Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/BeT1gtlJAE_UvpXbSlP8uSijCP4.roa
File: BeT1gtlJAE_UvpXbSlP8uSijCP4.roa (raw, json)
Hash identifier: GZn9lRTW2FW8vWd4QIPxQdNgnmn/La6v+g1Kh8AUdeg=
Subject key identifier: 05:E4:F5:82:D9:49:00:4F:D4:BE:95:DB:4A:53:FC:B9:28:A3:08:FE
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 04E614D4
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/BeT1gtlJAE_UvpXbSlP8uSijCP4.roa
Signing time: Sat 01 Jan 2022 15:04:24 +0000
ROA not before: Sat 01 Jan 2022 15:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204369
IP address blocks: 185.137.52.0/22 maxlen: 22
185.137.52.0/23 maxlen: 23
185.137.54.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82187476 (0x4e614d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jan 1 15:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05e4f582d949004fd4be95db4a53fcb928a308fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:c2:5e:b5:ad:7e:55:37:05:0c:70:f1:46:
cf:61:cf:9d:ff:ce:81:10:f4:f5:77:c8:40:f9:1a:
92:2b:63:19:f1:32:26:c6:8c:ab:ab:d4:2a:52:25:
63:68:dd:2f:f7:64:d3:d8:81:d3:7d:59:eb:6e:b0:
f4:37:89:c8:68:9c:02:b7:e7:de:6f:b3:cc:32:32:
db:6d:ef:8f:00:2c:ef:ed:25:d1:1d:11:5c:5d:d8:
07:49:6e:2e:03:d5:24:ee:89:b9:c1:f3:46:41:ad:
6a:54:eb:3e:7b:36:62:e8:89:aa:51:b3:86:42:fa:
d4:8c:8c:07:11:47:c0:ad:35:7b:67:bc:0e:34:30:
ec:76:10:3e:a5:4f:05:3b:76:49:83:63:a9:30:57:
c8:05:97:d4:66:45:6b:68:a1:1f:ac:85:06:31:cd:
13:62:d5:9a:90:0d:27:50:fd:be:4e:b6:47:0d:ad:
e1:70:c4:43:3f:e6:77:30:12:eb:be:24:47:5c:7d:
60:f9:f0:31:2b:fb:9e:b5:ac:58:6b:41:6e:da:54:
77:5c:21:91:ea:72:57:8e:87:21:3d:4d:59:4b:88:
04:78:52:ab:d4:2e:36:c7:6e:9e:f6:d1:7f:6d:d4:
e4:3d:0f:9f:8e:cb:f7:77:c1:62:1e:a4:bf:ef:05:
09:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:F5:82:D9:49:00:4F:D4:BE:95:DB:4A:53:FC:B9:28:A3:08:FE
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/BeT1gtlJAE_UvpXbSlP8uSijCP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.52.0/22
Signature Algorithm: sha256WithRSAEncryption
74:2a:f8:01:f9:08:4d:b8:9d:c6:53:cb:d6:22:2a:f8:50:f7:
fc:47:56:1d:2f:61:26:b5:f0:4a:b7:a9:3b:4d:59:16:17:0c:
db:3f:47:8b:17:b7:16:7d:45:84:21:9e:8f:d2:4d:ce:11:40:
8e:59:83:e9:ca:2d:63:da:ed:b0:ea:40:ca:50:b3:8d:45:54:
e5:8c:32:b2:44:e2:e6:6a:08:84:ec:5b:73:0f:5a:8f:e5:d0:
4f:57:0c:54:09:05:8b:42:c2:c5:e0:b4:9b:59:6e:a0:4e:51:
04:f1:14:3b:2e:bc:3f:3a:06:da:1a:25:fc:b9:4d:ed:cc:ac:
e7:82:ff:44:15:e7:66:6d:07:18:5b:73:49:7c:eb:96:30:32:
4d:3c:a9:ec:9b:ef:f8:b6:26:30:74:15:09:6b:03:77:60:66:
1e:ec:1d:60:da:3f:b1:7c:ab:c8:6a:1a:9e:4f:ad:bb:69:88:
ac:cd:4e:10:af:1d:f5:87:5e:e8:2c:5a:d7:3c:25:e6:54:94:
ca:4f:87:4e:47:c6:c9:42:98:80:e0:bc:af:84:79:97:5c:50:
d2:4b:0d:a8:5e:91:00:d9:f8:a3:bb:cb:e9:92:ab:dc:75:e4:
03:f8:69:56:66:96:f9:05:5d:1f:86:12:cd:45:60:87:5f:ab:
6f:88:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org