Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/kJIGhPtV208DfuflCHNN9eTQEL8.roa
File: kJIGhPtV208DfuflCHNN9eTQEL8.roa (raw, json)
Hash identifier: ooHyptKo00CWY4FsMS9SMLoDg4aF/hpOGZ530dSQMs8=
Subject key identifier: 90:92:06:84:FB:55:DB:4F:03:7E:E7:E5:08:73:4D:F5:E4:D0:10:BF
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 04A97E27
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/kJIGhPtV208DfuflCHNN9eTQEL8.roa
Signing time: Fri 11 Mar 2022 06:23:57 +0000
ROA not before: Fri 11 Mar 2022 06:23:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210646
IP address blocks: 89.25.119.0/24 maxlen: 24
89.25.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78216743 (0x4a97e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Mar 11 06:23:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90920684fb55db4f037ee7e508734df5e4d010bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:25:7b:ee:e4:db:2d:a0:3b:f6:51:cf:96:
6a:de:c9:b4:53:9a:ee:39:c3:1a:81:19:2e:79:6f:
f1:62:f1:a7:eb:13:ec:a7:ec:82:56:28:43:1a:6b:
50:c7:a1:06:77:ee:a4:06:38:6e:da:d4:ab:b1:14:
11:c8:f1:d4:02:5e:f7:4b:f8:8f:cb:7c:56:2f:73:
4f:5d:4a:fb:c7:d7:a1:b9:8a:2a:da:a4:ef:af:cb:
5f:e8:a0:7d:b6:ae:ee:7a:ac:42:82:84:62:f0:4f:
bd:d5:c5:9c:f3:f4:af:b7:77:8d:eb:21:c4:c2:7f:
b7:35:0c:06:f3:2a:0d:c3:d5:d8:18:60:aa:ca:94:
9b:68:cf:d7:b8:5b:2c:b2:e1:c4:fb:d5:5b:94:d2:
78:d7:76:49:39:b6:d7:2b:0e:6e:c8:55:b5:5c:50:
60:7f:a4:da:12:66:68:3d:c9:b8:2e:4b:ca:79:10:
aa:4d:99:ab:87:ad:f8:38:d3:fc:f0:32:97:11:e3:
6d:af:54:86:c2:b2:29:01:35:09:9a:25:b0:d5:d7:
f9:e9:24:8f:21:0b:03:67:da:09:47:77:7a:f9:e2:
3d:c2:b9:d8:7a:01:c5:2b:19:99:9d:5e:36:81:af:
32:f3:91:10:12:a2:bf:09:7d:39:38:d5:68:46:6b:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:92:06:84:FB:55:DB:4F:03:7E:E7:E5:08:73:4D:F5:E4:D0:10:BF
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/kJIGhPtV208DfuflCHNN9eTQEL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.24.0/24
89.25.119.0/24
Signature Algorithm: sha256WithRSAEncryption
61:72:63:78:53:72:59:8a:bd:44:11:e7:46:c1:c5:12:fc:67:
33:1a:4f:3f:ef:bc:3f:fe:1e:22:7f:e5:f8:10:d0:5e:3e:2f:
fc:a7:af:c0:1f:82:00:f0:7e:21:8f:cf:c2:ba:49:60:72:bd:
56:31:8b:3d:63:0f:ee:82:46:62:9f:5c:0b:4f:fe:b3:7e:1f:
9b:bb:e8:a5:53:2e:59:9b:d0:d2:7e:54:ea:92:84:f1:f7:d0:
20:4a:b8:a6:24:9c:08:62:83:e6:58:c0:c6:51:70:a4:a4:b7:
ad:c8:98:f7:7a:a3:c9:3c:df:14:ee:91:70:60:26:9b:f2:b3:
37:38:ca:9c:40:bd:72:24:e0:2b:f2:6c:23:bf:06:c0:04:20:
df:c9:86:09:73:f6:86:1c:05:de:87:27:91:39:85:80:67:ce:
ef:d3:94:fe:a3:53:a4:1e:07:b8:4a:48:7c:09:93:09:95:e2:
ed:14:91:bb:83:62:27:1d:96:b0:7d:54:a8:46:5a:ea:d4:71:
e4:3c:ca:f1:d8:59:79:76:e0:e1:ec:4b:b8:7f:ba:c7:18:ae:
93:3c:66:86:d3:4b:f8:30:d7:54:a2:ff:fa:85:1b:ff:af:d8:
3e:b3:91:b1:82:8a:62:93:78:8b:fc:7a:a0:86:9b:ca:2d:ff:
26:59:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net