:dc:2c:12:2b:a3:
18:88:7a:58:9f:18:6e:06:0e:d5:20:24:42:b2:bb:
86:55:47:20:93:29:8b:83:41:44:53:a2:01:05:a7:
25:2f:96:6a:53:f8:e7:f8:68:f0:16:23:bd:ed:ae:
e6:26:ae:eb:4b:c3:34:30:29:9c:17:a3:ca:cf:2d:
8d:f5:dd:16:ed:ad:ec:44:27:f4:8f:be:0f:e0:76:
01:97:d8:38:53:1c:f4:15:2f:13:d4:45:ad:b4:36:
0d:79:c0:ec:0c:64:72:13:b9:e8:d0:44:80:10:41:
e8:74:a9:a0:65:b0:1f:d5:f1:51:0a:5e:98:65:e2:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FC:50:29:98:63:BB:BD:DD:04:70:99:50:2A:D6:18:49:53:1C:0E
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/nPxQKZhju73dBHCZUCrWGElTHA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7e40::/32
Signature Algorithm: sha256WithRSAEncryption
a7:e2:73:51:80:27:f4:f9:f9:79:46:76:5c:4c:db:b3:fe:cd:
f0:3c:36:db:de:e8:02:fc:09:71:f4:a9:31:47:87:89:f8:8d:
4a:66:fb:1d:a0:db:f1:ce:03:8d:7e:c2:2b:3d:05:6f:37:c4:
36:cc:0a:46:89:70:b1:6e:a2:a2:92:33:11:40:dc:e3:32:cd:
35:de:af:8b:11:29:96:14:44:53:7b:2c:13:49:3f:99:04:45:
a9:14:44:9e:46:3f:10:11:75:f9:3a:0a:72:82:b6:98:4c:ad:
c2:c4:a4:78:44:01:bd:98:cf:06:af:1d:71:3c:b8:5d:ff:62:
eb:24:ce:57:67:18:32:ad:22:08:43:63:31:30:13:50:62:2a:
d4:7e:24:db:06:27:d9:c2:13:09:ed:3b:18:06:7d:e4:13:d8:
55:f6:6e:a9:f5:40:15:4c:f4:80:25:a8:21:40:be:11:4a:b1:
0c:66:25:67:50:20:d4:6f:f2:9d:6a:4f:ea:7c:ef:0a:e2:2d:
21:90:eb:10:0d:ec:a5:62:c4:2a:5e:1b:b5:95:d8:fd:6b:c1:
54:e8:14:13:06:78:7f:1d:40:da:54:20:fa:9e:d9:0e:75:5e:
6e:f6:34:bd:c1:00:df:fa:ea:fc:c4:7a:74:5e:cb:cb:ad:59:
b8:bf:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:14 2025 by rpki-client