Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/BEW5TApe92boXnMHXc0GQvLfJSA.roa
File: BEW5TApe92boXnMHXc0GQvLfJSA.roa (raw, json)
Hash identifier: b8hyuYFVeZhz98kzCTOVOpJgboS0Cx3Qv64X8b/kvuE=
Subject key identifier: 04:45:B9:4C:0A:5E:F7:66:E8:5E:73:07:5D:CD:06:42:F2:DF:25:20
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 0186655CAC42B28F19ED00094EADB5268DD4
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/BEW5TApe92boXnMHXc0GQvLfJSA.roa
Signing time: Sat 18 Feb 2023 16:30:17 +0000
ROA not before: Sat 18 Feb 2023 16:30:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209500
IP address blocks: 193.31.7.0/24 maxlen: 24
83.229.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:5c:ac:42:b2:8f:19:ed:00:09:4e:ad:b5:26:8d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Feb 18 16:30:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0445b94c0a5ef766e85e73075dcd0642f2df2520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:cd:f9:4c:6a:43:7f:14:9c:d4:d4:c0:90:
d9:42:75:7e:e5:9c:4b:f0:90:7f:19:9d:2e:31:7b:
db:17:2b:e7:d3:c7:bf:9a:d4:65:50:af:ff:36:57:
3e:5d:83:6e:bb:69:1b:a9:af:e9:ca:43:79:c5:fc:
55:25:f4:a3:f5:d4:4c:c2:5b:2d:36:f3:b9:b8:d3:
4d:5a:7a:7f:87:11:be:92:01:24:53:ec:6f:e4:a4:
f8:ee:ad:01:ff:cb:f3:91:7a:64:ab:65:12:26:b6:
c8:20:80:b7:03:5e:e5:5b:aa:5f:e2:2f:e5:96:a6:
db:9c:f2:3d:d9:3e:b9:65:a0:13:f2:8f:13:e4:59:
0a:df:c3:c4:18:86:1d:a1:3b:9e:b5:4a:8a:1f:97:
8e:4f:8b:16:0e:58:24:26:45:c4:06:92:ca:25:b9:
03:60:db:72:3b:52:80:b2:7b:5a:b2:ca:38:ca:3b:
23:9f:d9:86:b0:e0:34:ad:2d:e6:24:be:27:e5:cd:
83:06:7a:64:78:59:89:1f:b5:26:f5:a6:bd:98:65:
99:f7:91:00:ce:4b:1b:96:a9:dc:b2:19:d8:4f:59:
80:80:4b:b3:a0:3e:71:9d:68:4e:3f:22:5f:cf:3a:
fc:22:75:f8:9d:f5:67:e8:01:cf:07:b2:53:85:c9:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:B9:4C:0A:5E:F7:66:E8:5E:73:07:5D:CD:06:42:F2:DF:25:20
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/BEW5TApe92boXnMHXc0GQvLfJSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.62.0/24
193.31.7.0/24
Signature Algorithm: sha256WithRSAEncryption
02:ca:43:13:b5:f6:41:2f:76:01:20:67:a5:56:57:03:89:d6:
c6:8b:ff:89:ca:53:dc:8c:23:9d:49:05:1b:06:ec:33:94:25:
b1:34:08:19:84:4e:7a:0d:fa:31:a9:f5:dd:9d:63:04:f8:f0:
3e:89:86:3b:72:39:08:23:65:95:30:33:f6:78:f1:dd:c7:9c:
76:32:28:8f:df:a0:2b:39:3b:02:ef:ef:c8:88:88:03:b9:fa:
b9:2b:a9:0c:4a:7d:36:be:21:d9:08:47:92:49:ed:36:df:e2:
cd:86:97:ec:40:c1:02:57:3d:e3:c0:1b:52:b6:38:0b:dd:d0:
17:44:c8:1f:9d:c9:4e:42:6b:87:bc:20:0f:ac:e5:ad:c5:92:
de:c3:79:07:8e:7e:56:d2:67:28:70:25:f7:71:a8:a5:ad:57:
87:26:0e:cf:11:4d:2d:fb:f8:34:be:9a:a8:f0:ba:b2:2c:37:
f3:ba:af:a6:e2:d4:a9:1b:58:51:00:50:7c:a7:a2:33:c2:b9:
58:90:90:5a:f2:50:29:c6:c4:fa:f5:1b:8a:cc:ef:aa:2c:cc:
6a:9d:0f:0d:21:5d:9b:a8:e2:8c:5a:05:0a:ac:0a:5b:34:60:
b1:94:a0:65:54:41:4a:7c:72:7a:b5:5a:b3:02:9b:da:40:b4:
32:83:7a:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZlXKxCso8Z7QAJTq21Jo3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjMwMjE4MTYzMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDQ1Yjk0YzBhNWVmNzY2ZTg1ZTczMDc1ZGNkMDY0MmYyZGYyNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooHN+UxqQ38UnNTUwJDZQnV+5ZxL
8JB/GZ0uMXvbFyvn08e/mtRlUK//Nlc+XYNuu2kbqa/pykN5xfxVJfSj9dRMwlst
NvO5uNNNWnp/hxG+kgEkU+xv5KT47q0B/8vzkXpkq2USJrbIIIC3A17lW6pf4i/l
lqbbnPI92T65ZaAT8o8T5FkK38PEGIYdoTuetUqKH5eOT4sWDlgkJkXEBpLKJbkD
YNtyO1KAsntasso4yjsjn9mGsOA0rS3mJL4n5c2DBnpkeFmJH7Um9aa9mGWZ95EA
zksblqncshnYT1mAgEuzoD5xnWhOPyJfzzr8InX4nfVn6AHPB7JThcnJrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFARFuUwKXvdm6F5zB13NBkLy3yUgMB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvQkVXNVRBcGU5MmJvWG5NSFhjMEdRdkxmSlNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU+U+AwQA
wR8HMA0GCSqGSIb3DQEBCwUAA4IBAQACykMTtfZBL3YBIGelVlcDidbGi/+JylPc
jCOdSQUbBuwzlCWxNAgZhE56DfoxqfXdnWME+PA+iYY7cjkII2WVMDP2ePHdx5x2
MiiP36ArOTsC7+/IiIgDufq5K6kMSn02viHZCEeSSe023+LNhpfsQMECVz3jwBtS
tjgL3dAXRMgfnclOQmuHvCAPrOWtxZLew3kHjn5W0mcocCX3cailrVeHJg7PEU0t
+/g0vpqo8LqyLDfzuq+m4tSpG1hRAFB8p6IzwrlYkJBa8lApxsT69RuKzO+qLMxq
nQ8NIV2bqOKMWgUKrApbNGCxlKBlVEFKfHJ6tVqzApvaQLQyg3pc
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:14 2025 by rpki-client