Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/BWeewaTtRXEJkKTSo9wLFUVkXVs.roa
File: BWeewaTtRXEJkKTSo9wLFUVkXVs.roa (raw, json)
Hash identifier: NNBG7qFYcSrnlRzwIUElF/zaNyJ44HFZWQixLFpNm28=
Subject key identifier: 05:67:9E:C1:A4:ED:45:71:09:90:A4:D2:A3:DC:0B:15:45:64:5D:5B
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17EA59B7
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/BWeewaTtRXEJkKTSo9wLFUVkXVs.roa
Signing time: Sat 01 Jan 2022 00:54:44 +0000
ROA not before: Sat 01 Jan 2022 00:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212197
IP address blocks: 94.100.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401234359 (0x17ea59b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05679ec1a4ed45710990a4d2a3dc0b1545645d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:5e:67:ae:41:1b:64:63:d4:29:58:2d:81:
20:0a:93:34:54:50:94:cb:df:7c:22:68:c3:e4:3e:
a8:4f:37:2b:87:5b:af:23:56:19:84:5b:03:5c:80:
bf:ae:ce:d9:64:01:ba:59:70:08:f3:c8:1b:30:4a:
c8:d7:b3:a9:2d:0d:71:9f:c5:0f:69:47:a6:94:c7:
6e:6d:c7:a1:56:d7:b7:3b:a3:39:38:79:5a:c2:cb:
bd:64:d2:9e:1f:27:8c:db:18:4d:65:e9:3f:39:a1:
84:4d:f4:e4:cf:36:a2:1b:54:ef:e8:70:78:58:2d:
78:45:ae:c9:a5:af:5d:fa:b3:6b:bb:8f:9c:86:ad:
1a:d1:7c:a2:70:82:fa:ad:a9:35:e6:81:fb:0d:65:
1f:60:18:65:0c:07:12:56:4a:a0:1e:62:34:2a:f9:
2f:68:c7:7b:f6:4c:8b:a8:80:a2:b6:45:7c:d3:97:
e0:2b:d1:bb:75:53:27:69:b9:d4:e3:55:4a:92:82:
6e:da:29:54:eb:c3:48:f3:4d:14:24:bd:1e:5a:91:
10:7b:06:a1:18:8c:84:f2:06:28:36:6c:bd:02:71:
44:ae:34:64:66:02:04:c3:a3:65:77:80:1b:32:fb:
35:3d:b1:7a:ee:e2:7e:04:2d:fc:fa:9a:b1:8c:3e:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:67:9E:C1:A4:ED:45:71:09:90:A4:D2:A3:DC:0B:15:45:64:5D:5B
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/BWeewaTtRXEJkKTSo9wLFUVkXVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.5.0/24
Signature Algorithm: sha256WithRSAEncryption
38:92:5b:d9:b3:b2:93:d8:2c:ff:c2:2b:03:48:2a:de:8d:8b:
0d:bd:60:60:7e:28:03:fa:57:e5:cc:31:08:0c:50:10:b1:83:
2d:17:00:ea:27:91:6a:1c:5d:d0:ac:e5:42:e1:6c:8f:3e:7d:
cd:73:48:2d:b6:4f:e3:f5:2b:e0:33:29:5d:be:b1:a1:1d:db:
ff:f3:5b:1c:54:af:0c:0f:11:eb:7d:2a:70:f0:00:72:a1:4e:
63:5e:8f:c9:aa:44:95:64:36:89:86:75:43:85:ae:9e:0d:c0:
22:11:16:ed:02:d6:a4:93:a8:a3:07:9b:95:f0:fc:a2:6c:b7:
5b:9f:01:5d:d9:dc:24:bc:a4:6f:00:83:f3:a4:4d:e3:74:9f:
80:d5:f4:d4:98:4e:6b:15:7a:0c:ea:90:33:18:08:84:25:63:
c9:09:73:d4:3a:66:12:b2:5e:cc:00:2c:a4:2f:34:a2:57:c9:
4a:c1:92:24:96:49:44:2e:45:98:03:6f:76:91:40:5c:98:56:
49:a3:0e:28:c6:e5:a0:01:bb:de:6f:57:36:c1:de:60:73:6d:
5b:71:f2:d9:b2:1f:88:ed:22:87:a4:6e:b9:1f:14:c3:07:aa:
db:af:36:a6:2e:26:08:14:ff:21:64:5f:05:89:d7:bf:48:54:
19:64:83:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-ams.rpki-client.org