Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/BEapWVNwkw0XrxAD-Jv0ohOmDlo.roa
File: BEapWVNwkw0XrxAD-Jv0ohOmDlo.roa (raw, json)
Hash identifier: o9qLMldEOwKiabfUppX2IRI2GX0u36d9rCFrPLHmh28=
Subject key identifier: 04:46:A9:59:53:70:93:0D:17:AF:10:03:F8:9B:F4:A2:13:A6:0E:5A
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 01C8BDBD
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/BEapWVNwkw0XrxAD-Jv0ohOmDlo.roa
Signing time: Sat 01 Jan 2022 15:57:33 +0000
ROA not before: Sat 01 Jan 2022 15:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9066
IP address blocks: 213.252.128.0/18 maxlen: 18
62.89.160.0/19 maxlen: 19
212.68.64.0/19 maxlen: 19
2a01:ac00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29932989 (0x1c8bdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 1 15:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0446a9595370930d17af1003f89bf4a213a60e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:57:9b:ad:ce:d8:36:db:09:b5:b1:26:ac:
65:12:7e:09:ef:c7:09:a6:4c:66:bb:53:54:2a:f9:
71:0e:99:45:d7:56:af:99:eb:05:e8:b3:ce:ab:e7:
49:84:ce:ca:4a:31:92:4e:26:c1:b2:e1:df:39:6d:
e0:b6:92:8f:11:16:94:19:93:f2:53:03:fb:e2:ff:
20:5a:ec:74:0b:31:bb:ea:19:a0:77:48:59:92:33:
de:35:97:86:b7:46:7a:7f:12:9a:5f:82:6b:86:e0:
54:2e:12:33:2c:a5:ce:23:95:13:f5:d9:18:e7:67:
8d:d3:81:f3:14:a6:5e:45:bd:ad:c5:d4:7b:46:17:
ca:46:88:13:23:4e:38:ec:2c:24:d7:34:9f:e4:a9:
b3:e8:b1:74:dd:29:d4:e4:39:56:85:51:8a:d0:e5:
4b:b1:37:8c:14:b1:55:43:3a:f2:77:20:48:97:14:
ec:69:54:e9:0b:9e:23:32:ed:ae:d9:02:b9:4d:9c:
82:a6:a3:c2:d2:b6:b3:30:24:d4:16:e9:f7:7c:42:
85:12:0b:26:b4:9f:25:bb:83:9d:0b:dc:a7:3f:ba:
5c:35:09:5b:e8:94:ce:40:42:10:23:c0:0d:2f:67:
14:2f:4b:06:ac:e1:29:63:ce:2c:c6:93:84:d4:46:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:46:A9:59:53:70:93:0D:17:AF:10:03:F8:9B:F4:A2:13:A6:0E:5A
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/BEapWVNwkw0XrxAD-Jv0ohOmDlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.160.0/19
212.68.64.0/19
213.252.128.0/18
IPv6:
2a01:ac00::/32
Signature Algorithm: sha256WithRSAEncryption
2d:59:59:55:e8:b2:20:07:45:5d:74:09:28:73:a4:7d:0d:6d:
05:b7:78:b4:6a:45:cb:cc:7f:8b:1f:1b:ab:c0:5a:8f:a7:e1:
dd:7f:32:3b:cb:41:d6:6f:fb:fb:fe:df:96:04:26:5e:3b:7f:
66:1b:47:c3:d8:2d:08:25:29:08:21:58:21:82:c2:df:64:17:
4c:3a:51:06:73:23:49:0f:1b:c3:db:ca:d8:ea:76:f3:3f:da:
fc:ba:15:37:e5:8a:f0:e5:2f:58:ff:06:68:e8:15:a7:67:7b:
eb:f1:b1:77:d5:04:e5:af:fe:a3:9f:65:ba:32:bc:00:a4:1f:
fa:bb:48:f8:1d:34:7f:30:bc:cb:a7:60:ab:f3:ea:43:f1:81:
f4:6e:7e:cc:11:93:b2:22:4b:1c:ff:23:42:3c:51:d7:15:e4:
fc:36:f5:3e:57:b9:f9:b5:4d:19:6f:59:12:f6:d4:ab:40:57:
a6:e9:fb:30:f7:9c:ec:cc:eb:2e:d1:79:4c:62:91:07:4a:2f:
a3:22:a8:9e:65:79:ba:57:dd:a9:38:f5:3f:01:3c:39:c4:25:
a8:d3:9a:9f:e8:50:07:3a:e0:33:c8:ea:d7:ef:3b:39:9a:cd:
2e:6b:3c:a6:e2:d2:5d:e8:e3:69:97:2f:4e:a1:a1:4a:d9:ad:
2b:a2:0e:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:54 2024 by rpki-client on console-fra.rpki-client.org