Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/XHRlv3Zq33cnMTog16xuT-MqK6c.roa
File: XHRlv3Zq33cnMTog16xuT-MqK6c.roa (raw, json)
Hash identifier: cNbJ1bZMa4HzN58mctsUkOfKxcez0dU5nJ2CmJpHYkI=
Subject key identifier: 5C:74:65:BF:76:6A:DF:77:27:31:3A:20:D7:AC:6E:4F:E3:2A:2B:A7
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 08740E37
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/XHRlv3Zq33cnMTog16xuT-MqK6c.roa
Signing time: Sat 01 Jan 2022 04:58:50 +0000
ROA not before: Sat 01 Jan 2022 04:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60848
IP address blocks: 185.247.99.0/24 maxlen: 24
94.127.60.0/22 maxlen: 22
2a02:2188:2000::/36 maxlen: 36
2a02:2188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141823543 (0x8740e37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Jan 1 04:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c7465bf766adf7727313a20d7ac6e4fe32a2ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5a:e0:1e:93:c2:35:35:3f:b7:6f:2d:89:34:
7d:e4:57:06:61:ec:b1:41:60:de:5c:45:73:c1:c5:
20:04:48:8d:43:b7:5b:54:7f:e7:ec:06:6f:74:d3:
9d:d8:0d:e6:12:b5:6f:ee:67:41:ce:6b:d1:c4:e6:
fb:23:8c:72:c9:62:f9:eb:58:c4:5e:b0:9f:d9:5c:
ff:47:64:53:8c:70:e4:9d:60:3c:15:7d:10:f6:81:
36:61:65:c1:27:9b:03:91:d0:8a:c1:33:0a:9e:df:
69:4d:c2:18:a6:7a:f3:7b:6a:23:5b:cc:9e:b7:97:
e9:fd:e6:72:02:ba:4b:8d:8a:f2:09:29:42:1d:c5:
2b:56:29:64:89:30:31:b8:21:ee:c1:13:8c:1d:be:
fa:6c:1e:76:57:49:fe:f2:f1:6f:d2:0f:7f:7b:81:
98:7a:f3:2d:c5:21:5b:5e:82:7f:26:a5:48:2e:77:
bf:4d:b4:d3:e7:40:0b:15:e0:cc:84:e0:2c:b9:f2:
54:62:46:39:08:87:3c:64:3c:cf:ab:f6:76:70:1b:
1b:2b:c2:ef:69:85:2f:a8:22:5f:1c:30:66:17:79:
75:33:73:18:d4:a9:95:f5:16:93:c0:97:61:eb:e0:
1b:e7:6e:31:f8:68:78:ab:b5:0b:0f:fb:35:be:85:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:74:65:BF:76:6A:DF:77:27:31:3A:20:D7:AC:6E:4F:E3:2A:2B:A7
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/XHRlv3Zq33cnMTog16xuT-MqK6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.60.0/22
185.247.99.0/24
IPv6:
2a02:2188::/48
2a02:2188:2000::/36
Signature Algorithm: sha256WithRSAEncryption
1b:e8:f5:3c:fc:cb:9e:67:51:cc:9d:6e:5f:32:8b:bd:09:34:
26:e5:3e:cd:3a:6a:12:e6:09:52:3e:f6:ec:ce:74:f6:d0:7f:
1c:e4:13:ce:9c:9d:18:43:c1:ad:43:10:02:6c:55:f8:99:3a:
d1:87:9d:b4:24:f9:02:d1:a9:25:ea:2d:1a:ff:b3:a9:05:7c:
f0:32:58:dc:1c:73:ce:06:3b:c8:e5:58:3c:64:22:e8:0a:33:
a9:dd:55:d7:d5:ae:59:08:ac:99:15:88:1e:79:f8:79:30:02:
a2:18:0e:04:52:ba:0f:06:fa:cf:94:0a:c5:50:a9:e9:ff:85:
52:7e:9d:e9:69:9c:d1:f6:14:e0:45:97:8e:41:22:56:86:8f:
61:50:29:c1:c6:2b:da:2e:f2:8f:62:9c:b9:2a:82:16:6c:4e:
54:d8:4b:10:5f:4d:20:ba:8e:24:1e:ae:c2:63:75:e5:3d:40:
6a:12:8e:73:7e:ef:99:cc:45:96:12:65:ea:e8:43:24:b7:4c:
47:fa:1d:9c:94:17:71:1a:5d:fb:2a:2b:b1:be:98:d9:e8:79:
ff:21:36:a4:09:bd:9e:f1:aa:50:2c:c0:1c:10:b3:83:1d:0d:
ca:79:0a:03:20:0a:aa:80:55:2b:80:5f:e1:85:89:29:98:70:
0c:ea:6d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net