Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/iHFKzdlT_mu7anWXJjp6kia0n9k.roa
File: iHFKzdlT_mu7anWXJjp6kia0n9k.roa (raw, json)
Hash identifier: w+8RrvcnXEalUaoyPdk7Dh+CYerERz7U9KCISzGpAvo=
Subject key identifier: 88:71:4A:CD:D9:53:FE:6B:BB:6A:75:97:26:3A:7A:92:26:B4:9F:D9
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 01856EAFE398E2F374765F46F75C875CC2A3
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/iHFKzdlT_mu7anWXJjp6kia0n9k.roa
Signing time: Sun 01 Jan 2023 18:54:58 +0000
ROA not before: Sun 01 Jan 2023 18:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48469
IP address blocks: 185.247.96.0/24 maxlen: 24
185.247.99.0/24 maxlen: 24
94.127.56.0/22 maxlen: 22
2a02:2188:1000::/36 maxlen: 36
2a02:2188:f000::/36 maxlen: 36
2a02:2188::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:e3:98:e2:f3:74:76:5f:46:f7:5c:87:5c:c2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Jan 1 18:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88714acdd953fe6bbb6a7597263a7a9226b49fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:50:ba:09:16:e0:ca:74:c4:3a:01:5f:96:e5:
76:e9:43:0d:12:dc:f2:4b:96:49:c1:35:97:18:37:
73:09:3f:d3:30:20:f6:96:08:2f:29:56:63:d2:e0:
bb:ed:45:ac:0c:da:95:46:b0:3a:e2:6b:2e:a7:29:
fb:8b:91:44:7b:4b:2d:4c:03:c0:cf:71:a1:62:e6:
cd:63:d7:5c:6e:d6:7f:70:73:72:f8:af:d6:f8:d5:
21:ce:cb:2b:b8:75:11:f1:41:20:a5:a7:f3:ee:7d:
67:e7:28:04:99:5b:4b:d4:0d:e5:11:43:7b:fe:e0:
6b:f2:d3:9d:6b:87:31:ce:f8:a1:e8:cb:a1:4d:c4:
3a:6d:0b:ad:1e:6f:65:13:db:22:f7:ae:49:e8:ab:
56:3a:f7:e8:3c:63:b2:94:c2:e4:61:d0:ef:0b:02:
2b:17:ed:8c:40:99:31:a5:a2:dc:60:f4:80:af:15:
28:92:c2:e9:73:5f:ad:7e:1f:7b:44:1b:4c:95:48:
2f:f7:c6:db:72:e5:28:63:05:2c:48:60:46:b0:53:
80:c4:35:25:8f:43:23:99:e4:6f:ac:cd:ce:f9:db:
a1:4b:18:74:5d:f6:aa:32:76:a8:bd:7a:37:a2:23:
4c:87:4e:63:ab:14:c6:ce:b9:68:10:89:a0:5a:65:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:4A:CD:D9:53:FE:6B:BB:6A:75:97:26:3A:7A:92:26:B4:9F:D9
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/iHFKzdlT_mu7anWXJjp6kia0n9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.56.0/22
185.247.96.0/24
185.247.99.0/24
IPv6:
2a02:2188::/48
2a02:2188:1000::/36
2a02:2188:f000::/36
Signature Algorithm: sha256WithRSAEncryption
67:4e:87:9c:d3:2e:a4:03:fc:1b:56:72:ff:28:0c:ee:f4:5a:
69:6d:db:66:8d:da:ab:6a:19:b9:44:d9:c7:fc:84:a7:36:d5:
c9:d0:41:b7:ad:5c:57:fe:09:3c:e8:24:a7:f7:88:f7:28:8c:
67:8f:47:56:90:e5:5a:ac:83:74:35:21:86:eb:96:18:13:cc:
63:65:84:3a:c2:a9:5a:a7:6b:93:fe:05:16:3f:8d:a8:5c:88:
5c:6c:92:3d:ee:bc:cc:11:b4:f1:57:d0:bb:26:1f:3c:0c:26:
83:86:6c:19:d7:2b:1d:f2:5e:bf:ab:d7:09:62:03:d4:93:fc:
be:b6:76:3c:7b:1e:3b:27:91:c2:d5:7d:f5:b3:ba:50:96:50:
bd:9e:b6:67:94:46:80:f4:a4:ea:e3:ae:29:38:06:e5:f0:b6:
10:49:ae:9f:d0:3c:a2:a5:95:5d:f6:c7:04:a2:39:f2:34:ca:
93:de:b6:4c:a5:26:c5:fc:79:1e:f7:c7:d5:96:32:9d:8c:ed:
db:a4:0a:01:5d:ed:c3:05:35:d7:55:fd:5a:89:1f:1a:bc:b8:
ed:e9:33:ba:80:e4:a3:49:63:59:2a:f1:28:77:74:a1:40:4e:
7b:18:3a:9e:3e:d3:47:b4:1b:5d:7d:5d:80:3b:c2:85:91:1b:
b2:c9:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:11:26 2025 by rpki-client