Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/igrc7HO07JB7shG_o3uNntorFk4.roa
File: igrc7HO07JB7shG_o3uNntorFk4.roa (raw, json)
Hash identifier: ynXCYN7HYS0/ixcfMfEmDxrN4yapfk8T6vrMmmL3SMs=
Subject key identifier: 8A:0A:DC:EC:73:B4:EC:90:7B:B2:11:BF:A3:7B:8D:9E:DA:2B:16:4E
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 084A9692
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/igrc7HO07JB7shG_o3uNntorFk4.roa
Signing time: Sat 01 Jan 2022 00:55:40 +0000
ROA not before: Sat 01 Jan 2022 00:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34752
IP address blocks: 91.102.248.0/21 maxlen: 21
85.116.32.0/19 maxlen: 19
2a01:7b0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139105938 (0x84a9692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Jan 1 00:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a0adcec73b4ec907bb211bfa37b8d9eda2b164e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:c6:93:2c:73:68:6e:4b:5c:1e:97:d8:13:
0d:48:07:e7:29:a8:7d:28:c9:09:e7:8e:c9:b9:64:
24:88:bf:9c:97:e1:72:eb:26:a2:19:c8:dd:af:69:
a9:84:03:1e:1d:35:4d:ef:04:4d:76:55:89:ab:f4:
13:51:ac:27:63:5e:f7:b5:0e:6a:03:70:c8:86:37:
a2:f1:4d:61:bf:23:e8:be:ad:fc:4d:03:eb:12:ea:
86:2b:23:2e:d3:b7:2e:52:bf:4d:72:33:45:fe:e5:
33:6a:4f:21:ae:c1:d9:0d:31:3b:d0:68:5d:bc:64:
70:12:5e:cf:9d:d1:cf:bb:80:65:ae:04:87:86:1a:
15:ef:06:e1:9b:9d:5f:2f:f9:30:8f:63:c1:6e:2e:
f4:bc:9f:fa:b7:54:64:c0:66:db:b6:d5:ea:a8:ce:
df:6a:29:7f:36:31:e1:51:e6:f2:10:07:c4:ca:81:
a2:67:93:a0:00:b7:d0:51:8a:74:cf:42:78:1a:37:
04:23:54:ed:83:55:d1:5c:02:05:a1:04:6a:ad:f4:
49:8a:40:58:c7:90:f2:5c:cc:d1:e5:95:43:fe:4b:
71:a4:27:11:4a:3a:db:89:3c:58:25:ed:3c:f5:06:
c9:7b:60:91:3c:02:64:98:17:1b:15:cd:3d:6f:b9:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:DC:EC:73:B4:EC:90:7B:B2:11:BF:A3:7B:8D:9E:DA:2B:16:4E
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/igrc7HO07JB7shG_o3uNntorFk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.32.0/19
91.102.248.0/21
IPv6:
2a01:7b0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:1d:dc:d1:d4:95:fd:d2:c5:26:6e:a4:62:ca:d0:be:a7:ad:
6b:e4:b2:0e:88:76:e2:35:4d:dd:2e:62:86:e7:f2:0e:fc:ae:
cb:08:b5:89:c8:e8:e9:7f:e2:54:85:4c:5b:38:4e:54:20:42:
35:d4:fb:57:cf:c4:a3:11:8d:2e:20:43:00:b7:9f:3d:59:95:
63:ac:be:ae:6e:f6:42:46:23:72:b5:d6:67:5b:03:28:ff:98:
42:06:1f:a9:26:db:f2:f9:da:4e:8e:86:fe:4a:bc:e4:83:53:
16:f4:9b:e6:b1:c2:a2:fb:18:8b:53:37:83:d3:b4:4d:52:6c:
56:f9:68:54:31:b0:e2:0c:c6:15:1f:5e:d0:9e:d7:ca:ec:21:
bf:a3:ae:7a:c8:a6:e1:8a:c2:50:e5:f9:e0:eb:2f:b0:53:86:
23:c9:74:2f:b9:22:e2:28:bb:e2:e6:04:47:23:b0:26:d1:3e:
06:42:92:25:b6:1e:99:62:1e:33:a5:0c:27:64:9d:1d:45:d4:
7c:bc:5b:e8:ec:15:d1:88:c0:ff:16:29:a3:17:b4:64:5a:09:
f1:66:96:43:5f:31:39:43:92:98:5d:a0:45:a1:92:b5:4b:fb:
6a:c6:4a:ca:86:90:cd:d4:7d:52:1b:3e:0e:7d:e8:fc:fd:8d:
3b:66:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:55 2023 by rpki-client on console.sobornost.net