Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/begSUN_M8VE4FRdT8q5cjdbw800.roa
File: begSUN_M8VE4FRdT8q5cjdbw800.roa (raw, json)
Hash identifier: 2cR2MneFka6berMqzVcQkSopLBTB1fOpN/pDXVjjjdg=
Subject key identifier: 6D:E8:12:50:DF:CC:F1:51:38:15:17:53:F2:AE:5C:8D:D6:F0:F3:4D
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 02835987
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/begSUN_M8VE4FRdT8q5cjdbw800.roa
Signing time: Sat 01 Jan 2022 05:05:16 +0000
ROA not before: Sat 01 Jan 2022 05:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197506
IP address blocks: 31.44.16.0/20 maxlen: 20
31.44.26.0/24 maxlen: 24
45.144.100.0/24 maxlen: 24
45.144.101.0/24 maxlen: 24
2a00:d400::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42162567 (0x2835987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Jan 1 05:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6de81250dfccf15138151753f2ae5c8dd6f0f34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:50:f1:31:5d:f4:14:3e:23:e0:28:05:2d:
11:73:c0:10:a0:3c:63:d5:e6:f8:45:00:fc:ca:08:
ec:39:ee:b1:6c:19:5a:a4:9f:8c:e3:b6:db:2e:33:
18:cd:90:0b:be:62:47:c7:41:00:14:ed:e3:6c:22:
23:2d:c2:7d:43:08:f9:c2:b5:80:41:b6:bf:85:e1:
7d:d3:72:b0:9e:e7:67:65:46:28:79:22:95:95:7e:
4c:46:46:7b:79:7b:9e:e2:f9:36:0f:0f:ee:9e:0b:
09:e8:ad:c1:75:29:41:ee:27:bf:f7:e1:4d:14:31:
59:96:60:75:56:cd:b1:3d:c8:3a:10:5a:e9:d7:19:
4a:3b:9e:86:0b:fb:55:51:04:dc:8d:2e:11:d4:7c:
50:93:21:1f:fb:ce:54:8a:7f:3c:68:0f:bf:91:4d:
a4:e4:de:c8:eb:3a:56:3e:1b:3e:40:53:83:9e:ec:
02:fc:a7:4a:93:99:16:86:69:aa:13:ef:b0:30:83:
d1:05:88:83:e8:96:6f:bb:80:00:c9:96:52:bd:60:
13:1b:e3:75:0d:0c:9f:b3:1b:82:3d:4b:2f:fa:f4:
5e:52:79:7b:cd:ce:74:c5:bd:52:b9:8e:78:0a:48:
3e:75:76:5a:16:7a:78:16:1f:7e:8b:fe:09:3f:3e:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:12:50:DF:CC:F1:51:38:15:17:53:F2:AE:5C:8D:D6:F0:F3:4D
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/begSUN_M8VE4FRdT8q5cjdbw800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.16.0/20
45.144.100.0/23
IPv6:
2a00:d400::/32
Signature Algorithm: sha256WithRSAEncryption
5b:86:57:e2:65:83:eb:2f:31:8f:ef:05:66:69:10:4b:f0:e9:
d9:da:56:a1:d5:da:e6:f0:0d:8f:a7:0a:87:27:5c:86:b6:ab:
ce:01:9e:e2:7c:7a:e6:ec:4f:68:ff:76:1c:3f:91:60:4a:3b:
e6:89:aa:25:43:e1:74:49:a0:54:59:fe:e0:85:46:77:04:37:
b6:45:c2:0e:0b:2e:9e:16:74:7e:51:94:4b:bf:64:65:3e:0c:
d6:8f:24:b5:f1:0e:2d:82:70:20:c4:aa:17:86:4d:32:72:52:
ea:ff:59:2c:0b:52:53:42:6a:09:07:d2:cd:1f:73:12:6d:4e:
af:12:d8:91:b0:e2:0d:43:fd:7c:c9:20:17:31:35:14:7c:cc:
fc:ae:a4:94:c4:42:8f:4d:89:28:9b:96:4b:0d:ef:b2:3b:0c:
28:f4:80:29:a7:b7:08:d7:d1:b8:3e:4d:b9:4e:8d:ec:4c:84:
a5:5a:53:2b:80:48:6b:7a:ea:90:f7:a0:ae:1c:e7:4f:91:5f:
dd:88:51:18:da:af:96:4b:82:ff:8c:1c:07:18:ca:75:14:91:
e4:36:b0:a5:4a:7c:60:8c:48:7e:ab:b7:b0:8a:88:11:30:85:
6f:25:6d:10:03:0c:c1:a3:64:6b:b0:bb:80:8b:a7:30:ae:ed:
3c:99:15:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:11 2024 by rpki-client on console-ams.rpki-client.org