Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NSwp5N46z0MmNF8n7YATx98EOKw.roa
File: NSwp5N46z0MmNF8n7YATx98EOKw.roa (raw, json)
Hash identifier: 5eT/RNBehjtTq2bXzQus/K3DBnl9BE+nI6yRktRyMu0=
Subject key identifier: 35:2C:29:E4:DE:3A:CF:43:26:34:5F:27:ED:80:13:C7:DF:04:38:AC
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 17A2AFDD
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NSwp5N46z0MmNF8n7YATx98EOKw.roa
Signing time: Sat 01 Jan 2022 13:03:29 +0000
ROA not before: Sat 01 Jan 2022 13:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210311
IP address blocks: 2a09:e1c1:eff0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396537821 (0x17a2afdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 13:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=352c29e4de3acf4326345f27ed8013c7df0438ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:12:a9:14:cf:d0:88:7b:53:d7:29:58:59:
d3:0f:1a:5d:2f:9f:5d:96:b4:af:27:5d:6c:02:42:
46:a8:b2:a2:fe:15:56:84:92:9a:bd:78:4a:5e:c0:
06:20:5a:0a:80:71:a2:bd:32:63:55:a5:f8:10:e7:
d5:73:bc:1b:f5:b0:c3:f4:d7:47:08:ef:c2:57:3b:
07:36:8c:ae:48:6e:8b:47:da:e1:f8:97:09:fb:c5:
3c:45:de:fe:ba:52:0a:b9:6b:3d:d6:01:29:bc:00:
d6:d8:38:80:dc:d9:6d:a7:5d:c5:aa:0e:bf:46:73:
f2:71:b2:90:d1:b3:79:7f:91:68:39:c6:ea:47:7d:
f7:af:ac:73:2a:93:20:83:60:6c:eb:05:99:92:3f:
21:a1:92:67:12:41:ab:2b:5b:34:9c:80:3f:90:67:
85:38:e6:04:8f:c3:3e:7d:ba:b0:e8:f5:0b:5f:be:
dd:16:3d:27:35:80:6d:cc:1e:04:f0:2c:ee:c5:c1:
be:ce:03:be:e1:6d:32:95:8e:f2:a1:3f:07:10:df:
e7:15:44:c0:91:36:83:b6:a7:51:82:7e:d7:2e:14:
67:5d:8a:79:8d:87:99:4b:d4:8b:79:03:f7:11:3f:
4c:02:b8:25:0d:ba:28:3a:fb:e2:7b:c5:80:7e:5a:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2C:29:E4:DE:3A:CF:43:26:34:5F:27:ED:80:13:C7:DF:04:38:AC
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/NSwp5N46z0MmNF8n7YATx98EOKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e1c1:eff0::/44
Signature Algorithm: sha256WithRSAEncryption
86:8c:99:7e:6a:c9:64:d2:49:04:7a:13:e8:d5:7f:cf:5f:d0:
4c:cf:fc:d9:50:62:91:ee:87:f0:f1:5f:a7:c0:fb:1b:20:6f:
a3:ce:e3:d5:e1:e4:31:0d:bc:a8:31:11:af:e6:1b:a9:b1:5d:
97:05:3f:61:cb:7e:4f:31:76:a4:38:12:ea:9b:dd:f1:e4:3f:
b9:de:b5:7e:79:9b:a5:9b:76:1e:8b:55:9d:d1:a3:81:63:f9:
01:27:4a:cd:b4:10:af:9e:d8:17:4f:5b:96:fb:8b:f4:f0:a0:
e1:a8:0a:82:f4:7e:44:4e:bd:f5:62:ed:d5:c0:36:8f:a7:72:
75:2d:5a:3e:63:fd:cd:97:c0:1c:d2:cf:1e:ad:8f:5b:9b:a2:
15:f4:ef:f9:d3:7c:4f:a8:e2:cb:93:d6:ce:ec:de:ff:40:6b:
8a:70:45:c1:4b:96:5f:48:94:3a:d3:52:b5:78:09:8e:20:2a:
2b:ba:43:45:21:fe:74:ef:56:9f:4e:75:95:83:95:70:fd:1a:
20:65:af:01:a1:42:f9:61:a4:1b:d9:02:ff:5f:62:0a:f0:6d:
d2:4a:59:6b:2f:af:04:25:7c:b8:db:3c:ff:ab:26:ee:01:e3:
d2:be:db:54:88:72:03:1b:5d:1a:ca:9a:85:f8:1e:db:f6:60:
05:52:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org