Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/BEVE9meN6jeJVooKYxabQrb9_CQ.roa
File: BEVE9meN6jeJVooKYxabQrb9_CQ.roa (raw, json)
Hash identifier: VtrsrECcYwNlEDnZIZmj1/7zXBfj/uXkl/ajsKwp1d4=
Subject key identifier: 04:45:44:F6:67:8D:EA:37:89:56:8A:0A:63:16:9B:42:B6:FD:FC:24
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 01843CB167BE39B1A43759A9BBEA37FFEE5B
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/BEVE9meN6jeJVooKYxabQrb9_CQ.roa
Signing time: Thu 03 Nov 2022 08:52:49 +0000
ROA not before: Thu 03 Nov 2022 08:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21107
IP address blocks: 89.111.225.0/24 maxlen: 24
81.93.92.0/24 maxlen: 24
94.250.48.0/21 maxlen: 21
94.250.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:b1:67:be:39:b1:a4:37:59:a9:bb:ea:37:ff:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Nov 3 08:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=044544f6678dea3789568a0a63169b42b6fdfc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:64:24:5b:79:a3:dc:06:81:36:bd:c3:c8:
c8:ef:c6:e1:d8:04:fe:cc:bb:1e:f7:7e:51:a8:38:
48:a0:74:99:5e:75:fa:8c:d4:5c:1d:d8:c6:1d:64:
ff:f6:07:9a:8e:d5:c1:69:f3:90:e1:0b:eb:8e:6a:
d0:d0:2a:e1:68:91:ba:46:f1:6c:f5:04:11:4a:ff:
8b:e9:3d:90:01:87:2c:75:42:19:fa:58:fb:20:f9:
b7:cb:8e:c7:c3:fd:90:1a:fd:a5:46:ca:1f:65:54:
f0:1e:32:4f:e5:69:d4:35:07:c7:1a:d4:0d:7d:e9:
47:72:95:a2:72:61:ff:b7:45:49:d9:bf:07:a8:10:
75:20:05:77:45:b5:ba:3a:71:e3:a0:ba:cf:24:69:
08:b5:ff:74:56:32:a1:1c:4c:d0:54:01:a1:1b:c1:
36:43:04:71:7f:fe:74:52:b8:fd:00:3c:ef:b8:5b:
34:93:42:27:6d:7d:0b:7d:45:05:ca:c9:19:4b:21:
c5:c8:04:ed:17:9b:08:6e:0c:19:87:50:84:47:df:
36:5d:54:59:cf:3b:b1:5f:d7:3a:96:44:60:62:2e:
d0:79:04:a1:a7:3b:2c:92:3c:2b:28:6f:a1:2f:83:
e9:0c:2a:98:2c:fa:21:34:ce:fa:66:03:41:64:14:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:44:F6:67:8D:EA:37:89:56:8A:0A:63:16:9B:42:B6:FD:FC:24
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/BEVE9meN6jeJVooKYxabQrb9_CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.92.0/24
89.111.225.0/24
94.250.48.0-94.250.59.255
Signature Algorithm: sha256WithRSAEncryption
a1:d5:03:1d:99:81:07:03:b5:f5:0e:63:bc:31:83:93:04:52:
95:30:3e:0b:6f:fc:f3:7c:26:d5:4b:71:24:3a:02:17:f9:9f:
90:83:a1:9e:85:ce:e5:50:7d:f6:cf:17:cc:0c:88:dd:95:c7:
4e:e7:84:96:ad:5b:a3:0c:eb:c6:10:09:74:0d:3f:de:22:a3:
d6:aa:3b:fb:b9:b5:dc:2f:47:dd:1d:ab:e4:36:b5:01:c2:5e:
97:7c:3d:57:8e:01:d8:7d:32:da:cc:41:18:c0:86:b9:6d:57:
df:68:a2:7c:b0:d6:08:40:a7:32:8c:1c:9e:71:f9:6b:24:38:
8f:9e:a3:6a:8d:9f:8e:73:05:1a:f5:db:6f:54:a4:02:f9:f1:
9a:ab:7f:38:66:f2:52:b9:63:fc:8c:e5:c3:3a:20:9c:b6:15:
3f:3f:d5:83:3f:c7:fe:75:65:1a:6e:b5:0c:8e:4b:70:da:ec:
a0:c7:cc:a5:8d:60:42:f8:a5:ee:ec:1b:4d:ea:8c:47:03:07:
09:bd:bd:ef:dd:26:62:f9:d1:88:33:8e:50:3b:da:64:91:22:
65:23:4c:ba:46:ce:63:cc:76:fa:b7:9e:5a:50:28:a1:76:44:
72:50:71:7e:d8:f4:72:03:1c:3a:b0:47:de:d2:24:1e:ba:50:
36:fb:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:58 2024 by rpki-client on console-fra.rpki-client.org