Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/NoSCnXvUoBvq05TZWzHYiygExsI.roa
File: NoSCnXvUoBvq05TZWzHYiygExsI.roa (raw, json)
Hash identifier: lTuoR+1hOTdU8KCn2LSvM4jQk1S6u18r6nkV/ZlOwYg=
Subject key identifier: 36:84:82:9D:7B:D4:A0:1B:EA:D3:94:D9:5B:31:D8:8B:28:04:C6:C2
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 344DFB
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/NoSCnXvUoBvq05TZWzHYiygExsI.roa
Signing time: Tue 22 Mar 2022 11:58:46 +0000
ROA not before: Tue 22 Mar 2022 11:58:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20860
IP address blocks: 193.37.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3427835 (0x344dfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 22 11:58:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3684829d7bd4a01bead394d95b31d88b2804c6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:91:50:9a:46:fb:04:c3:76:91:16:ec:73:
07:ff:50:45:cd:07:b0:12:c5:03:e7:77:db:c0:55:
75:4c:94:34:87:3e:b1:1c:d7:ad:8a:01:4e:7c:d7:
82:7a:80:d9:f6:ed:69:cb:c8:72:53:4e:0d:61:7b:
74:89:d5:5d:fc:a0:fd:92:6e:dd:4f:9f:5c:bb:c6:
b1:62:39:f4:df:97:25:84:6b:75:cd:f1:1c:13:71:
cf:a3:60:48:a9:e8:a2:df:12:fb:c4:0b:ef:3a:5d:
00:01:74:f6:ca:15:6c:9c:c4:7e:d0:27:7a:10:90:
3e:00:e1:ee:ea:e4:4a:b5:63:23:e3:3d:c5:d7:47:
af:3b:b2:a5:92:3b:3b:e1:53:1b:d2:0c:ec:c0:3f:
c9:7c:cb:02:61:f3:ad:69:52:c7:72:d4:3f:af:e4:
bf:48:65:d9:79:7c:6d:c2:5c:1a:53:d0:40:8f:0c:
be:bf:89:98:e7:41:97:b9:ca:79:95:9a:bf:b1:79:
f5:12:9c:c4:df:33:0b:6c:8b:e8:68:a7:5a:89:98:
3b:33:3c:d4:e0:bd:38:01:49:65:be:7b:76:80:5d:
fb:19:72:f9:19:51:ef:b3:f4:1d:eb:ce:60:db:ce:
3e:a5:fa:05:9d:a2:ad:2c:00:0c:c0:cf:97:7f:51:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:84:82:9D:7B:D4:A0:1B:EA:D3:94:D9:5B:31:D8:8B:28:04:C6:C2
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/NoSCnXvUoBvq05TZWzHYiygExsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.72.0/22
Signature Algorithm: sha256WithRSAEncryption
55:c8:b0:34:68:4b:d3:e4:c3:dc:3c:71:41:4c:e8:9b:7d:fc:
64:dc:98:08:72:e8:ab:e3:df:dc:d7:31:37:e3:96:c7:cf:3b:
2b:45:a5:09:fc:b0:c0:fa:04:d4:8e:c0:e5:de:73:2d:36:59:
a6:38:97:4c:61:69:c6:d5:fc:13:e5:ff:3a:1a:10:1f:35:4e:
bf:a0:fc:11:7e:cc:32:6e:15:b5:41:dd:d9:33:a2:c6:72:a6:
8e:24:8f:a4:ac:35:08:39:8a:56:cf:81:ce:98:86:76:73:26:
c9:56:d7:f2:95:66:6a:48:be:d7:8f:76:bd:2a:5d:a0:36:cb:
06:bc:13:e0:e6:38:c1:d1:b2:4a:d4:25:56:06:18:5f:14:db:
be:26:e0:61:4a:2a:88:37:68:b1:91:fd:de:a1:e4:97:fe:01:
c6:46:09:f0:c5:89:e2:a6:78:e2:87:9f:68:44:23:66:91:cb:
d9:28:b2:fd:cf:7c:29:72:33:28:ce:be:43:20:ae:bb:1f:34:
02:2e:4c:0a:cb:4e:58:44:a3:1f:10:ce:77:d3:f6:91:9f:62:
32:45:a4:95:25:9d:85:e4:ed:f3:f1:5b:b9:99:93:14:8f:00:
14:ee:5f:7e:92:16:7d:af:6c:a0:15:3d:e2:8c:59:eb:6c:2a:
30:e7:72:f1
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDNE37MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJi
MTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNlZmRiM2UwHhcNMjIwMzIy
MTE1ODQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzNjg0ODI5ZDdiZDRh
MDFiZWFkMzk0ZDk1YjMxZDg4YjI4MDRjNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjs+RUJpG+wTDdpEW7HMH/1BFzQewEsUD53fbwFV1TJQ0hz6x
HNetigFOfNeCeoDZ9u1py8hyU04NYXt0idVd/KD9km7dT59cu8axYjn035clhGt1
zfEcE3HPo2BIqeii3xL7xAvvOl0AAXT2yhVsnMR+0Cd6EJA+AOHu6uRKtWMj4z3F
10evO7Klkjs74VMb0gzswD/JfMsCYfOtaVLHctQ/r+S/SGXZeXxtwlwaU9BAjwy+
v4mY50GXucp5lZq/sXn1EpzE3zMLbIvoaKdaiZg7MzzU4L04AUllvnt2gF37GXL5
GVHvs/Qd685g284+pfoFnaKtLAAMwM+Xf1FqIwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFDaEgp171KAb6tOU2Vsx2IsoBMbCMB8GA1UdIwQYMBaAFCsUWovfK8oVDyXt
VKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
S3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2NkLzEv
Tm9TQ25YdlVvQnZxMDVUWld6SFlpeWdFeHNJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8w
ZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2NkLzEvS3hSYWk5OHJ5aFVQ
SmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSVIMA0GCSqGSIb3DQEBCwUAA4IB
AQBVyLA0aEvT5MPcPHFBTOibffxk3JgIcuir49/c1zE345bHzzsrRaUJ/LDA+gTU
jsDl3nMtNlmmOJdMYWnG1fwT5f86GhAfNU6/oPwRfswybhW1Qd3ZM6LGcqaOJI+k
rDUIOYpWz4HOmIZ2cybJVtfylWZqSL7Xj3a9Kl2gNssGvBPg5jjB0bJK1CVWBhhf
FNu+JuBhSiqIN2ixkf3eoeSX/gHGRgnwxYnipnjih59oRCNmkcvZKLL9z3wpcjMo
zr5DIK67HzQCLkwKy05YRKMfEM530/aRn2IyRaSVJZ2F5O3z8Vu5mZMUjwAU7l9+
khZ9r2ygFT3ijFnrbCow53Lx
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net