Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/BKmYuvDxnNh77uiFk4khIDksk78.roa
File: BKmYuvDxnNh77uiFk4khIDksk78.roa (raw, json)
Hash identifier: OP0jJlll7Tu1uMqANMbxvySWhPdfCkotwu4xLh2jiS0=
Subject key identifier: 04:A9:98:BA:F0:F1:9C:D8:7B:EE:E8:85:93:89:21:20:39:2C:93:BF
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 018B8A50D93A72CF2011EBCE633349E65B2A
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/BKmYuvDxnNh77uiFk4khIDksk78.roa
Signing time: Wed 01 Nov 2023 09:57:16 +0000
ROA not before: Wed 01 Nov 2023 09:57:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206130
IP address blocks: 185.110.112.0/22 maxlen: 22
2a06:55c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:50:d9:3a:72:cf:20:11:eb:ce:63:33:49:e6:5b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Nov 1 09:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04a998baf0f19cd87beee88593892120392c93bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8b:e2:a2:a3:0c:c3:77:4f:7c:41:45:63:a2:
77:f6:eb:72:8c:0a:6a:d5:a7:fe:c3:4c:70:86:c8:
cc:a7:4a:46:81:69:5d:fc:b7:93:c3:d1:06:a5:a6:
43:6e:ed:a8:a1:52:b3:b0:97:08:0b:16:f7:bd:c7:
98:f9:21:d6:7a:9e:ca:af:98:31:21:e3:24:27:54:
ea:85:5c:3b:e9:12:88:aa:60:11:8a:bf:49:a5:96:
d9:a8:3e:9a:b0:d8:ab:36:69:3a:35:41:00:95:92:
d9:a7:b7:02:56:e4:3f:99:36:df:7c:93:46:8b:8c:
f1:75:fe:57:6e:6b:85:54:18:ea:54:7d:a8:50:06:
3d:f4:9b:93:bc:dd:d4:92:e4:5a:8e:10:a8:cc:d3:
c7:b4:ee:64:07:e8:7b:c0:44:e8:43:1b:6d:e6:4d:
8e:a6:fa:f1:56:95:5c:09:7c:46:82:1f:06:12:5d:
a3:31:72:72:e1:a6:8b:ac:36:0b:93:00:e9:fa:be:
d9:3d:19:0e:9f:ad:2a:18:3b:44:9b:12:e1:c0:48:
56:d1:5b:1c:0f:ca:a7:0e:36:13:76:51:4d:55:af:
f9:0d:01:cf:83:66:26:f1:1c:60:fd:f2:56:14:e9:
95:a1:cb:32:c8:38:2b:96:ac:0f:86:0f:85:65:9f:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:98:BA:F0:F1:9C:D8:7B:EE:E8:85:93:89:21:20:39:2C:93:BF
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/BKmYuvDxnNh77uiFk4khIDksk78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.112.0/22
IPv6:
2a06:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
55:11:ff:0a:8e:51:d4:fd:4b:5a:fe:5f:de:a3:4f:9b:11:1e:
f9:33:f8:14:95:8e:4e:9c:14:ff:0b:d3:e2:e5:f3:90:3f:5b:
08:45:83:9a:d3:dc:a2:30:79:59:19:fd:29:69:e1:ce:1c:7b:
a6:13:35:4a:87:1c:12:81:26:59:c6:ef:48:58:50:fe:42:8b:
21:fd:2e:9d:c0:80:fc:bd:ee:43:59:61:89:45:14:1a:4e:d4:
69:bf:21:b8:fa:73:28:d7:01:1e:5e:ee:90:7f:8a:44:8e:86:
90:65:db:2a:ef:a7:2e:49:08:c3:30:27:ef:d9:1f:76:73:1e:
84:a7:19:89:47:af:35:00:42:95:39:5c:f1:f1:02:c5:cf:7f:
1f:d7:c7:4a:f4:f2:dc:da:9b:6a:f6:a1:94:fb:f1:1c:93:41:
0a:5e:10:58:16:45:63:94:c2:4b:38:2e:4b:30:87:8c:74:58:
44:02:4b:eb:06:c6:97:7e:64:10:2d:93:a0:0b:7c:69:dc:f8:
4f:e0:1a:22:79:ab:bc:3d:5d:09:af:32:9a:08:b4:cb:f0:ba:
e8:3d:db:09:e7:ad:c0:4c:e6:34:26:f0:2d:d0:05:e5:61:ca:
62:20:b6:79:07:a8:61:22:6f:5a:06:00:ca:e7:c3:5d:00:27:
4f:f0:f3:da
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYuKUNk6cs8gEevOYzNJ5lsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OGIyNDFmN2NhYzdkMWU1MjFlMjgzMTQ3ZWM2MTc2M2M0
MjJhYTcwHhcNMjMxMTAxMDk1NzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGE5OThiYWYwZjE5Y2Q4N2JlZWU4ODU5Mzg5MjEyMDM5MmM5M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgovioqMMw3dPfEFFY6J39utyjApq
1af+w0xwhsjMp0pGgWld/LeTw9EGpaZDbu2ooVKzsJcICxb3vceY+SHWep7Kr5gx
IeMkJ1TqhVw76RKIqmARir9JpZbZqD6asNirNmk6NUEAlZLZp7cCVuQ/mTbffJNG
i4zxdf5XbmuFVBjqVH2oUAY99JuTvN3UkuRajhCozNPHtO5kB+h7wEToQxtt5k2O
pvrxVpVcCXxGgh8GEl2jMXJy4aaLrDYLkwDp+r7ZPRkOn60qGDtEmxLhwEhW0Vsc
D8qnDjYTdlFNVa/5DQHPg2Ym8Rxg/fJWFOmVocsyyDgrlqwPhg+FZZ8hbwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFASpmLrw8ZzYe+7ohZOJISA5LJO/MB8GA1UdIwQY
MBaAFLeLJB98rH0eUh4oMUfsYXY8QiqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTIt
YzBkOTczY2EyNWQ4LzEvQkttWXV2RHhuTmg3N3VpRms0a2hJRGtzazc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kMDMwNWYtMmIwZC00NDgwLThkOTItYzBkOTczY2EyNWQ4
LzEvdDRza0gzeXNmUjVTSGlneFIteGhkanhDS3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuW5wMA0E
AgACMAcDBQMqBlXAMA0GCSqGSIb3DQEBCwUAA4IBAQBVEf8KjlHU/Uta/l/eo0+b
ER75M/gUlY5OnBT/C9Pi5fOQP1sIRYOa09yiMHlZGf0paeHOHHumEzVKhxwSgSZZ
xu9IWFD+Qosh/S6dwID8ve5DWWGJRRQaTtRpvyG4+nMo1wEeXu6Qf4pEjoaQZdsq
76cuSQjDMCfv2R92cx6EpxmJR681AEKVOVzx8QLFz38f18dK9PLc2ptq9qGU+/Ec
k0EKXhBYFkVjlMJLOC5LMIeMdFhEAkvrBsaXfmQQLZOgC3xp3PhP4Boieau8PV0J
rzKaCLTL8LroPdsJ563ATOY0JvAt0AXlYcpiILZ5B6hhIm9aBgDK58NdACdP8PPa
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:02 2025 by rpki-client