Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/BeEmjpGBq_VqutNVErhRxFDusSY.roa
File: BeEmjpGBq_VqutNVErhRxFDusSY.roa (raw, json)
Hash identifier: /L8+Lej2bE2ehCBI063DuE0r0qIqEozYCxu3eYzkWYM=
Subject key identifier: 05:E1:26:8E:91:81:AB:F5:6A:BA:D3:55:12:B8:51:C4:50:EE:B1:26
Certificate issuer: /CN=f2f672bdb7b07659147e587d4431aa604f76a384
Certificate serial: 12C530B4
Authority key identifier: F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/BeEmjpGBq_VqutNVErhRxFDusSY.roa
Signing time: Sat 01 Jan 2022 07:55:03 +0000
ROA not before: Sat 01 Jan 2022 07:55:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 192.108.34.0/24 maxlen: 24
193.22.112.0/24 maxlen: 24
193.22.114.0/23 maxlen: 23
193.22.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314912948 (0x12c530b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f672bdb7b07659147e587d4431aa604f76a384
Validity
Not Before: Jan 1 07:55:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05e1268e9181abf56abad35512b851c450eeb126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:89:ab:e2:d3:e0:b6:c3:06:55:59:b9:8e:
b9:a5:b6:63:51:7a:cb:ee:93:53:75:2c:a5:20:7a:
a3:d4:f3:e2:4c:3c:62:21:1a:80:2f:e0:f9:3d:5c:
aa:11:47:3f:8a:8d:a6:14:05:01:53:08:55:50:f3:
ef:b8:90:43:49:bd:1b:02:41:05:eb:70:10:d1:7b:
a6:3b:d4:7c:f1:62:6c:fc:eb:5f:e5:3d:4f:54:7b:
8f:8f:4f:d4:ee:b1:b1:c8:33:86:57:13:66:36:15:
71:03:11:7d:7f:20:51:80:70:dd:56:ce:87:a8:be:
ea:f1:b7:7a:70:56:bc:e0:bd:f6:b1:1b:e0:80:b1:
1c:e7:15:d8:c4:8d:02:94:09:69:67:1e:00:f1:de:
32:3a:7e:49:03:7d:73:a7:e1:1a:5c:d9:a6:00:5f:
a2:3c:62:28:86:5f:a3:40:c2:44:db:9e:95:90:71:
b2:ed:be:61:11:c4:6d:2e:fe:7c:39:a0:98:10:3d:
9b:67:01:c4:8c:3b:d7:6c:68:2e:e4:60:1a:34:49:
90:77:24:84:ef:5c:db:9e:9d:47:01:e2:38:cb:c9:
a8:c2:7f:54:b6:78:54:09:2d:4a:5f:64:54:89:b1:
2c:bd:b8:9c:b6:9f:6b:4c:b7:53:7c:5b:e6:1a:a4:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E1:26:8E:91:81:AB:F5:6A:BA:D3:55:12:B8:51:C4:50:EE:B1:26
X509v3 Authority Key Identifier:
keyid:F2:F6:72:BD:B7:B0:76:59:14:7E:58:7D:44:31:AA:60:4F:76:A3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vZyvbewdlkUflh9RDGqYE92o4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/BeEmjpGBq_VqutNVErhRxFDusSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3b1f56-8707-472c-8971-626ef88f21a9/1/8vZyvbewdlkUflh9RDGqYE92o4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.34.0/24
193.22.112.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:70:06:2c:51:03:7f:db:c5:4b:02:b5:52:eb:19:1c:49:38:
1d:52:d9:51:41:5b:02:2e:8e:9b:16:9a:98:fa:f0:49:99:0b:
2a:3a:13:00:46:2f:37:16:84:ce:e4:3f:eb:f2:51:ad:01:52:
fe:35:2e:02:db:1b:5e:62:6a:81:13:84:ac:e2:92:77:dd:7b:
6b:d8:c7:5d:9e:c3:84:13:b7:f8:51:b7:ff:48:7c:f2:a2:f9:
18:f3:19:90:8e:38:56:ec:8f:70:b7:46:24:58:7e:55:6d:f5:
39:99:bc:c3:e5:29:dc:12:ef:4b:43:b2:2c:45:b5:88:35:87:
7d:31:4b:c4:67:d3:65:33:ad:61:83:3d:20:04:a3:49:52:4c:
04:fa:e2:37:e8:e1:86:3f:98:e1:54:d3:e7:57:3c:21:d1:fb:
b3:b7:db:fb:e7:f2:c5:8f:bb:9d:4a:82:eb:b9:8f:59:27:38:
29:2c:d4:60:f2:11:aa:b2:a8:51:4d:bf:48:13:f9:22:aa:cd:
f5:a9:6a:b4:64:30:a0:a8:bb:df:f8:df:fc:f4:6e:98:6e:b3:
f4:95:99:90:83:f9:a9:e4:e4:1c:dc:2b:24:57:69:d8:60:29:
c8:03:1a:1d:a6:a7:64:28:a0:25:55:d6:76:95:83:ab:9d:30:
60:32:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org