Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/Beyo5VwsxN3AQ7t7Ccp6qwYLVnk.roa
File: Beyo5VwsxN3AQ7t7Ccp6qwYLVnk.roa (raw, json)
Hash identifier: kAQaQeSckFq9eyIX+jc64jikL8rKagmTezi/XVydR5s=
Subject key identifier: 05:EC:A8:E5:5C:2C:C4:DD:C0:43:BB:7B:09:CA:7A:AB:06:0B:56:79
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 071172F9
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/Beyo5VwsxN3AQ7t7Ccp6qwYLVnk.roa
Signing time: Sat 01 Jan 2022 12:58:03 +0000
ROA not before: Sat 01 Jan 2022 12:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24845
IP address blocks: 194.246.144.0/21 maxlen: 21
194.246.152.0/22 maxlen: 22
194.246.160.0/19 maxlen: 19
194.113.40.0/23 maxlen: 23
194.246.192.0/18 maxlen: 18
194.246.128.0/20 maxlen: 20
2a00:1830::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118584057 (0x71172f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Jan 1 12:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05eca8e55c2cc4ddc043bb7b09ca7aab060b5679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:b6:7f:d9:cc:ab:2e:99:3f:89:6a:88:03:
6f:75:ec:d3:f1:30:53:fc:af:f6:84:b1:65:8a:8a:
a9:5d:0d:e4:e0:63:4a:30:37:a2:f0:cf:93:b5:bc:
9b:61:6f:2e:0e:7a:c0:1a:1f:e2:f1:c5:1d:9e:72:
b2:27:2b:7f:99:54:27:aa:de:27:ef:b3:5b:59:bd:
24:77:be:fb:bf:0e:e0:eb:90:74:0a:7f:86:a5:54:
5f:ac:77:b7:05:77:18:3f:02:44:59:92:2f:0a:6d:
59:3e:b6:12:66:f0:92:ba:62:45:9f:30:e8:8a:02:
ad:bf:fe:69:5e:10:a3:42:e2:75:06:08:19:d2:01:
20:e1:5d:8a:95:3f:b0:67:4f:18:aa:1f:44:f7:72:
1d:87:8f:88:ac:34:ad:c5:7b:b5:5c:c0:f8:bf:ee:
b5:97:69:ac:4d:e6:ab:2a:a6:97:ec:ea:66:d0:57:
73:fb:47:f3:ae:90:a8:c9:7c:99:1e:c9:a7:0a:4e:
c8:33:da:63:f6:7b:d2:25:5b:a4:38:9b:91:91:6b:
52:52:ad:d2:ed:60:d6:0a:af:bb:7f:ea:d0:3b:92:
57:65:c5:6f:8e:df:34:0c:a9:b7:8d:66:2f:aa:45:
56:1f:e1:bd:7f:9e:05:21:9b:3f:4d:f4:1f:78:5e:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EC:A8:E5:5C:2C:C4:DD:C0:43:BB:7B:09:CA:7A:AB:06:0B:56:79
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/Beyo5VwsxN3AQ7t7Ccp6qwYLVnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.40.0/23
194.246.128.0-194.246.155.255
194.246.160.0-194.246.255.255
IPv6:
2a00:1830::/32
Signature Algorithm: sha256WithRSAEncryption
85:a2:a4:90:f1:4f:9f:d0:ea:4d:fb:68:a8:9b:e8:29:5c:c9:
01:94:23:75:9e:fe:b4:b0:63:98:8f:f3:37:c6:a1:97:0e:7d:
45:85:03:84:65:73:0d:e3:f2:15:1d:3f:97:ff:df:f9:8e:62:
f7:6a:35:ff:8f:24:8e:0b:d2:07:1d:cb:92:bb:9c:e5:6c:55:
5e:56:04:e2:04:28:55:f3:03:f3:4f:3c:20:22:b0:db:e5:3b:
ab:b2:37:bd:8c:ac:a6:96:ff:b4:f6:00:63:6e:01:fc:fe:31:
64:7b:a0:a7:0f:97:b6:b3:6d:c6:5a:e3:cf:99:4a:d0:08:8e:
85:95:2c:23:4b:a3:c4:34:59:4f:e9:3a:4b:3f:7d:a7:49:02:
64:13:72:b8:36:e4:97:60:e7:7c:95:f1:e1:49:f3:3a:57:b6:
61:80:cc:60:14:19:f2:2a:31:d4:dc:d8:87:58:9b:f1:6c:6c:
b9:f3:d4:5c:d1:6b:23:1f:55:0d:0c:1a:96:94:96:45:9d:65:
5e:02:2f:67:3d:39:51:0b:1c:9f:b1:82:75:51:1d:5b:42:c1:
38:88:aa:e1:24:5e:63:01:08:92:35:89:e2:85:d6:54:cb:97:
80:81:1d:c4:34:9a:7e:eb:b2:7f:c9:80:07:39:87:1e:ab:8f:
d4:67:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net