Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/BMDh2Gy-T4YLiQWdYtVwzhOo84o.roa
File: BMDh2Gy-T4YLiQWdYtVwzhOo84o.roa (raw, json)
Hash identifier: ix8l30Dy14y6mNA4XtHQwrotPIpHRKrhY+154dsdWVQ=
Subject key identifier: 04:C0:E1:D8:6C:BE:4F:86:0B:89:05:9D:62:D5:70:CE:13:A8:F3:8A
Certificate issuer: /CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Certificate serial: 10222935
Authority key identifier: 1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/BMDh2Gy-T4YLiQWdYtVwzhOo84o.roa
Signing time: Sat 01 Jan 2022 09:53:50 +0000
ROA not before: Sat 01 Jan 2022 09:53:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212988
IP address blocks: 185.112.78.0/24 maxlen: 24
185.112.78.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270674229 (0x10222935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Validity
Not Before: Jan 1 09:53:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04c0e1d86cbe4f860b89059d62d570ce13a8f38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:18:ba:08:0c:37:a6:64:44:2e:ba:3c:0b:
87:23:c1:67:ca:73:df:ef:47:38:32:1f:1b:f0:95:
48:f7:9f:b2:63:78:b0:16:cb:2d:80:aa:95:9d:76:
1f:d1:cd:f7:bf:e2:03:20:a1:74:49:fe:a8:41:8d:
6d:00:5a:f6:8d:96:3e:77:85:fc:f0:a5:f8:82:58:
02:94:71:b6:96:4a:2a:9a:55:36:5d:78:f2:ad:96:
91:1f:95:70:cc:20:39:1b:63:c0:d1:46:ca:57:f8:
7f:e5:6f:aa:5e:d2:3e:60:c0:71:97:a9:96:f7:1a:
01:38:30:cb:3c:76:d2:22:72:e7:8c:f5:53:e5:b8:
8e:1f:be:ae:69:2e:cd:6a:b3:a3:2b:de:9a:5e:e6:
5a:c0:0f:ab:06:21:da:ff:ec:49:23:d8:3d:cc:5e:
db:c5:e7:77:7f:de:3f:72:2c:dc:3b:f6:0f:2a:bb:
10:c5:4e:44:ce:b4:fd:b6:22:3c:15:ea:ca:1f:3f:
bd:28:bc:9e:d0:d7:bc:cc:55:b9:a3:52:ec:2f:e1:
6b:0b:fb:1d:17:1f:cc:06:19:39:2a:f6:74:42:17:
a0:5f:33:5e:b0:20:72:1d:40:25:83:f9:4d:76:01:
bf:c2:2a:16:c2:4a:8c:0d:2b:f9:10:2f:68:c2:02:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:E1:D8:6C:BE:4F:86:0B:89:05:9D:62:D5:70:CE:13:A8:F3:8A
X509v3 Authority Key Identifier:
keyid:1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/BMDh2Gy-T4YLiQWdYtVwzhOo84o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.78.0/23
Signature Algorithm: sha256WithRSAEncryption
45:94:8b:78:7c:f1:f5:09:eb:6f:e7:ed:71:be:d7:31:c7:c6:
61:27:49:f6:0a:d5:a1:1f:9c:4c:11:4a:6b:ab:29:6c:e6:ce:
72:dc:06:d7:b9:ef:f6:dd:17:1e:35:c2:de:90:77:fc:c6:7f:
f4:27:c5:dd:c9:b6:78:77:28:94:79:44:8b:4e:63:34:f4:39:
8e:81:a8:26:be:80:67:4d:41:4e:a3:b6:c3:33:d9:0d:5c:ce:
22:00:07:90:5d:59:e5:dd:99:2b:10:e1:fb:2e:79:62:1e:1e:
88:b9:94:cc:70:35:8b:17:3d:fd:d5:9b:38:57:33:83:7a:25:
49:29:4a:76:44:e4:64:47:59:b9:f9:2c:68:e6:c3:22:b9:b9:
8d:52:c7:7e:83:f5:8b:4c:3c:bc:d3:74:2b:b8:70:54:7f:cd:
69:08:5b:9e:0e:8d:a5:b7:00:62:ce:66:7b:cb:b4:fd:8b:49:
fe:db:3d:42:7b:c1:9e:34:79:80:11:c3:f6:c3:5b:30:cd:ba:
53:f0:99:f6:8c:45:1e:64:f9:32:96:c8:2a:40:de:44:1d:f6:
c7:b3:21:89:7f:eb:d9:b8:56:52:6c:a8:27:5e:74:98:91:28:
2a:a3:57:38:62:fe:0d:a1:fa:17:3d:3c:1a:d8:58:99:94:79:
83:8f:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:09 2023 by rpki-client on console-fra.rpki-client.org