Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/TrN0jht89gMeD8fRfawYbNIOYpc.roa
File: TrN0jht89gMeD8fRfawYbNIOYpc.roa (raw, json)
Hash identifier: mykRlhl0nUZm1CwrxzWEah3Xv+VXOmdoOPSdpv4Mc/M=
Subject key identifier: 4E:B3:74:8E:1B:7C:F6:03:1E:0F:C7:D1:7D:AC:18:6C:D2:0E:62:97
Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Certificate serial: 37D92933
Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/TrN0jht89gMeD8fRfawYbNIOYpc.roa
Signing time: Sat 01 Jan 2022 15:57:13 +0000
ROA not before: Sat 01 Jan 2022 15:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29657
IP address blocks: 89.107.254.0/24 maxlen: 24
109.232.206.0/24 maxlen: 24
109.232.207.0/24 maxlen: 24
89.107.252.0/24 maxlen: 24
89.107.250.0/24 maxlen: 24
89.107.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936978739 (0x37d92933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82
Validity
Not Before: Jan 1 15:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4eb3748e1b7cf6031e0fc7d17dac186cd20e6297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:fe:3b:60:9c:9a:93:31:4f:c3:65:1b:cf:
66:65:54:46:3b:b9:b0:3f:e3:ca:b3:a1:93:e1:5c:
14:0f:fb:f7:3b:77:84:cb:a9:23:ef:2c:e0:b6:e3:
e7:cc:65:71:23:ca:68:4b:e6:6d:b6:bd:4e:dd:ee:
62:07:2c:7f:17:5b:d7:5d:c5:6a:41:c3:3f:6e:54:
bb:96:7f:3b:9d:10:6c:ac:fe:31:6c:35:e5:fa:39:
76:1e:3e:5b:47:9c:bc:51:c9:71:c6:f0:da:64:79:
73:b4:3e:60:aa:71:00:2d:b9:f9:3b:5c:43:30:60:
34:b2:a1:9c:9a:4e:86:e0:51:8e:68:79:81:2c:f5:
78:a7:3d:6f:23:15:29:b5:0e:e9:bb:50:c1:dd:5c:
e5:c4:07:5c:eb:4a:84:5a:ea:79:7f:20:13:e3:87:
6d:18:dc:b0:df:f9:d2:2a:0b:9b:ad:46:97:8f:43:
a6:16:73:dd:3b:d1:35:18:cb:36:47:91:40:f7:17:
a4:67:42:1f:ff:94:c4:09:54:9f:0a:48:35:b3:9c:
a8:63:de:5b:2f:ea:62:d9:ce:39:f3:84:2f:0b:94:
74:f4:16:08:4e:9a:10:6c:9e:87:b9:80:38:5c:5a:
88:75:d9:2d:23:ae:15:8c:85:70:6d:e1:bd:0c:ed:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:74:8E:1B:7C:F6:03:1E:0F:C7:D1:7D:AC:18:6C:D2:0E:62:97
X509v3 Authority Key Identifier:
keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/TrN0jht89gMeD8fRfawYbNIOYpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.250.0-89.107.252.255
89.107.254.0/24
109.232.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:f1:a3:3f:15:51:0e:33:8d:6f:32:a9:15:a0:cb:2a:b9:c2:
f1:69:5e:85:59:2f:65:09:87:45:a0:54:02:33:e5:cc:ba:36:
6a:30:ef:c8:f3:9e:17:b1:65:a1:c5:c0:fe:cc:4d:1d:2c:a1:
0b:f2:2b:f3:50:3c:25:fb:c1:8c:4d:61:12:53:5f:e8:9f:70:
c7:f8:c0:c6:f3:96:9f:db:b5:80:57:06:4f:2e:28:84:07:e1:
e9:2f:96:4a:fa:ca:1d:fc:c9:f3:b4:62:df:36:39:85:59:0e:
4b:57:22:0a:f3:70:ba:c0:0c:c4:ce:09:ea:90:1e:1d:2c:01:
7c:a5:fa:53:a6:c8:93:c9:f9:b6:f9:f7:13:b6:32:81:16:e3:
d3:86:97:82:04:4d:85:ca:53:7c:53:b9:08:19:ab:01:a8:f0:
4d:cb:e9:b9:7c:c7:20:91:fb:0b:30:9b:48:7d:24:cf:ad:52:
a3:2f:b5:ec:2c:c6:5b:ab:8f:97:95:7f:ee:e7:81:2a:d1:6d:
a5:b3:47:08:af:9f:d6:90:3f:40:f3:a9:5b:36:ee:cc:55:4b:
c3:a1:26:dc:e8:93:15:cc:7f:2e:e4:2f:c9:84:7d:5f:b2:e6:
33:97:55:20:1e:09:df:a0:0f:cb:e4:f3:4f:44:88:f6:0e:a6:
a9:2b:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:25 2023 by rpki-client on console.sobornost.net