Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/NaDQugA3e-F7b_py6bqVNt8j0MU.roa
File: NaDQugA3e-F7b_py6bqVNt8j0MU.roa (raw, json)
Hash identifier: SsP5Qvx2Lbf7tVrwC1EVgH+2yxCLpM2ygfdoVtSkOs4=
Subject key identifier: 35:A0:D0:BA:00:37:7B:E1:7B:6F:FA:72:E9:BA:95:36:DF:23:D0:C5
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 07C00968
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/NaDQugA3e-F7b_py6bqVNt8j0MU.roa
Signing time: Sat 01 Jan 2022 15:02:49 +0000
ROA not before: Sat 01 Jan 2022 15:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57503
IP address blocks: 2001:6d0:4009::/48 maxlen: 64
2001:6d0:4005::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130025832 (0x7c00968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 15:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35a0d0ba00377be17b6ffa72e9ba9536df23d0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:70:d1:b8:09:5e:e0:9d:38:d4:05:b5:54:
b4:7a:7a:07:59:ab:b7:84:52:06:c7:47:03:ac:f9:
9d:b8:69:09:a9:d1:3d:61:9f:20:98:ef:bc:d9:7a:
c5:73:5c:ac:9f:ce:5b:19:fd:ec:d8:92:53:14:69:
26:43:fe:c3:7f:59:c8:e6:7f:1e:18:c2:fe:ab:a3:
8f:97:83:c6:3a:55:c8:c6:cf:94:19:11:56:71:e0:
a2:d8:16:da:85:77:8a:87:06:9f:18:20:1b:bb:7b:
57:bb:a0:d3:a0:b2:51:ed:db:25:f8:7a:ee:ad:df:
e0:31:6d:7b:6b:79:c1:1f:58:59:5b:af:03:6b:0d:
a2:f3:db:14:3e:db:e8:fd:b3:f4:e8:e8:95:3c:5c:
ff:a4:0d:c1:a3:87:ae:24:46:97:31:a7:3d:45:a2:
49:a9:45:08:7c:43:8e:81:c8:c6:1b:1b:da:15:86:
23:83:9d:d4:53:bf:83:28:aa:12:28:83:fd:94:1b:
9d:30:ad:43:b3:f6:15:db:2e:40:aa:21:aa:0d:d3:
10:68:8d:eb:5e:ed:a8:95:fc:ba:4d:3d:ea:0d:9d:
0d:2c:ab:9c:97:f9:09:ad:19:8f:59:e1:7a:9d:30:
55:6c:cb:51:d5:19:3a:35:1f:a7:67:f3:82:1c:a7:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A0:D0:BA:00:37:7B:E1:7B:6F:FA:72:E9:BA:95:36:DF:23:D0:C5
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/NaDQugA3e-F7b_py6bqVNt8j0MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:6d0:4005::/48
2001:6d0:4009::/48
Signature Algorithm: sha256WithRSAEncryption
7e:2b:15:ad:7e:e3:be:07:1a:6c:04:6e:cd:83:34:0d:f7:f6:
15:83:d2:1d:08:ea:14:18:53:de:26:80:5f:d1:47:48:74:c0:
49:28:1d:d6:b4:89:3d:ff:67:80:0b:4e:44:08:ee:e4:3b:4a:
01:81:0b:39:a5:fb:57:40:69:a7:46:2d:71:61:dd:24:d0:ba:
49:7e:06:72:ca:6e:ac:36:c8:9c:bd:a9:78:02:ab:1e:0d:de:
a2:9d:31:f0:47:e7:e6:f1:7e:97:4e:70:31:74:b1:f4:b9:26:
0e:2a:06:8e:1c:dc:2e:8b:26:3d:93:c4:66:b9:17:20:4e:18:
75:87:95:67:2f:94:42:da:b8:7d:53:8a:84:9e:2e:c7:15:b7:
84:a3:dc:68:f1:28:6d:32:d6:0b:e1:82:66:d2:cf:98:b1:3a:
3a:96:5c:55:ac:24:3b:ae:e4:fe:6f:e3:2e:3b:ec:9f:fe:1e:
26:49:fa:f8:d9:ad:6e:9e:f1:ff:7e:85:fc:97:97:4b:a5:a5:
da:80:70:1d:d5:84:e2:2d:f6:12:a1:da:3c:03:ad:fe:08:cd:
0d:6a:ca:7f:f0:89:8e:dd:2c:84:cb:9e:ee:91:ed:1c:90:af:
c0:10:35:e1:c0:9a:97:d5:a7:d8:71:1b:c5:19:9e:b5:7a:a2:
4d:46:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:51 2024 by rpki-client on console-fra.rpki-client.org