Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/nxBcc5F4yj2MSQsFmi4_ICRfA1c.roa
File: nxBcc5F4yj2MSQsFmi4_ICRfA1c.roa (raw, json)
Hash identifier: /f33ZBRxxAW8tBG0xA3w7jJFoDaT3AfvYBAYcrQPCKQ=
Subject key identifier: 9F:10:5C:73:91:78:CA:3D:8C:49:0B:05:9A:2E:3F:20:24:5F:03:57
Certificate issuer: /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial: 36DE67BE
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/nxBcc5F4yj2MSQsFmi4_ICRfA1c.roa
Signing time: Sat 01 Jan 2022 15:05:29 +0000
ROA not before: Sat 01 Jan 2022 15:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51103
IP address blocks: 2001:1b28:405::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920545214 (0x36de67be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
Validity
Not Before: Jan 1 15:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f105c739178ca3d8c490b059a2e3f20245f0357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:23:d8:df:04:5d:c3:f5:27:34:52:f3:b4:
8d:27:d8:e3:7f:9d:5c:df:62:41:e3:41:0e:21:f6:
a9:0b:98:9f:92:4d:9a:4c:86:a1:eb:69:77:25:dd:
ef:8f:f4:12:e8:09:ba:da:09:69:98:31:00:3c:57:
c0:8d:ea:b7:10:15:d3:3c:b5:ae:8d:36:d2:fa:b0:
6c:90:70:0f:ac:6d:2c:f2:93:44:00:43:c0:ef:b7:
6f:61:76:5f:e5:87:c5:58:e3:c1:d8:c6:56:53:95:
ad:04:0a:9d:ab:06:b5:f0:a0:4c:46:73:d8:9c:22:
5e:30:ed:ee:c5:60:42:37:ee:4d:3e:ae:97:d8:1a:
47:48:ba:19:12:d5:87:64:42:0b:22:4e:25:45:5d:
e6:f8:51:17:f3:48:01:57:2d:6e:6e:83:46:47:e1:
27:64:6a:af:6b:aa:95:45:3d:17:f1:b3:ac:bc:04:
2f:49:f1:ee:8a:07:2b:e5:4a:15:cb:09:c0:80:d0:
6c:9d:58:e9:df:c3:a7:a5:f4:7d:8f:eb:7a:e2:21:
16:83:38:81:d0:3a:6c:94:c2:36:5e:f4:cc:da:50:
a9:b2:47:28:f7:67:4f:98:88:63:88:e3:0f:68:f0:
d9:74:73:93:86:fa:e4:92:c8:15:7e:88:da:66:f5:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:10:5C:73:91:78:CA:3D:8C:49:0B:05:9A:2E:3F:20:24:5F:03:57
X509v3 Authority Key Identifier:
keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/nxBcc5F4yj2MSQsFmi4_ICRfA1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1b28:405::/48
Signature Algorithm: sha256WithRSAEncryption
99:0a:86:8d:5e:60:b1:71:88:c2:c3:10:ad:c9:77:fa:b0:0a:
a6:50:05:91:86:6c:53:55:a5:0d:7d:e2:1c:40:5e:c1:34:1b:
ef:4d:b5:ee:37:84:26:45:68:10:24:51:62:a1:8a:be:95:b5:
63:35:1d:c9:68:7e:ac:dd:44:94:bb:f2:9f:18:1a:46:65:17:
b6:5d:7d:2d:13:7f:7f:d6:11:2b:15:d5:a5:5d:8b:3b:08:24:
f4:02:26:80:4c:b5:a1:c9:71:c0:e1:8f:eb:c3:0e:d7:57:b0:
d6:79:25:4b:7e:74:e2:52:c5:cd:e2:bf:85:97:6f:8f:7a:27:
41:22:93:13:76:c8:c2:18:f5:98:d4:05:d2:03:8f:83:b5:58:
06:52:cd:01:ad:a2:5a:0b:3b:00:a8:aa:20:ac:0d:1b:e1:a1:
a7:e2:08:9f:e0:d2:cc:e3:59:d9:c7:68:7b:fb:c0:c6:4f:a9:
12:d1:e9:93:86:52:10:77:5d:53:ef:04:12:71:a6:c7:dd:56:
55:d5:1c:ca:fe:ad:88:dc:c7:d3:72:0e:74:6b:73:07:b7:ca:
71:ed:09:e2:ab:87:14:ee:f1:79:fc:50:b6:a0:79:a7:8b:e5:
5a:ca:92:b8:15:ed:dd:bd:87:6e:fe:87:91:42:8d:ff:6e:ac:
8d:ea:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:35 2024 by rpki-client on console-ams.rpki-client.org