Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/BeNMYoFzYskLeGYnrM7t2_IbVAE.roa
File: BeNMYoFzYskLeGYnrM7t2_IbVAE.roa (raw, json)
Hash identifier: TOBnvoTG9xQwEWoJTZ63Q9qH+M+8pbmOaUXEG0KZP40=
Subject key identifier: 05:E3:4C:62:81:73:62:C9:0B:78:66:27:AC:CE:ED:DB:F2:1B:54:01
Certificate issuer: /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Certificate serial: 018A16D2BEA78CDCD15009EEE3AEB1878134
Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/BeNMYoFzYskLeGYnrM7t2_IbVAE.roa
Signing time: Mon 21 Aug 2023 06:40:24 +0000
ROA not before: Mon 21 Aug 2023 06:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16286
IP address blocks: 185.113.112.0/24 maxlen: 24
185.113.113.0/24 maxlen: 24
185.113.115.0/24 maxlen: 24
185.113.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:16:d2:be:a7:8c:dc:d1:50:09:ee:e3:ae:b1:87:81:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Validity
Not Before: Aug 21 06:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05e34c62817362c90b786627acceeddbf21b5401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:ea:61:3f:92:2c:ad:74:96:30:43:16:e3:
c5:10:64:57:bd:28:36:53:34:a3:66:3d:ca:87:67:
c2:67:da:d6:4a:31:1d:22:cf:19:a4:48:e8:ed:af:
b1:95:81:53:d5:47:9e:e7:f7:27:95:0f:9c:3e:f9:
67:02:8e:c9:25:d4:6b:06:f6:7b:67:bf:3f:90:14:
c5:c0:79:fd:c6:40:f8:8e:54:63:42:96:4a:30:09:
0a:88:1a:af:0e:5d:04:1f:77:b4:89:68:a4:ad:15:
6b:b4:6d:e8:4d:67:c3:c6:a4:e3:e9:10:ee:43:b9:
e2:ff:59:07:d6:d8:cb:d8:a6:49:cc:85:80:c8:79:
b8:9e:fa:75:54:bd:1f:3f:ca:36:8d:76:dd:a8:6d:
e6:6b:b1:94:ba:e0:80:73:a4:1d:7e:fb:90:bd:1f:
1e:73:a0:6e:f5:13:f2:4a:41:4d:1c:e1:35:f0:da:
97:37:e2:b8:c3:20:65:37:fd:2e:2d:18:b5:c1:92:
99:21:4d:e5:da:54:15:75:49:5e:4d:44:64:b4:02:
3e:71:35:c6:c6:ac:55:53:3d:3d:c4:3d:43:21:20:
d6:de:32:08:25:f7:0c:51:8f:22:27:56:02:41:be:
be:f1:c6:43:11:fa:bd:1b:7e:9d:b4:ec:ff:2e:06:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E3:4C:62:81:73:62:C9:0B:78:66:27:AC:CE:ED:DB:F2:1B:54:01
X509v3 Authority Key Identifier:
keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/BeNMYoFzYskLeGYnrM7t2_IbVAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.112.0/22
Signature Algorithm: sha256WithRSAEncryption
82:dd:bb:d5:ea:6d:c8:fd:a8:34:d2:ed:75:f6:f1:34:21:3c:
ed:d6:0e:a3:fa:31:4a:e4:46:24:a4:68:18:df:8a:1a:9a:20:
68:9e:a2:f3:6f:90:4b:32:44:4a:5b:e5:76:ae:0c:66:5f:0c:
e3:85:25:52:1e:1a:c2:67:6a:d4:0c:fb:be:51:94:ee:01:e1:
74:86:2b:f3:c3:68:23:dc:26:66:2b:d4:2d:a6:3a:b8:c8:08:
82:11:44:05:a7:7c:b1:58:59:11:cb:cb:9c:f2:bd:34:8b:e0:
b3:2f:68:93:35:c2:58:b7:bf:18:7b:90:18:14:94:65:71:5a:
55:bd:62:40:da:d8:12:04:bb:36:66:c3:0b:d1:3a:2e:37:4a:
e8:67:ed:21:98:2f:3d:ac:02:a7:e2:13:e8:fd:4a:de:c6:18:
6c:2f:26:d7:b0:8d:88:78:46:43:aa:62:d1:c7:dd:40:4c:e3:
a0:94:3b:5a:68:96:8e:62:65:98:96:2c:b8:8d:c8:42:7c:e0:
bc:72:64:29:5d:c1:0f:b8:48:d4:a7:f4:f0:b7:41:8d:79:fe:
7e:a5:83:c1:76:2f:23:de:2e:39:bf:22:63:de:9d:33:73:d7:
e3:43:00:52:93:e7:d7:59:2e:38:5a:4c:96:13:d8:99:97:f0:
6d:da:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:29:33 2025 by rpki-client