Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/BKimoc9_XRk8NRPzUQg_3dojXk4.roa
File: BKimoc9_XRk8NRPzUQg_3dojXk4.roa (raw, json)
Hash identifier: 2XjulkVeUOtrYTCI5jEvVnBl7DxH7ZLpZrMKBCKkDbc=
Subject key identifier: 04:A8:A6:A1:CF:7F:5D:19:3C:35:13:F3:51:08:3F:DD:DA:23:5E:4E
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 5CB7FB
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/BKimoc9_XRk8NRPzUQg_3dojXk4.roa
Signing time: Fri 28 Jan 2022 21:41:14 +0000
ROA not before: Fri 28 Jan 2022 21:41:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61146
IP address blocks: 185.176.184.0/22 maxlen: 22
31.216.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6076411 (0x5cb7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Jan 28 21:41:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04a8a6a1cf7f5d193c3513f351083fddda235e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:19:1d:a9:9a:d3:bb:a4:c4:e1:2a:9f:80:
ba:fb:76:c3:e4:77:a2:d0:c4:84:69:c5:5f:64:25:
fb:ad:ac:9d:04:85:71:b4:0e:be:b8:8f:90:e1:d8:
aa:35:3e:80:53:89:59:ca:9b:72:fc:0c:b0:8f:6a:
0e:fb:86:fe:a3:71:5b:47:87:33:46:31:60:82:d6:
94:89:82:d4:7c:16:44:52:4b:95:1d:34:d4:95:ab:
3d:ea:5d:16:a3:69:91:58:c6:4d:b4:50:48:9f:04:
47:aa:68:16:7c:0e:2f:13:85:11:b3:5c:79:3e:f8:
4b:ad:7a:b8:cd:48:b1:ea:24:3a:6a:c6:42:3d:59:
3d:52:0b:0f:bf:2e:d4:a8:ec:f2:74:c7:79:30:71:
7b:5c:35:72:2a:c8:43:c5:75:6c:0f:e5:4b:45:25:
11:ea:a5:dd:a5:84:6f:47:79:de:3d:6a:af:e2:d2:
ab:a5:85:5e:85:c0:54:a4:c1:a6:a4:6c:12:a2:33:
de:13:88:32:ee:9d:f4:5a:08:05:f5:6f:de:6e:97:
97:01:22:d8:aa:24:fa:04:00:71:d0:00:2e:f1:93:
74:81:b1:3e:92:ce:55:2a:99:39:9d:ec:d8:80:6e:
36:d8:0e:3d:25:b6:5f:01:60:a8:a7:9e:9b:f9:bb:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:A6:A1:CF:7F:5D:19:3C:35:13:F3:51:08:3F:DD:DA:23:5E:4E
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/BKimoc9_XRk8NRPzUQg_3dojXk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.136.0/21
185.176.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:bd:9f:dd:d6:47:5d:2c:45:a8:a7:91:ea:da:a2:56:52:5a:
53:5a:bc:8e:03:33:55:4a:29:5b:ef:3e:01:0d:ad:f9:a8:b3:
f8:51:32:59:af:eb:c8:37:3f:08:e0:2b:c8:35:d1:67:5c:5b:
5e:0f:83:6f:e0:f7:fc:88:c2:81:7d:c6:dc:ea:64:42:b1:17:
48:19:4f:57:c3:9d:0f:d2:0c:f9:5e:02:de:65:55:d0:04:ea:
05:30:bb:52:80:c0:78:79:99:14:bf:2d:b6:62:33:69:04:db:
0a:5a:08:c4:eb:a4:bc:56:48:24:3d:1b:c6:ba:69:eb:24:bc:
bf:f0:15:79:2d:0b:4f:0e:ad:d9:3d:9b:a7:f6:75:99:3b:0d:
26:42:ce:37:ce:29:54:2b:48:30:6b:1f:1a:68:63:02:9b:4f:
a8:31:15:3e:1a:5e:08:76:6e:c3:c7:7a:b7:6c:62:84:1d:31:
a9:0c:16:c6:13:98:94:92:77:4c:bd:ea:34:18:7b:4f:a0:a1:
86:d3:13:d2:99:ab:5d:fc:4b:4a:2d:a0:d0:4c:63:63:de:e4:
4a:82:2e:53:e7:41:8c:83:c2:43:98:ef:7c:06:df:e9:7e:a9:
d0:58:17:ce:8b:4a:11:da:3e:91:3e:04:41:7d:4c:04:e9:74:
cf:a6:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:13 2025 by rpki-client