Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/NrjIMKrolhxeYZJ2U4lNlax_2Vs.roa
File: NrjIMKrolhxeYZJ2U4lNlax_2Vs.roa (raw, json)
Hash identifier: NQgdoASdEGV8rl5AbRoiN7DN/czCgFm6o9KJsRKjsdo=
Subject key identifier: 36:B8:C8:30:AA:E8:96:1C:5E:61:92:76:53:89:4D:95:AC:7F:D9:5B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 1E14D1
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/NrjIMKrolhxeYZJ2U4lNlax_2Vs.roa
Signing time: Tue 12 Apr 2022 17:53:27 +0000
ROA not before: Tue 12 Apr 2022 17:53:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206125
IP address blocks: 2a12:bec0:8f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1971409 (0x1e14d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 12 17:53:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36b8c830aae8961c5e61927653894d95ac7fd95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:85:f1:bd:7f:1d:55:9e:05:57:43:7d:c4:
bb:32:98:54:b3:78:7a:49:f7:d5:03:ba:ed:d5:43:
ea:8d:e1:62:99:1b:de:83:a5:83:62:0a:57:09:17:
a0:2c:62:e5:79:e3:af:72:f9:d8:33:20:e3:00:5e:
97:36:b1:29:dc:88:e6:aa:99:5e:af:0f:73:93:cb:
5a:b6:f7:84:31:3d:20:cd:8a:b7:95:e8:18:cf:d4:
5f:3e:18:78:a9:f0:95:92:1a:c6:62:80:da:ff:d2:
c7:86:a9:e2:69:00:fc:6a:43:b5:09:53:c2:8e:ca:
86:62:65:e6:bb:59:90:c6:74:c7:0e:b0:c2:5e:4b:
e2:a0:6f:0d:39:fd:cd:ed:57:d3:0d:b3:27:ae:74:
24:1e:83:b7:0a:56:e6:28:c4:e2:a1:b8:77:ab:32:
55:85:ef:58:df:43:bc:6d:d9:a6:cf:fc:34:ce:e5:
26:36:53:74:f1:01:ec:97:81:a6:bc:ce:8d:56:d5:
53:b9:ed:48:e6:16:e8:54:41:7f:79:6c:12:e7:9d:
46:57:bf:63:55:86:d1:a5:5b:9f:8e:ea:54:07:96:
fb:05:ab:10:2d:80:85:ee:5b:bf:bc:98:f4:d4:4f:
e7:c4:d2:d5:e4:46:8a:59:43:5a:4e:57:45:c4:cc:
e1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B8:C8:30:AA:E8:96:1C:5E:61:92:76:53:89:4D:95:AC:7F:D9:5B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/NrjIMKrolhxeYZJ2U4lNlax_2Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:8f::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c2:7a:d1:33:9f:25:03:2f:80:0f:f8:ce:37:00:cb:14:d4:
0a:e4:2d:3d:4f:4c:64:d7:a0:ec:1d:48:81:cf:c3:d6:e4:1e:
be:72:a9:f1:f6:c3:13:7b:93:44:71:b6:2a:d9:5e:71:96:03:
d7:96:d8:05:84:a9:3d:48:79:92:25:8e:e5:43:f5:9d:50:7b:
aa:ef:17:e6:39:a9:c9:9b:9f:3f:a8:53:a2:26:d3:76:d6:a8:
4d:76:ee:45:49:fb:44:37:cc:d6:60:1f:fe:d9:e1:8c:27:72:
48:87:45:2b:d9:34:17:d5:ee:bf:06:bb:dd:0a:0f:fe:9c:30:
67:8a:8e:17:9d:10:0f:bb:c6:d7:d6:d5:57:e3:ef:99:25:09:
e1:4f:6e:da:c4:68:43:18:9a:e4:be:d7:5c:ed:ab:b2:d6:40:
c0:2c:25:42:73:4d:b9:14:ff:0b:3f:bf:c7:bc:e1:41:39:89:
34:7f:78:29:c7:c6:95:6c:58:47:a7:59:14:78:ed:63:2e:c9:
dc:f9:1a:01:1c:01:3b:1a:7a:db:70:45:f7:3f:98:49:73:6c:
bb:78:c6:25:e7:45:65:67:6a:80:67:11:24:0e:65:00:ae:2e:
dd:ef:98:39:33:65:1a:c7:66:21:1b:9a:b5:c7:50:bd:c4:75:
c2:19:66:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org