Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/BM_2RFf2yzLll9qht8QR6oYpAn0.roa
File: BM_2RFf2yzLll9qht8QR6oYpAn0.roa (raw, json)
Hash identifier: Clp1U4lF0EIX9z5OjZgb4tyX52mkAQo7Zks/yZBbIpU=
Subject key identifier: 04:CF:F6:44:57:F6:CB:32:E5:97:DA:A1:B7:C4:11:EA:86:29:02:7D
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 965B2A
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/BM_2RFf2yzLll9qht8QR6oYpAn0.roa
Signing time: Sat 01 Jan 2022 01:51:06 +0000
ROA not before: Sat 01 Jan 2022 01:51:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207013
IP address blocks: 185.168.176.0/24 maxlen: 24
185.168.179.0/24 maxlen: 24
185.168.178.0/24 maxlen: 24
2a0b:ffc0::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9853738 (0x965b2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Jan 1 01:51:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04cff64457f6cb32e597daa1b7c411ea8629027d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:f0:72:dd:9f:90:02:94:75:95:23:6b:66:
d6:2e:b9:e0:77:d3:48:fb:c4:bb:c8:80:fc:a0:c5:
c7:4d:d2:a4:cf:78:8a:f3:98:ca:4f:d6:bc:d7:cd:
31:2b:fa:00:2c:d6:2f:7f:0a:11:a2:f7:63:0c:b1:
e4:4f:8e:db:07:69:4e:c5:0b:b5:34:08:93:a9:98:
22:22:0c:d6:e1:7f:ec:18:6f:df:ba:54:df:4e:55:
8c:cb:51:83:e2:5a:6b:36:34:f4:f3:db:f6:28:83:
e6:2c:6d:1f:cc:4a:09:63:86:50:50:66:3b:7d:c0:
50:cc:f5:cd:a0:75:3d:03:97:a9:9f:36:17:30:1c:
21:5d:b6:f4:74:0b:b7:49:e0:2f:64:f0:1a:f6:96:
03:14:82:02:48:24:29:59:88:63:c2:63:60:0a:02:
13:77:8f:ee:e3:68:6b:13:5a:00:43:cd:f9:d1:0d:
38:f6:ce:53:12:0c:e1:d0:6e:69:67:b9:98:63:2f:
a1:db:a4:a6:c5:ad:e7:19:7c:8c:ff:53:10:7d:57:
1e:ad:6a:7c:7f:42:1b:d1:4b:1a:41:e4:70:61:ad:
2b:55:3b:10:77:31:ce:3b:7d:d8:18:3e:35:2e:71:
37:7a:8a:74:a0:f6:2e:46:d7:85:ef:2f:ce:30:4a:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:F6:44:57:F6:CB:32:E5:97:DA:A1:B7:C4:11:EA:86:29:02:7D
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/BM_2RFf2yzLll9qht8QR6oYpAn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.176.0/24
185.168.178.0/23
IPv6:
2a0b:ffc0::/40
Signature Algorithm: sha256WithRSAEncryption
0a:7b:8b:d2:09:e7:a1:6b:78:2c:7f:b7:76:d9:7b:5d:fc:ce:
bf:75:ee:2b:dc:ea:de:17:01:43:41:4c:4a:15:75:fb:0b:51:
dc:5a:e1:65:a0:12:f2:9d:d0:26:6b:d9:e1:2a:24:70:5a:ed:
00:f2:6f:84:93:c5:16:92:0c:f7:51:0e:92:30:28:0b:98:55:
a0:f9:c4:f6:86:86:1e:93:4f:7a:51:be:04:8b:9c:d0:26:a7:
de:54:68:3f:20:d9:59:fd:5e:04:c8:f6:3d:2e:54:db:e9:c0:
2e:04:0c:eb:41:37:f9:6a:cd:43:f7:d3:52:16:6f:13:8e:83:
f2:01:c5:66:77:9c:b9:e5:55:68:8c:cc:82:ba:be:2b:03:7e:
51:e2:a1:4c:99:bf:b6:af:73:c6:0d:fc:77:b2:1e:23:92:e3:
32:07:ba:a3:0e:67:b1:a8:9e:b0:43:aa:8c:59:45:3c:69:c4:
c3:5f:7c:90:03:a2:23:d9:58:fe:7e:80:d7:84:97:85:f0:61:
2a:d5:8b:a5:66:e5:66:98:06:02:96:42:0d:65:c5:e1:31:b6:
ec:c4:5e:38:ec:0d:1e:61:42:23:ad:7e:52:8b:5c:91:91:50:
30:62:95:e5:a9:59:bf:a0:06:b5:ad:1c:40:9f:12:fc:af:ee:
51:a5:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net