Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/BOMEXrZBrOVh3H2VHmhZrZ-zv4o.roa
File: BOMEXrZBrOVh3H2VHmhZrZ-zv4o.roa (raw, json)
Hash identifier: GA4wbBn1zIu0pOx0DHlgwpfoVE1RXfjKG5kL7ReSh2w=
Subject key identifier: 04:E3:04:5E:B6:41:AC:E5:61:DC:7D:95:1E:68:59:AD:9F:B3:BF:8A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17F9BBE1
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/BOMEXrZBrOVh3H2VHmhZrZ-zv4o.roa
Signing time: Sat 01 Jan 2022 04:54:55 +0000
ROA not before: Sat 01 Jan 2022 04:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213363
IP address blocks: 185.114.226.0/24 maxlen: 32
185.166.236.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402242529 (0x17f9bbe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04e3045eb641ace561dc7d951e6859ad9fb3bf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:be:da:12:d7:9d:46:26:a4:4f:c0:22:7f:
55:ae:f2:78:f6:3c:8f:53:5a:dd:4c:97:f1:99:71:
c1:ac:62:69:a7:a9:72:7d:84:46:ec:eb:9c:54:2f:
0d:e9:74:bb:06:d6:b7:38:6e:9c:bc:92:fe:83:9a:
3c:2e:37:ac:69:28:c4:4b:83:7a:f6:e0:18:72:24:
31:09:d7:de:33:03:28:91:f6:63:50:aa:21:ce:fb:
ff:a2:57:5a:16:c4:d6:d2:0f:1f:ba:06:d3:d6:27:
25:45:84:6d:c3:18:80:8b:ad:3e:a5:18:ef:30:21:
19:42:6c:ce:f1:b8:31:22:c0:41:07:22:9e:15:ae:
42:60:ae:8d:c6:30:61:66:61:f8:43:55:35:82:23:
dc:b0:41:25:89:ac:d6:db:b2:f9:c9:a5:5a:3d:33:
15:0c:6b:cf:97:bb:72:b1:10:78:ea:9a:c4:0d:9b:
7a:0a:c1:06:04:a1:b6:48:52:bb:d8:25:39:51:50:
b5:b8:57:36:ca:be:83:66:46:ee:fe:0e:c7:a8:1e:
28:f9:8a:60:b1:25:af:6c:54:2e:2e:56:3e:86:ae:
58:35:6b:d6:b3:00:b2:d5:f3:76:0c:e8:93:76:79:
83:b2:30:9e:49:c8:d3:1c:79:17:2a:91:06:e9:49:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:04:5E:B6:41:AC:E5:61:DC:7D:95:1E:68:59:AD:9F:B3:BF:8A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/BOMEXrZBrOVh3H2VHmhZrZ-zv4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.226.0/24
185.166.236.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3b:46:ba:fd:28:78:d4:e7:d4:d1:c6:e5:65:f0:10:4f:cb:
03:a5:70:6a:99:45:af:60:64:c3:58:bf:bb:e2:68:16:7c:94:
00:c5:85:aa:e4:06:5e:90:f7:7e:ca:0d:45:d7:e7:40:20:fc:
9f:b9:9c:b2:16:46:1c:67:86:61:65:90:27:dd:28:18:48:74:
ff:95:79:66:21:a6:a1:80:61:d2:9e:a0:c9:1a:b6:1f:0f:ef:
93:22:8e:f0:b0:6c:20:92:10:5f:b5:36:f7:1d:7c:f0:67:9d:
ff:2d:1d:07:e5:dc:d3:a1:c9:3e:78:55:f3:48:c4:af:b1:ba:
a0:50:3a:e4:c7:84:f7:da:3f:ac:25:1e:86:ba:50:38:0d:48:
5b:7c:4d:16:26:7b:85:28:11:38:67:fa:04:da:dc:be:fd:f0:
15:8e:7b:28:e9:54:2e:13:20:d3:8d:b9:0c:eb:40:ad:41:ea:
b2:b7:4a:ed:00:ee:d2:5e:ad:b1:d4:30:94:da:a9:1e:bb:ba:
00:56:de:fc:31:61:39:fe:04:1b:54:60:fe:fb:27:6e:df:50:
05:cb:fd:43:d1:e8:f7:b9:28:d3:12:7f:2d:cd:81:c0:1a:1e:
4e:8c:84:8d:6d:11:30:bd:59:e3:15:b8:95:2a:37:94:bb:2e:
06:1f:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org