Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/NhkohyryiAMMW80t6P9rjXY83HE.roa
File: NhkohyryiAMMW80t6P9rjXY83HE.roa (raw, json)
Hash identifier: aRecplRe52zUdWtsz3M9HrXBQdueLVisGCVtNHFxmEo=
Subject key identifier: 36:19:28:87:2A:F2:88:03:0C:5B:CD:2D:E8:FF:6B:8D:76:3C:DC:71
Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial: 0F70F890
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/NhkohyryiAMMW80t6P9rjXY83HE.roa
Signing time: Sat 01 Jan 2022 09:59:15 +0000
ROA not before: Sat 01 Jan 2022 09:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35625
IP address blocks: 194.5.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259061904 (0xf70f890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
Validity
Not Before: Jan 1 09:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=361928872af288030c5bcd2de8ff6b8d763cdc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:de:c5:08:ec:70:42:57:90:b3:e3:32:8d:
1e:7b:c9:ba:f8:61:3e:e5:cd:34:ad:b2:b6:bb:d2:
d8:9f:ad:66:05:0e:f4:9d:a8:f6:2a:d5:9e:58:72:
ee:6e:e0:f8:a9:ac:08:02:57:e8:f4:3e:5f:fb:be:
94:50:f2:1f:f3:52:8b:2c:04:6f:22:cc:39:4c:49:
5f:d3:dc:aa:27:e6:bb:1b:67:b7:d0:b5:23:73:44:
6b:6f:cb:d7:f3:d1:32:69:49:06:aa:74:3d:90:1d:
ad:ac:ce:f6:de:0c:73:d6:82:e4:86:5d:f6:c5:c3:
25:44:3b:96:d1:26:8a:e6:3a:46:60:e7:db:b9:57:
9f:69:ba:db:b2:e8:8a:f9:18:6d:d6:83:59:4f:6e:
fa:51:8d:4e:c7:90:78:4a:75:10:bd:8a:7f:fa:0c:
11:7a:6b:f2:2a:67:c3:ca:3f:d4:84:78:20:4e:1b:
c8:92:7f:2b:c0:e3:39:35:f5:4e:59:fa:e2:b8:e4:
b4:df:8c:54:15:91:ce:3c:27:95:f2:15:68:a8:0a:
e4:d2:13:e7:56:00:82:27:ca:aa:8d:9d:be:6f:1f:
9e:17:3e:08:ac:9f:24:d1:63:a0:4e:c0:91:94:87:
52:3e:c3:2b:c7:d2:3f:67:fc:86:be:3a:95:27:07:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:28:87:2A:F2:88:03:0C:5B:CD:2D:E8:FF:6B:8D:76:3C:DC:71
X509v3 Authority Key Identifier:
keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/NhkohyryiAMMW80t6P9rjXY83HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.72.0/24
Signature Algorithm: sha256WithRSAEncryption
27:cd:f0:2e:2f:62:e5:b2:65:fe:3b:e0:d0:70:25:82:59:13:
d1:e6:70:55:68:6d:f8:c5:bf:2d:59:cb:93:ef:d0:47:89:0a:
c7:3c:94:0c:a4:31:a4:0c:98:ec:a1:d0:0c:62:2a:1c:85:17:
5a:97:5e:27:62:e0:4a:c3:c4:99:3f:6f:6c:3c:54:37:15:3a:
7e:e9:65:24:de:99:8e:91:3c:75:2d:ba:fb:20:61:37:42:11:
56:c7:15:ae:a2:90:76:0b:8d:05:48:d6:20:35:02:e9:52:43:
b7:77:52:8f:63:35:7b:0b:c1:98:a8:40:4e:86:e6:3a:b8:49:
1d:91:36:0e:0e:e7:94:8b:d3:6d:f6:a9:aa:b6:7b:e9:b5:92:
48:45:cd:ed:e9:79:75:64:98:6b:9d:60:a8:7e:75:1b:0f:79:
5b:da:16:24:d3:90:0b:a4:9d:aa:9b:22:19:9a:d1:e3:80:01:
06:ca:14:3c:db:42:15:9c:73:9f:fb:59:af:6f:a2:de:75:bc:
05:b9:b3:6e:48:2a:a3:3e:2e:91:11:ef:94:ec:84:2b:81:6e:
7a:fb:f0:5e:79:e2:d4:db:0d:6d:6b:8e:63:12:76:82:91:49:
f4:aa:93:45:7c:ae:35:f1:f9:81:13:2b:f8:2f:be:0d:d5:d1:
a7:91:45:c9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED3D4kDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YWZlY2Y2NjQyYTQ1MGI1M2IwNzZkNDQ2NDgyZDljMWE4OWRlZDc0MB4XDTIyMDEw
MTA5NTkxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzYxOTI4ODcyYWYy
ODgwMzBjNWJjZDJkZThmZjZiOGQ3NjNjZGM3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvX3sUI7HBCV5Cz4zKNHnvJuvhhPuXNNK2ytrvS2J+tZgUO
9J2o9irVnlhy7m7g+KmsCAJX6PQ+X/u+lFDyH/NSiywEbyLMOUxJX9Pcqifmuxtn
t9C1I3NEa2/L1/PRMmlJBqp0PZAdrazO9t4Mc9aC5IZd9sXDJUQ7ltEmiuY6RmDn
27lXn2m627LoivkYbdaDWU9u+lGNTseQeEp1EL2Kf/oMEXpr8ipnw8o/1IR4IE4b
yJJ/K8DjOTX1Tln64rjktN+MVBWRzjwnlfIVaKgK5NIT51YAgifKqo2dvm8fnhc+
CKyfJNFjoE7AkZSHUj7DK8fSP2f8hr46lScHQ0UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ2GSiHKvKIAwxbzS3o/2uNdjzccTAfBgNVHSMEGDAWgBRK/s9mQqRQtTsH
bURkgtnBqJ3tdDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N2N1Baa0trVUxVN0IyMUVaSUxad2FpZDdYUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvNWQ2ZjZjLWIwMDYtNDU2My05MWFkLTQyOGExMTFhYzVlMC8x
L05oa29oeXJ5aUFNTVc4MHQ2UDlyalhZODNIRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
NWQ2ZjZjLWIwMDYtNDU2My05MWFkLTQyOGExMTFhYzVlMC8xL1N2N1Baa0trVUxV
N0IyMUVaSUxad2FpZDdYUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIFSDANBgkqhkiG9w0BAQsFAAOC
AQEAJ83wLi9i5bJl/jvg0HAlglkT0eZwVWht+MW/LVnLk+/QR4kKxzyUDKQxpAyY
7KHQDGIqHIUXWpdeJ2LgSsPEmT9vbDxUNxU6fullJN6ZjpE8dS26+yBhN0IRVscV
rqKQdguNBUjWIDUC6VJDt3dSj2M1ewvBmKhATobmOrhJHZE2Dg7nlIvTbfapqrZ7
6bWSSEXN7el5dWSYa51gqH51Gw95W9oWJNOQC6SdqpsiGZrR44ABBsoUPNtCFZxz
n/tZr2+i3nW8Bbmzbkgqoz4ukRHvlOyEK4FuevvwXnni1NsNbWuOYxJ2gpFJ9KqT
RXyuNfH5gRMr+C++DdXRp5FFyQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:51 2023 by rpki-client on console.sobornost.net