Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cNovWW9GKGpVZNvGap8xurnChG4.roa
File: cNovWW9GKGpVZNvGap8xurnChG4.roa (raw, json)
Hash identifier: n2K1v6CedMV0Da1VMGCu/tfXPfLBDS5Hh2cfxd2kDbI=
Subject key identifier: 70:DA:2F:59:6F:46:28:6A:55:64:DB:C6:6A:9F:31:BA:B9:C2:84:6E
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 01830A3D5F2A5BFC34649ECD59CEECAD7C65
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cNovWW9GKGpVZNvGap8xurnChG4.roa
Signing time: Sun 04 Sep 2022 20:42:17 +0000
ROA not before: Sun 04 Sep 2022 20:42:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207902
IP address blocks: 194.113.112.0/23 maxlen: 23
194.113.118.0/23 maxlen: 23
2a0e:7900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0a:3d:5f:2a:5b:fc:34:64:9e:cd:59:ce:ec:ad:7c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Sep 4 20:42:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70da2f596f46286a5564dbc66a9f31bab9c2846e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:f3:fb:af:2a:79:79:9c:19:14:8e:8b:0d:
ba:ee:4d:0d:c0:a8:48:95:8d:b9:c0:c1:e7:a0:5e:
a6:51:08:41:83:99:7c:35:33:cb:be:47:2c:16:78:
73:ec:b7:55:5d:32:a9:9c:ec:a6:62:b5:77:d9:f0:
3b:ec:e5:2c:2e:2a:16:d1:fd:42:9a:2d:50:3f:0a:
46:c0:e1:c9:be:37:66:dc:65:49:17:10:4e:57:0b:
ad:b4:e6:fd:fe:93:23:5e:ed:d0:ad:ce:34:ff:8c:
a5:d5:03:0b:04:41:12:ab:86:36:52:eb:f7:2c:06:
2d:ec:2f:6f:c7:92:14:23:2f:20:b8:eb:38:79:07:
0c:36:33:9c:26:0d:ba:36:ed:75:1e:f9:49:7a:d3:
48:72:95:7c:87:3b:36:3f:69:ab:dc:45:75:16:c8:
4b:c8:c0:f8:40:03:ff:5c:ce:5b:e7:93:a8:1a:0b:
90:f1:b4:64:80:83:a4:1c:74:ba:54:01:49:55:d3:
ff:4b:36:73:fa:42:b4:c4:a1:bd:cb:02:02:ad:b8:
d0:15:de:64:eb:13:e6:19:a0:8a:95:03:8a:18:43:
37:97:ef:fd:54:b6:50:03:17:27:06:c3:0c:a7:9a:
12:fe:ad:9e:42:5b:68:76:a9:52:50:34:e9:98:34:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DA:2F:59:6F:46:28:6A:55:64:DB:C6:6A:9F:31:BA:B9:C2:84:6E
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cNovWW9GKGpVZNvGap8xurnChG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.112.0/23
194.113.118.0/23
IPv6:
2a0e:7900::/29
Signature Algorithm: sha256WithRSAEncryption
3b:14:f3:67:05:5b:8d:6f:0c:fa:8e:86:9e:9d:cb:00:4d:38:
d6:06:c1:7f:25:39:da:c4:ff:c6:46:c8:31:83:78:3e:e0:94:
24:03:d8:a2:94:fd:dd:02:5a:fe:2e:01:f1:94:65:74:21:f6:
9c:b3:1e:af:d9:ec:c4:d5:2e:22:f5:3a:46:69:52:52:25:89:
7e:ab:e8:52:3d:2b:23:d7:99:34:87:b5:7d:e2:2d:5a:3c:14:
82:bf:50:cb:0f:ec:a9:3f:6e:52:29:0b:3a:3b:a1:75:d5:c4:
1d:49:15:62:b0:a1:13:89:ee:40:33:71:0e:c9:07:bf:90:ee:
41:7f:2b:ac:59:a8:0a:de:72:09:39:a9:c4:c7:82:80:48:ec:
ac:48:37:94:99:28:df:b7:79:59:12:81:10:89:e8:21:01:74:
3c:9b:c0:f8:11:21:e1:c9:95:4e:31:1f:79:c9:58:be:bc:70:
7b:e6:07:b6:d3:7b:f3:71:05:50:d1:57:a4:df:cf:d4:54:17:
b3:73:f7:ed:5f:f8:24:bf:e8:80:bf:07:16:43:39:84:0b:6e:
06:9d:12:5c:48:b6:c5:f7:f7:bf:69:22:8f:62:aa:db:85:ff:
01:bb:21:62:5f:79:12:2b:53:d7:8f:71:85:e6:ca:04:64:e8:
ca:ed:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net