Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BeHatQCwgnhCmRPrz10Pjc_56gI.roa
File: BeHatQCwgnhCmRPrz10Pjc_56gI.roa (raw, json)
Hash identifier: FgEtlFQvvrJSs3wyuTqraIhatehSbPLCUw16e+rQLmE=
Subject key identifier: 05:E1:DA:B5:00:B0:82:78:42:99:13:EB:CF:5D:0F:8D:CF:F9:EA:02
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018498F001A09350BC16F5951C0F65F45C1D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BeHatQCwgnhCmRPrz10Pjc_56gI.roa
Signing time: Mon 21 Nov 2022 06:46:16 +0000
ROA not before: Mon 21 Nov 2022 06:46:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 84.32.58.0/24 maxlen: 24
84.32.71.0/24 maxlen: 24
88.216.199.0/24 maxlen: 24
84.32.93.0/24 maxlen: 24
88.216.210.0/24 maxlen: 24
84.32.238.0/24 maxlen: 24
84.32.41.0/24 maxlen: 24
84.32.48.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
88.216.223.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.22.0/24 maxlen: 24
88.216.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:98:f0:01:a0:93:50:bc:16:f5:95:1c:0f:65:f4:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 21 06:46:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05e1dab500b08278429913ebcf5d0f8dcff9ea02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:b3:7a:7c:9c:ee:bd:bd:ab:ca:58:ee:da:
80:96:da:ff:cd:67:9e:ea:bb:a9:22:75:86:8a:64:
45:a6:22:9a:41:97:20:71:5c:52:03:be:c9:66:24:
e9:29:59:67:f1:7e:8f:b0:01:42:06:9f:4c:c1:52:
1d:a2:de:27:d3:ab:3a:9e:d5:1f:ac:54:71:c1:91:
64:4e:d1:30:09:5f:86:3b:ee:d5:66:d3:ed:e9:92:
5a:72:2a:f6:a8:8f:bd:6f:13:a5:55:09:91:42:ac:
3b:6d:d4:98:5d:51:d6:39:ff:51:75:5a:30:2a:06:
4a:81:77:b9:23:aa:15:2f:ed:38:de:03:36:86:5a:
d8:3c:62:4e:d5:6a:a2:e8:a6:b8:11:c1:d1:77:60:
2c:a2:ad:e3:32:33:1b:c3:15:3d:32:ac:9f:3c:fc:
a9:3a:87:59:a8:f7:19:2a:57:07:a8:8f:c5:c7:8c:
ed:4b:d3:9f:c7:2b:0a:ec:55:38:6e:48:42:a8:4a:
cd:31:b6:02:98:27:8c:11:f7:6e:83:82:89:bf:c7:
33:9f:f3:7d:81:47:2d:2c:79:c2:bb:55:a9:18:ff:
9b:97:bc:ad:b1:6b:1e:e5:8f:21:16:44:84:76:d4:
82:f1:6c:3f:df:12:b1:04:1e:47:29:42:87:a8:eb:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:DA:B5:00:B0:82:78:42:99:13:EB:CF:5D:0F:8D:CF:F9:EA:02
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/BeHatQCwgnhCmRPrz10Pjc_56gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.41.0/24
84.32.48.0/24
84.32.50.0/23
84.32.58.0/24
84.32.71.0/24
84.32.93.0/24
84.32.238.0/24
88.216.21.0-88.216.22.255
88.216.32.0/24
88.216.199.0/24
88.216.210.0/24
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ce:c5:a8:57:73:e0:c3:3b:38:99:0d:32:83:c0:36:d1:22:
6d:eb:b0:ed:24:35:34:0f:d4:ed:92:81:6b:10:64:25:3f:0b:
47:a8:7c:c2:ab:33:cd:c5:8d:f5:5b:63:c0:a7:a6:5a:98:3d:
9b:6e:ac:60:60:ad:bd:f1:02:df:5f:87:a1:3d:a8:90:8c:a7:
03:6a:7a:04:f1:36:b1:d4:16:6f:f0:ec:67:76:17:f4:11:6e:
16:39:0f:c6:78:4f:4b:6c:2a:69:f1:01:ca:d0:d2:0e:07:57:
84:59:d1:5b:93:a2:e7:c4:ce:c7:97:9c:2c:0b:be:9c:aa:4b:
af:35:2e:e7:56:82:22:0d:88:57:7a:c8:c1:33:35:2d:10:d2:
e6:e6:2d:00:24:5b:97:a2:32:91:f3:df:47:7b:96:41:18:8c:
20:ad:f9:e4:e7:dd:89:5c:4b:41:83:5a:25:6c:c2:49:dd:96:
6c:29:bd:e3:6d:e8:72:17:e0:85:38:9f:d1:4d:9d:98:05:69:
53:17:47:84:29:a7:1c:96:d7:3a:67:7b:d6:3e:8b:d7:91:4a:
c9:30:2a:92:d0:a4:fa:9f:3e:3d:06:31:e8:cf:0d:b6:34:75:
a9:c9:5b:b4:54:5b:e2:57:6c:09:d9:fa:d6:46:8c:cb:4f:35:
bd:c6:2f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:45 2023 by rpki-client on console-fra.rpki-client.org