Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/rrq-9bQuBICO3KLgJXO3NQavqP8.roa
File: rrq-9bQuBICO3KLgJXO3NQavqP8.roa (raw, json)
Hash identifier: RA56IPgomkL+kz+4Y8cb2FE2sdZfQxaLI7iMne8Age0=
Subject key identifier: AE:BA:BE:F5:B4:2E:04:80:8E:DC:A2:E0:25:73:B7:35:06:AF:A8:FF
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 1ED7B778
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/rrq-9bQuBICO3KLgJXO3NQavqP8.roa
Signing time: Sat 01 Jan 2022 08:56:10 +0000
ROA not before: Sat 01 Jan 2022 08:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43494
IP address blocks: 185.89.244.0/23 maxlen: 23
185.89.246.0/23 maxlen: 23
212.158.176.0/24 maxlen: 24
78.40.2.0/23 maxlen: 23
78.40.4.0/22 maxlen: 22
185.86.236.0/22 maxlen: 24
185.86.236.0/24 maxlen: 24
2a00:a9c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517453688 (0x1ed7b778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Jan 1 08:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aebabef5b42e04808edca2e02573b73506afa8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:b2:99:0a:ed:94:a2:06:7a:0a:83:8b:db:
35:8a:16:fc:25:66:20:f4:b1:fd:fa:b5:04:b5:01:
f3:b8:b7:0e:d3:d5:b7:40:d3:6e:2d:96:24:50:ae:
1b:2b:51:72:2d:a9:24:d9:44:31:5c:4d:0d:69:b7:
23:98:dd:99:6f:58:82:5b:c4:40:5f:41:a5:ea:32:
fb:4c:5d:02:5b:1f:ee:55:0e:c7:c3:9e:4c:03:f0:
1a:6c:db:1d:c8:0b:dc:d1:4a:d9:07:d4:eb:bc:71:
87:a6:73:64:43:5b:8f:56:f9:45:e3:20:16:6d:21:
90:7c:90:29:03:38:08:1a:da:a1:0e:0c:cf:01:47:
42:3b:6a:2d:9c:6a:67:4c:80:42:0a:8f:30:2d:a6:
bb:da:a6:eb:34:c0:cc:f1:04:d2:5a:7b:d8:b1:6e:
2c:c9:91:14:ca:0c:1f:e1:3b:a2:c3:dd:8a:37:43:
d5:23:aa:69:a9:26:c3:8c:61:68:d7:95:b5:fe:30:
11:8b:40:ac:eb:ad:ea:23:de:25:38:20:10:a4:45:
9e:5c:14:6d:98:f3:4d:64:ef:e9:9d:85:75:30:e1:
69:26:1e:3e:89:a3:aa:ce:81:3d:8e:ad:5e:09:97:
2a:ea:85:38:64:b3:a7:94:71:1e:48:fb:01:5e:cc:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:BE:F5:B4:2E:04:80:8E:DC:A2:E0:25:73:B7:35:06:AF:A8:FF
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/rrq-9bQuBICO3KLgJXO3NQavqP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.2.0-78.40.7.255
185.86.236.0/22
185.89.244.0/22
212.158.176.0/24
IPv6:
2a00:a9c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:5e:12:35:2a:0d:93:74:6f:d1:14:63:b9:8c:64:fd:98:c5:
1c:f1:fc:e8:dd:6b:1f:0a:5d:20:a2:b6:7d:3d:52:75:9b:f3:
36:7b:3f:49:ac:35:7b:63:de:57:98:e7:8c:64:a5:cf:b1:a0:
25:2b:a1:71:4a:0b:e2:c9:22:9f:b1:ca:d1:a2:84:9e:bf:4f:
7d:72:d2:3c:ce:96:6e:91:1f:d2:f8:3a:0b:58:10:1f:89:65:
dc:36:f7:e0:f5:15:ad:ac:bd:ee:8f:39:b6:41:53:0c:d6:10:
7b:47:42:8e:72:96:13:d6:7b:e0:f3:c7:a5:21:ac:29:59:d4:
10:78:9d:24:7e:13:28:12:76:54:1f:b6:cf:cd:f2:83:d8:67:
94:aa:d5:69:16:84:32:bd:b9:02:b8:be:cf:da:4b:75:89:15:
3c:d2:2f:f8:d1:b2:08:4f:69:4f:cf:dd:ac:57:2b:6a:e1:ce:
c5:d0:ca:70:7f:08:f7:6b:38:bc:7e:5a:88:91:3a:83:07:68:
94:7b:91:a5:b0:92:a6:a1:36:eb:08:7a:cc:c6:f0:00:9e:70:
ce:8f:04:c3:09:c7:e1:ce:15:32:b2:02:4e:1d:5e:4b:67:3f:
d0:c2:c1:46:d5:3c:ca:bc:49:8d:aa:66:be:d2:35:e1:f9:8c:
c8:d5:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net