Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/IGN92_KymGoKiIybJRhZ7d5rz04.roa
File: IGN92_KymGoKiIybJRhZ7d5rz04.roa (raw, json)
Hash identifier: rXKsrxYCpSq5rujK+r6jnltvIedsYK+jZ+zef33LgMQ=
Subject key identifier: 20:63:7D:DB:F2:B2:98:6A:0A:88:8C:9B:25:18:59:ED:DE:6B:CF:4E
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 0850F75C
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/IGN92_KymGoKiIybJRhZ7d5rz04.roa
Signing time: Sat 01 Jan 2022 12:01:14 +0000
ROA not before: Sat 01 Jan 2022 12:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48803
IP address blocks: 185.27.164.0/22 maxlen: 22
31.24.72.0/21 maxlen: 21
94.103.192.0/20 maxlen: 21
2a01:8e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139523932 (0x850f75c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Jan 1 12:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20637ddbf2b2986a0a888c9b251859edde6bcf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:86:6f:7e:d0:45:d7:89:bd:f5:26:b1:78:45:
49:6a:d0:a6:1e:bb:b0:fa:ee:1c:8a:a2:80:21:00:
28:f5:82:37:64:8c:31:8a:0c:c4:21:c2:8d:26:3e:
d5:a3:ef:74:c4:01:b5:88:68:d0:eb:cb:ce:fa:83:
cf:1e:db:ae:b9:ce:51:1a:c2:68:32:a2:8c:74:72:
3c:5c:7c:39:a9:92:1b:7d:d7:ff:d7:a0:d4:bd:db:
8b:df:6f:b0:57:52:63:e5:b5:6d:00:c6:35:1c:d3:
88:77:1c:b6:e6:cf:e5:f5:42:9f:7a:c9:c5:24:b8:
d1:34:89:8f:8d:b9:ce:2b:e3:e0:b5:94:a2:01:1f:
c4:6f:95:01:41:e6:18:5e:fa:fe:d3:31:e5:39:90:
1e:b9:63:fa:4c:cf:e1:dd:71:c2:26:02:f3:e7:c4:
36:72:b4:a8:2f:0d:b3:c1:c7:f4:91:90:df:73:1d:
e0:71:93:d3:9e:c8:e3:b1:d1:38:6e:af:a3:94:d2:
aa:f6:27:54:77:0e:b1:c9:34:45:cd:42:fd:37:35:
c1:0e:48:40:dc:d3:8c:4b:b5:ce:11:26:c1:7b:da:
00:53:2c:de:b7:59:77:ad:ae:8a:21:91:a6:34:19:
e4:b5:62:94:93:16:0d:35:12:f4:10:eb:b1:68:92:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:63:7D:DB:F2:B2:98:6A:0A:88:8C:9B:25:18:59:ED:DE:6B:CF:4E
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/IGN92_KymGoKiIybJRhZ7d5rz04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.72.0/21
94.103.192.0/20
185.27.164.0/22
IPv6:
2a01:8e00::/29
Signature Algorithm: sha256WithRSAEncryption
a0:96:37:bd:3a:6a:62:43:17:0e:a5:c9:30:33:36:77:bc:fb:
58:c3:d2:8c:3f:16:cc:8e:5b:54:0c:8e:5d:48:59:cf:90:32:
48:3a:24:ab:e7:6c:ab:e1:28:e8:e5:f4:d6:ff:e6:25:01:1e:
ed:75:b3:d5:48:b6:3b:e7:32:54:a1:17:df:5a:f8:2a:f3:d5:
14:5d:06:d1:51:55:b9:6c:1e:d6:5c:f4:82:87:b7:95:c0:e7:
80:71:c6:c7:8d:bc:fe:65:ee:6a:3e:69:36:be:57:05:ce:c8:
f2:80:12:6e:3e:fc:40:7d:2b:5f:00:80:07:4c:1b:a3:9c:ac:
77:15:b7:97:88:d0:85:65:20:87:0e:5b:80:26:9e:83:35:85:
a2:02:ff:64:a2:7e:2e:33:f7:f0:7a:80:5c:73:d5:33:c9:d3:
bd:f9:0b:be:57:80:81:08:e7:6a:c7:38:c8:b7:e0:08:f5:12:
59:e8:7d:06:32:f2:c9:f9:13:56:fd:99:ca:56:3b:7d:37:83:
23:5e:a5:25:de:71:d8:0e:47:e1:4c:2b:f6:86:12:01:b5:22:
be:3c:c4:0d:d7:37:de:28:03:21:da:4e:90:d3:85:8c:56:b7:
89:1f:fc:aa:19:40:2f:a9:39:1e:a6:4f:b1:ff:2d:50:31:40:
ba:73:28:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:15 2024 by rpki-client on console-ams.rpki-client.org