Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/n5Ro8PZnMF_eQqlOB5hqhE9NAGY.roa
File: n5Ro8PZnMF_eQqlOB5hqhE9NAGY.roa (raw, json)
Hash identifier: e7HMc0mcM0AxidOXy76WCAtbAXs+IM39EwQTMdWg1/4=
Subject key identifier: 9F:94:68:F0:F6:67:30:5F:DE:42:A9:4E:07:98:6A:84:4F:4D:00:66
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 0183C5EAB3019F477E1B70DD115B4CEEBEC9
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/n5Ro8PZnMF_eQqlOB5hqhE9NAGY.roa
Signing time: Tue 11 Oct 2022 07:20:36 +0000
ROA not before: Tue 11 Oct 2022 07:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209216
IP address blocks: 2.56.76.0/22 maxlen: 22
2a09:d0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c5:ea:b3:01:9f:47:7e:1b:70:dd:11:5b:4c:ee:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Oct 11 07:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f9468f0f667305fde42a94e07986a844f4d0066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:37:87:5f:7f:47:02:26:2b:f2:16:7b:5f:
a5:98:ec:af:62:33:f1:b9:d1:70:96:c9:76:5f:31:
fa:51:81:c7:b1:4b:f2:25:63:b8:11:bb:26:3b:7c:
1f:e2:27:c2:fd:43:c7:08:82:b6:ec:b5:6e:a1:d7:
86:24:61:bc:7b:f1:28:0a:44:b4:6b:32:90:65:14:
ba:fb:cf:39:56:3f:76:2e:9f:c3:4f:c0:1e:16:79:
69:ea:4a:4b:b3:f2:b3:f1:91:87:10:15:84:b2:65:
52:98:98:03:96:d5:05:16:ef:ca:57:e6:3f:fc:50:
58:9f:af:f8:3b:b5:50:c7:21:db:48:af:93:ea:5c:
19:ba:d6:5a:83:7d:6c:63:60:ef:55:4c:0d:87:5e:
76:74:d4:ac:ac:4a:ec:03:25:b7:d4:bc:09:c2:da:
5f:ac:10:35:6d:19:27:12:8b:9a:05:4b:02:d0:d0:
f9:7f:a8:8d:04:01:67:fb:52:92:44:a5:7f:95:e9:
d9:0c:6d:f0:be:36:6e:c1:3e:2d:59:af:eb:e0:b2:
ba:ae:ee:16:ab:bf:48:0f:54:fa:74:01:35:5f:c6:
b4:3f:4f:e3:34:d8:50:99:14:78:4c:46:77:cd:aa:
7d:32:39:5f:1d:dd:28:0e:36:1d:2b:69:d2:30:84:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:68:F0:F6:67:30:5F:DE:42:A9:4E:07:98:6A:84:4F:4D:00:66
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/n5Ro8PZnMF_eQqlOB5hqhE9NAGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.76.0/22
IPv6:
2a09:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:b2:d1:1d:01:74:e4:57:11:5e:bb:52:45:38:ca:80:ac:ec:
19:aa:90:da:95:dc:2c:fb:98:2d:30:26:b4:ac:8f:c2:3f:cf:
fe:5f:3f:41:d2:8b:91:0b:2c:0e:fd:30:a5:71:20:ae:16:c2:
f3:0a:d1:bb:37:ff:2e:59:f6:fa:5a:e1:5b:6b:29:e1:5d:cd:
aa:fe:00:95:5f:aa:52:6e:ae:02:c4:d9:44:6e:44:9a:0b:d0:
d6:18:5c:8a:14:f6:8f:b5:83:17:64:4e:21:23:12:0f:36:e5:
06:ff:ab:af:9c:20:a2:96:aa:e3:ed:97:46:af:8c:ff:17:05:
a5:d9:2c:e7:57:00:1b:db:ec:c2:ab:cd:52:33:18:4c:79:8a:
f7:79:e7:3d:df:6d:b4:b5:af:4f:08:76:a1:b1:83:75:d1:65:
6b:23:88:a8:fe:9d:9f:ac:ad:15:05:d6:31:67:77:92:b2:3f:
70:ae:e6:39:3d:1e:58:44:56:d7:5b:5a:6b:5d:64:e0:e8:56:
fc:eb:02:36:a1:da:ea:0f:8a:95:5c:36:54:b6:10:71:69:be:
2a:c0:d8:8f:e4:28:11:41:2f:8e:76:dc:07:30:c9:05:ec:bd:
7a:3a:56:fa:2c:c7:b7:79:ca:76:9d:18:ed:b3:3d:72:55:e7:
c5:18:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:10 2024 by rpki-client on console-fra.rpki-client.org