Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/nZC0JVqZQXrZf1Jm_ZX-Z5nNzWk.roa
File: nZC0JVqZQXrZf1Jm_ZX-Z5nNzWk.roa (raw, json)
Hash identifier: aRiawlbURdZfImD1YHiM9hy1E5PA00Vdl1XO7m9IZLk=
Subject key identifier: 9D:90:B4:25:5A:99:41:7A:D9:7F:52:66:FD:95:FE:67:99:CD:CD:69
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 0261CA
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/nZC0JVqZQXrZf1Jm_ZX-Z5nNzWk.roa
Signing time: Tue 04 Jan 2022 07:26:48 +0000
ROA not before: Tue 04 Jan 2022 07:26:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197581
IP address blocks: 46.235.233.0/24 maxlen: 24
46.235.232.0/24 maxlen: 24
46.235.232.0/21 maxlen: 21
46.235.237.0/24 maxlen: 24
46.235.234.0/24 maxlen: 24
46.235.236.0/24 maxlen: 24
46.235.235.0/24 maxlen: 24
46.235.239.0/24 maxlen: 24
46.235.238.0/24 maxlen: 24
2a00:5ec0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156106 (0x261ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Jan 4 07:26:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d90b4255a99417ad97f5266fd95fe6799cdcd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:38:1c:10:aa:54:49:bc:e4:29:99:e3:3e:
f1:5f:a2:d9:77:fe:4d:f2:7e:b9:2e:49:94:72:d0:
78:fd:f4:44:24:a7:d7:a2:84:25:a2:72:4e:c7:39:
59:39:06:ea:dd:7a:2e:0d:b4:25:2a:65:7d:fb:45:
da:46:3c:74:0a:6f:9a:36:80:13:44:f1:d2:88:eb:
ef:88:b3:fe:1e:16:05:57:5b:24:53:43:7c:e9:27:
6b:ff:30:fe:1e:68:2a:4d:53:68:53:57:06:07:36:
a1:b4:e3:5e:26:32:e1:02:89:28:8d:6e:12:66:00:
1d:05:25:e3:65:43:c7:ab:a2:07:5b:14:34:94:e7:
e7:a8:42:f3:2a:55:31:4c:20:88:52:30:6a:09:dc:
a6:40:a7:83:0f:04:3c:a6:41:eb:2f:1d:91:73:0c:
ae:d4:5f:19:9b:79:a3:19:9c:48:d2:5b:a3:c1:8c:
00:b2:7d:64:f0:66:85:17:a6:86:68:2f:7e:3d:ba:
3a:63:ae:a4:82:b4:f0:5c:f6:05:63:c4:f7:33:2a:
4f:a5:cf:ed:c8:d4:d0:42:22:59:53:e2:43:ac:9d:
f7:93:ae:d9:fb:ad:64:19:10:fd:b3:69:b5:c1:46:
02:48:25:74:e0:cd:54:81:23:69:7f:b6:cf:2a:c5:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:90:B4:25:5A:99:41:7A:D9:7F:52:66:FD:95:FE:67:99:CD:CD:69
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/nZC0JVqZQXrZf1Jm_ZX-Z5nNzWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.232.0/21
IPv6:
2a00:5ec0::/32
Signature Algorithm: sha256WithRSAEncryption
58:94:3f:3e:3d:b8:46:24:a1:0d:85:9e:cf:19:14:cd:ca:fd:
39:f9:49:de:53:e0:bd:92:d9:8b:ad:22:28:a3:3e:88:6c:a6:
1e:01:a8:15:bc:e3:ca:4e:80:a9:61:14:29:88:e2:78:0b:44:
a3:94:00:7a:43:d4:be:d9:43:b0:9c:59:1c:4f:c4:da:74:ca:
12:c7:44:64:49:6a:87:63:da:30:7b:21:bf:87:cb:9f:ad:69:
7e:c2:ee:86:f5:33:ed:cd:1c:92:57:c5:d0:7c:a0:34:06:64:
f7:73:3d:2b:81:70:ff:ad:b0:fb:6d:cc:b3:66:fe:e7:f2:6f:
93:e2:8e:13:af:da:85:f6:d8:c1:32:2a:65:0f:8d:75:5c:a8:
0f:73:cf:1e:f1:ad:4b:29:59:e8:0f:48:d8:b4:c2:15:30:46:
71:c7:20:ad:ed:39:dc:8d:9d:d0:52:2f:ca:35:04:fb:3b:c9:
f1:ad:27:53:b2:8e:9a:33:f9:ff:8c:9a:47:a4:43:76:3a:90:
a8:12:79:92:de:0b:13:0a:0a:84:b9:75:d1:c5:55:63:cc:f6:
6c:44:60:0f:6f:2a:41:c7:b5:09:39:c6:09:a4:8d:ad:db:ad:
28:9b:49:d2:a7:6f:79:46:64:94:d0:95:4a:f0:ac:88:d4:a3:
6f:13:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:25 2023 by rpki-client on console.sobornost.net