Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/N-1CpHiTDMeRXxboFORck6nFxN0.roa
File: N-1CpHiTDMeRXxboFORck6nFxN0.roa (raw, json)
Hash identifier: v91Dp1iYgh84bzZ61PzYscO6UWKKSkpT6xke0ucIGMM=
Subject key identifier: 37:ED:42:A4:78:93:0C:C7:91:5F:16:E8:14:E4:5C:93:A9:C5:C4:DD
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 01832270389BA2D5CBBFB80E959059CC8181
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/N-1CpHiTDMeRXxboFORck6nFxN0.roa
Signing time: Fri 09 Sep 2022 13:28:43 +0000
ROA not before: Fri 09 Sep 2022 13:28:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199256
IP address blocks: 217.115.121.0/24 maxlen: 24
217.115.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:70:38:9b:a2:d5:cb:bf:b8:0e:95:90:59:cc:81:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Sep 9 13:28:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ed42a478930cc7915f16e814e45c93a9c5c4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:ff:e8:aa:9e:47:0f:b1:62:82:97:74:76:
98:7f:11:59:37:df:a3:75:55:97:05:45:be:d7:88:
92:96:4c:4e:64:08:16:25:97:ae:78:31:3c:68:de:
ec:67:a0:d8:83:32:e0:8c:13:88:34:78:cd:6d:d9:
48:3e:2e:dd:df:ba:d4:4e:4f:f5:ea:1d:c5:0c:d3:
d1:45:ca:83:9c:19:5b:06:32:d9:cd:7f:0f:13:10:
2e:96:b9:5b:cb:cd:24:88:bf:d9:53:e6:3d:2a:d1:
a1:b3:b2:aa:57:84:a5:ea:b4:5b:75:ec:33:b1:97:
87:6d:62:ab:77:a7:a5:09:20:d0:e9:4a:d4:ed:51:
78:01:cf:d5:50:ec:f9:9e:a2:e6:bd:58:97:b8:8c:
81:21:fd:db:17:cc:ca:e4:db:0f:d9:0c:0f:29:ec:
33:d3:7f:37:1a:91:60:b6:2e:b2:f5:14:c6:0a:ce:
b1:81:eb:8a:61:1c:8f:b1:5b:83:1b:89:94:09:ae:
f3:7a:ce:b6:88:c6:d5:f3:63:f9:d5:90:5e:37:37:
b3:5a:24:e4:16:a2:3d:41:be:1d:71:b1:eb:17:bf:
f7:5a:f7:a9:21:e4:d2:c7:7b:2c:38:02:73:cf:f1:
9c:61:c7:ec:74:59:6b:63:ef:aa:cc:04:93:b8:16:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:42:A4:78:93:0C:C7:91:5F:16:E8:14:E4:5C:93:A9:C5:C4:DD
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/N-1CpHiTDMeRXxboFORck6nFxN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.115.121.0/24
217.115.124.0/24
Signature Algorithm: sha256WithRSAEncryption
12:13:02:7f:62:dc:6a:f8:a6:52:4a:fe:3d:b2:c3:06:8b:81:
ef:45:b5:69:02:f9:60:06:ac:45:6c:96:c2:85:0b:4d:95:d2:
aa:0d:13:a7:75:3c:d9:cf:02:d2:84:6a:6f:20:36:9b:75:23:
54:8b:ac:d9:84:78:ba:a3:cc:14:f4:af:f4:5e:0e:7c:4b:0b:
da:d6:94:c4:18:41:ae:01:fa:47:6e:d1:a3:dc:24:3f:be:77:
1c:52:f6:68:90:dc:df:1f:2f:3b:a1:21:0c:96:af:1e:8e:ce:
b2:e4:55:98:60:6b:2d:3f:eb:70:15:69:b5:bf:49:e1:82:bd:
f3:a3:06:12:5e:e4:45:b8:20:e6:cc:f0:2f:15:8d:f5:51:4b:
8c:b4:ec:ed:50:b2:31:29:ec:27:86:33:a7:33:8c:c9:e7:96:
51:28:a3:88:fc:79:bd:1d:ec:a5:78:0d:14:c0:2d:9d:94:fa:
d8:7f:25:1c:d2:69:c3:cd:f0:fb:c9:91:7a:ba:11:94:32:30:
98:f9:73:06:ac:87:94:ab:24:dc:42:2e:27:c5:fb:e3:b7:2e:
97:38:75:38:33:18:5b:ad:81:98:5d:ab:69:47:44:77:44:ae:
15:48:7a:2c:e4:ee:e8:2b:0e:39:82:c7:e3:ec:00:76:cc:f0:
0a:44:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:59 2023 by rpki-client on console.sobornost.net