Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BECDRmXl95vBuX_EXS5SHqU5tjY.roa
File: BECDRmXl95vBuX_EXS5SHqU5tjY.roa (raw, json)
Hash identifier: Zu+4YpBucwwApIoQMW5WhcdD4tTEUBVgXpBTiDf8HDo=
Subject key identifier: 04:40:83:46:65:E5:F7:9B:C1:B9:7F:C4:5D:2E:52:1E:A5:39:B6:36
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01850B391F8E55E86903C9AC5B392B1AD9F8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BECDRmXl95vBuX_EXS5SHqU5tjY.roa
Signing time: Tue 13 Dec 2022 11:22:51 +0000
ROA not before: Tue 13 Dec 2022 11:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 45.88.12.0/24 maxlen: 24
93.90.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:39:1f:8e:55:e8:69:03:c9:ac:5b:39:2b:1a:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 13 11:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0440834665e5f79bc1b97fc45d2e521ea539b636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:88:01:15:24:45:83:9f:bc:af:85:45:0f:
02:11:32:1b:b5:6d:48:85:32:20:46:aa:d2:bf:27:
55:5f:a2:d8:79:10:b9:34:3c:6b:ea:ac:cd:ee:07:
7a:5d:44:3d:c5:bd:7b:b1:25:05:c7:e7:98:f4:05:
58:df:5e:92:90:4e:5f:d2:cc:74:a6:2f:ad:da:aa:
11:ee:5c:0e:3b:7e:7f:97:fa:ea:cb:d0:bc:4f:e8:
b5:47:0c:5f:dc:dc:00:d7:22:03:bf:5c:6c:9a:60:
3b:81:3e:8a:e8:c6:f0:7d:c7:ea:c0:ee:d5:dc:07:
02:19:50:79:f6:c3:31:a8:8b:d0:47:c9:00:36:2b:
6f:38:70:e8:36:7c:d8:fd:62:e8:0f:7e:8c:c3:dd:
21:a9:cb:16:bd:3d:91:2e:74:c1:24:cc:15:f0:24:
f3:90:22:c6:6c:59:89:d3:9e:88:ed:b5:ad:0c:6a:
0a:e9:e5:aa:ed:9a:4b:8d:4c:d7:36:6a:32:f6:01:
f9:5a:35:af:11:1d:e9:4d:6c:e7:97:f4:26:5e:ab:
ae:61:5f:38:bf:64:aa:00:90:10:41:15:f6:39:06:
ae:30:ec:b5:1b:46:db:c0:02:15:cb:cd:ba:8a:8e:
10:7f:50:7d:03:f3:bc:6b:4a:b2:20:e7:3b:7b:72:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:83:46:65:E5:F7:9B:C1:B9:7F:C4:5D:2E:52:1E:A5:39:B6:36
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BECDRmXl95vBuX_EXS5SHqU5tjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
93.90.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ce:b7:4c:b7:81:69:3f:39:32:8c:b2:90:58:eb:4b:f4:48:
7e:62:2e:79:15:04:a6:42:ca:d5:ea:85:d4:0b:08:5c:cc:56:
d1:cc:d2:a2:10:8e:3f:ed:c2:35:1e:d6:8c:5f:48:24:e7:cd:
8f:f1:dd:0e:45:f8:fb:d5:17:84:e2:81:16:ce:69:73:63:43:
df:25:d2:3c:cf:b8:f2:e2:e2:e7:aa:6f:15:a8:83:25:ef:db:
40:dd:a3:ac:ae:a0:a0:bf:9d:4e:f3:1c:3b:43:c2:90:ce:c5:
61:f8:bf:f7:37:3f:98:5d:63:93:59:af:74:13:93:09:b8:a4:
1f:df:82:0c:65:b7:8a:d0:0f:ba:1f:fb:bc:cb:66:d4:d4:32:
18:19:6c:f7:12:41:fc:ef:94:81:5e:02:f7:8b:be:83:2c:ad:
56:a6:01:89:8c:73:c0:4d:dc:75:c7:30:51:1f:3d:00:db:cb:
1d:22:93:7e:b7:16:c6:73:b8:29:ae:18:40:b9:03:a5:e1:01:
7e:b8:87:bd:93:2c:0a:19:2b:fc:95:1e:46:0d:93:b7:ff:b2:
9d:d0:63:fa:a1:65:65:08:ff:c4:b4:89:de:6f:20:9a:24:3f:
63:74:3e:ba:25:03:83:8b:22:75:3f:82:2b:b2:5c:98:d5:3f:
72:8d:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org