Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/BepZuec-4qFt3Kr6LV49FBUPP5w.roa
File: BepZuec-4qFt3Kr6LV49FBUPP5w.roa (raw, json)
Hash identifier: j/Esb0noZbj/wi0vr7k+hl4GXOCamntFygB8Q8QnGFU=
Subject key identifier: 05:EA:59:B9:E7:3E:E2:A1:6D:DC:AA:FA:2D:5E:3D:14:15:0F:3F:9C
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3B937037
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/BepZuec-4qFt3Kr6LV49FBUPP5w.roa
Signing time: Sun 24 Apr 2022 11:06:00 +0000
ROA not before: Sun 24 Apr 2022 11:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12660
IP address blocks: 77.237.77.0/24 maxlen: 24
46.209.40.0/22 maxlen: 22
46.209.40.0/23 maxlen: 23
46.209.42.0/23 maxlen: 23
46.209.80.0/22 maxlen: 22
46.209.80.0/21 maxlen: 21
46.209.84.0/22 maxlen: 22
46.209.0.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999518263 (0x3b937037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Apr 24 11:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05ea59b9e73ee2a16ddcaafa2d5e3d14150f3f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:8d:c9:c2:97:5a:7b:74:37:9e:a5:44:e9:
64:cf:b0:9e:a4:8f:4b:85:2d:a5:c7:fb:9a:3a:73:
44:ed:29:4f:22:64:a7:db:b5:b0:89:f5:ee:3b:d1:
d0:7d:f0:a4:7e:a3:af:39:05:7c:36:8e:18:39:b6:
fe:bf:28:65:9e:3c:15:da:d0:82:e2:bc:e4:aa:99:
81:d7:3b:c6:5d:c2:99:30:d1:10:b5:1a:09:29:e8:
0d:53:cd:cd:28:6d:82:80:8b:fb:48:06:3c:66:6d:
fc:9e:ea:08:dc:5d:8a:d6:7f:8a:40:cf:0d:f5:38:
fb:45:c9:a6:35:cd:dd:d0:d3:36:51:65:93:83:80:
f1:03:d6:d5:8a:6e:95:9f:58:8f:6b:dd:f4:f4:11:
6e:2d:a4:24:0e:63:1e:64:bc:3f:a6:88:88:c8:ef:
dd:fe:89:05:68:23:20:7a:0e:41:bc:a5:1e:57:2a:
55:79:21:cb:00:29:fe:6a:d6:9f:b4:20:54:7e:9a:
e8:53:0a:c4:a1:ad:07:a3:bc:dc:73:1a:3a:d8:b5:
4e:70:1e:d9:92:58:66:f5:9b:fb:4f:bc:e7:8f:3e:
f4:03:4a:5f:67:3b:53:f4:4a:16:aa:b4:9d:f1:20:
ca:b1:30:60:53:25:62:44:c2:57:0a:e1:bd:cc:1f:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EA:59:B9:E7:3E:E2:A1:6D:DC:AA:FA:2D:5E:3D:14:15:0F:3F:9C
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/BepZuec-4qFt3Kr6LV49FBUPP5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.0.0/23
46.209.40.0/22
46.209.80.0/21
77.237.77.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6d:2b:43:71:d9:76:95:06:80:be:45:59:18:b2:8b:e4:ed:
ec:be:bf:f7:79:d7:23:5c:4a:51:b2:17:09:1d:be:db:77:42:
bd:db:c7:a8:f2:d5:00:c7:f4:8d:47:3e:c9:9e:00:1f:e1:50:
37:4b:67:95:82:9f:20:e2:bc:dd:4d:16:ea:6d:b2:17:9c:85:
72:e2:61:01:16:96:ae:aa:28:74:97:7c:69:33:de:1b:93:07:
55:49:9d:79:d1:d9:88:94:fa:1d:39:db:bb:31:16:23:8d:71:
3d:6e:a5:0d:d1:38:b0:86:75:2a:ae:8a:35:b9:9f:db:fc:9c:
a0:32:df:54:67:05:01:26:97:94:71:34:72:fb:30:de:32:4c:
c3:8f:3f:65:d6:dd:45:ba:c9:10:24:e9:9c:a7:e3:0b:e3:c9:
d5:11:d0:a9:84:df:37:47:b0:34:fe:b9:e3:15:ef:9a:8a:84:
81:b7:64:ec:9e:2d:43:11:ac:a3:e3:07:d3:98:d4:d0:8b:f1:
08:7c:5b:fd:a0:a9:e3:b3:64:31:3b:b4:4c:38:f1:90:da:cc:
3b:7e:93:e5:a4:ac:8e:f3:1a:54:57:8e:e1:3b:6d:79:c8:db:
9d:09:6d:f0:db:1c:a0:e5:f0:15:6e:2c:e7:93:91:03:60:5c:
6d:77:1f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-ams.rpki-client.org