Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/iKD6MZORJro91V2CnyLy9AtghOs.roa
File: iKD6MZORJro91V2CnyLy9AtghOs.roa (raw, json)
Hash identifier: psuahta6BZpUjfuYP8EDisF9shbUw22RyWr7O1Hc7mI=
Subject key identifier: 88:A0:FA:31:93:91:26:BA:3D:D5:5D:82:9F:22:F2:F4:0B:60:84:EB
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 361B848E
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/iKD6MZORJro91V2CnyLy9AtghOs.roa
Signing time: Sat 01 Jan 2022 03:52:18 +0000
ROA not before: Sat 01 Jan 2022 03:52:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43845
IP address blocks: 79.170.202.0/24 maxlen: 24
79.170.206.0/24 maxlen: 24
79.170.205.0/24 maxlen: 24
79.170.204.0/24 maxlen: 24
79.170.201.0/24 maxlen: 24
79.170.203.0/24 maxlen: 24
79.170.200.0/24 maxlen: 24
79.170.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907773070 (0x361b848e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Jan 1 03:52:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88a0fa31939126ba3dd55d829f22f2f40b6084eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:54:97:8a:3f:f9:c7:e3:d8:bc:25:33:fe:3f:
77:9c:d4:5e:14:25:a6:b4:08:a1:09:ff:3a:54:df:
05:58:bb:26:b2:f8:e6:e3:bd:63:48:25:a4:7a:43:
3d:20:80:16:89:af:ae:14:48:72:14:a2:8d:64:ab:
d3:24:6a:13:3a:17:cc:21:2a:fa:7b:9c:3f:fc:3a:
4a:c0:3e:c6:67:ab:7d:c7:9c:d3:e5:66:4f:90:d4:
6e:d7:09:64:1d:88:e9:73:f3:44:d2:b7:6d:37:19:
9e:cf:63:a2:d7:90:ae:f0:6f:30:4b:67:11:bb:96:
82:ba:f7:ca:cd:61:6d:74:33:c0:6f:ab:e0:29:11:
06:49:ee:75:d4:0f:cd:0d:53:c1:cd:8d:d1:06:b8:
87:e7:06:e1:a1:ef:c5:02:93:3f:8c:76:2e:c3:ac:
a5:28:2e:34:0c:ae:8c:77:d4:e5:b1:fb:28:84:3d:
ac:e8:85:1f:42:e1:a6:23:1d:71:fe:62:eb:a1:4c:
8a:85:48:40:3e:90:cf:82:9f:5b:b7:c3:aa:7f:d9:
14:04:bd:67:b0:c7:d9:42:47:6d:cc:9c:39:1d:9e:
4a:71:36:31:53:75:bf:70:f3:52:6c:02:2a:e3:f3:
90:5a:3d:a8:f1:ea:c4:33:fd:3c:f4:94:54:f6:c7:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A0:FA:31:93:91:26:BA:3D:D5:5D:82:9F:22:F2:F4:0B:60:84:EB
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/iKD6MZORJro91V2CnyLy9AtghOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.200.0/21
Signature Algorithm: sha256WithRSAEncryption
29:c8:31:d1:19:82:f1:10:69:9b:92:5b:bb:86:f0:b1:29:17:
89:a7:8e:cc:59:2f:0f:37:00:4d:ad:12:7d:7e:96:f9:62:a6:
39:d2:d9:63:0e:b6:ef:37:ba:ba:e2:ed:6d:85:63:ac:cc:f8:
7e:63:d6:d9:6c:c3:c6:2a:91:ad:63:41:f0:37:a3:59:a3:90:
cb:3c:51:42:6c:44:16:dc:0e:a8:d0:f7:e4:1c:fc:0e:4c:80:
ae:bd:84:d1:a1:d7:d4:03:aa:e4:36:32:61:e4:3d:44:11:15:
3e:59:5d:72:c4:fb:3b:10:07:fe:71:5e:37:07:56:9c:5b:b1:
49:77:b3:88:0c:5f:7d:53:33:0f:ca:8a:eb:b1:4f:7d:ce:e6:
f8:79:b5:c5:ea:f8:41:7a:ea:c1:a5:c1:21:98:3f:27:15:1d:
1c:26:b5:c2:49:2f:2f:af:13:05:dc:d7:06:df:91:ad:18:85:
00:29:37:de:2f:f8:15:3c:05:2b:5a:11:2e:5a:f9:be:6a:96:
03:48:99:d8:1b:c5:f6:00:20:92:a3:04:23:f3:7b:12:93:0a:
b2:bf:29:57:9d:52:c4:9a:3d:89:09:77:b4:00:d4:2f:ad:58:
d6:dd:49:32:8a:35:bf:8a:30:77:ee:15:7d:ea:f4:61:a9:fb:
22:4f:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:58 2023 by rpki-client on console-fra.rpki-client.org