Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/nxbZRK9cz9v6Ehm-eEEtJLswCxA.roa
File: nxbZRK9cz9v6Ehm-eEEtJLswCxA.roa (raw, json)
Hash identifier: u+Zt6RfmNkUaP17otOR6TUPdpWkrmNzRIC8e6Joqvvg=
Subject key identifier: 9F:16:D9:44:AF:5C:CF:DB:FA:12:19:BE:78:41:2D:24:BB:30:0B:10
Certificate issuer: /CN=8da152983240e90495f7605c442547d90283e1e0
Certificate serial: 824A86
Authority key identifier: 8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaFSmDJA6QSV92BcRCVH2QKD4eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/nxbZRK9cz9v6Ehm-eEEtJLswCxA.roa
Signing time: Sat 01 Jan 2022 02:55:18 +0000
ROA not before: Sat 01 Jan 2022 02:55:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.52.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8538758 (0x824a86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da152983240e90495f7605c442547d90283e1e0
Validity
Not Before: Jan 1 02:55:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f16d944af5ccfdbfa1219be78412d24bb300b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:d6:7f:28:bd:ac:14:0e:b5:7e:fc:57:ce:
81:d3:42:38:2c:cf:40:c9:c3:fd:7d:1c:0c:e6:7a:
c9:8a:66:79:a1:04:b6:d0:f2:68:a5:a8:a1:8a:ee:
1c:49:a4:0c:c5:43:fd:9f:40:65:fe:f9:77:5e:08:
23:3e:85:c6:c8:96:4b:32:14:e7:62:56:40:a1:51:
37:ce:b5:70:d3:e1:e0:ae:4b:04:12:ba:c3:f6:4f:
08:0d:46:3a:6a:74:22:76:8f:a4:94:80:9e:a6:dd:
f6:b1:31:6f:09:75:0d:88:c0:8b:4a:82:8f:7a:8d:
e9:c6:d4:86:ad:d5:11:a3:97:b8:da:2f:f1:84:3c:
81:64:f6:cf:13:b4:ba:f8:8b:65:19:c0:dd:01:db:
b5:6b:ea:21:c2:69:ef:df:7f:52:b9:95:bf:51:f3:
a6:28:3a:cd:bd:56:0e:41:75:47:24:e2:fe:03:e9:
39:76:ca:2e:64:14:af:3b:b5:42:a1:b5:ee:3b:99:
4b:8f:38:a0:42:b4:4a:d3:82:4d:d5:d2:9f:6d:10:
34:75:f7:13:1b:bf:9d:fa:53:ff:36:b9:87:c7:a4:
4d:8e:05:7c:58:de:16:c6:e4:52:59:4a:1a:7e:0a:
3e:73:19:5d:d5:69:e2:7a:f6:54:7c:29:c7:31:18:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:D9:44:AF:5C:CF:DB:FA:12:19:BE:78:41:2D:24:BB:30:0B:10
X509v3 Authority Key Identifier:
keyid:8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaFSmDJA6QSV92BcRCVH2QKD4eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/nxbZRK9cz9v6Ehm-eEEtJLswCxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/jaFSmDJA6QSV92BcRCVH2QKD4eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4b:45:c4:3f:6e:b2:c2:09:74:da:f2:64:14:dd:0a:d0:5c:
01:61:cb:a0:c8:03:e1:02:31:b3:5d:51:7a:62:70:0d:00:e7:
b7:56:9c:21:b8:1d:43:dc:f3:9b:fd:be:28:ce:0c:bf:78:f8:
08:be:fd:03:25:23:9d:4d:59:10:8d:e3:58:16:c1:e8:2c:9c:
bd:d8:0d:7b:eb:b0:34:8c:be:08:e3:93:0c:25:93:6a:ea:63:
37:07:62:a9:b5:9e:83:70:15:a5:65:66:a8:08:bb:d1:db:bf:
11:f5:a6:7e:57:da:99:15:94:fe:62:39:97:eb:87:77:6f:dc:
b9:d6:f6:59:82:bb:0e:3f:c4:a3:f6:69:79:2b:b6:d3:5b:34:
8a:ee:3e:ac:c2:7c:7c:17:0d:9a:b9:d4:10:7b:af:9d:97:33:
31:e1:98:9d:29:03:ac:d5:5a:1e:9a:a5:b5:16:84:77:d0:0c:
60:ce:44:0a:13:24:23:3e:36:ea:35:ad:56:87:3b:fb:fa:1a:
f4:d6:a4:fa:5f:bd:1d:eb:a2:86:55:93:b3:a4:cf:69:58:32:
47:95:ab:34:fd:f8:75:2c:0c:c2:d2:df:a9:c3:84:e9:14:95:
00:63:a1:a4:04:43:e4:80:da:1a:ec:6b:69:4d:70:b4:28:e0:
d3:a2:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:46 2023 by rpki-client on console-fra.rpki-client.org