Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/DUvcdK-Ck_t8fhYe3f1n99HnuSQ.roa
File: DUvcdK-Ck_t8fhYe3f1n99HnuSQ.roa (raw, json)
Hash identifier: P+lxQJfSKpIBtXP0OGws6AcGmh++mx8XvAkbg+h09bM=
Subject key identifier: 0D:4B:DC:74:AF:82:93:FB:7C:7E:16:1E:DD:FD:67:F7:D1:E7:B9:24
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 01831901F8A8CAFC0E18EB26DD108DC90EF0
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/DUvcdK-Ck_t8fhYe3f1n99HnuSQ.roa
Signing time: Wed 07 Sep 2022 17:31:43 +0000
ROA not before: Wed 07 Sep 2022 17:31:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205784
IP address blocks: 94.142.248.0/24 maxlen: 24
88.210.29.0/24 maxlen: 24
88.210.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:19:01:f8:a8:ca:fc:0e:18:eb:26:dd:10:8d:c9:0e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Sep 7 17:31:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d4bdc74af8293fb7c7e161eddfd67f7d1e7b924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:3c:85:5d:fa:34:7e:ad:cc:fd:d2:48:19:
af:c7:52:cc:f5:49:96:09:24:31:88:75:43:e4:cb:
76:69:06:0e:62:af:7c:62:18:2b:bd:99:17:bd:c8:
12:69:45:7e:cc:03:f1:d2:42:dd:8a:14:b2:62:7a:
34:76:cb:cd:15:2a:bd:fb:79:e3:2f:23:04:06:d8:
96:33:4b:46:c3:fe:77:75:da:e1:a7:af:84:1e:33:
77:7b:af:a4:f6:34:66:01:83:01:ce:d5:1f:b5:11:
5b:38:f1:85:4e:61:10:81:cf:1a:a5:4a:7c:b8:75:
ac:d2:49:33:d9:55:de:d0:84:4f:a2:b3:d7:8f:4c:
fd:88:12:19:6f:cd:82:47:57:58:fd:dc:19:0a:5a:
89:64:dc:52:b3:7f:c1:52:b4:6c:8e:75:c0:10:4f:
14:ef:33:fc:2d:f4:30:59:ee:c7:29:be:0c:9c:a5:
6c:43:2e:fc:19:8e:b1:99:24:60:e4:f0:07:9d:dd:
d6:cf:a5:3c:e9:e0:2a:b0:17:80:1b:8b:5e:69:c0:
bd:60:0a:7a:90:af:ed:78:1b:18:78:81:57:47:15:
7c:da:c8:f4:05:0d:bd:7c:2b:dc:ce:3d:b0:81:eb:
a3:4a:b3:7c:74:6a:22:95:6b:02:de:9c:18:2b:81:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4B:DC:74:AF:82:93:FB:7C:7E:16:1E:DD:FD:67:F7:D1:E7:B9:24
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/DUvcdK-Ck_t8fhYe3f1n99HnuSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.29.0/24
88.210.49.0/24
94.142.248.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d8:ec:87:87:ea:49:37:11:ee:28:31:69:a6:ba:7e:de:5a:
7d:66:6e:26:84:56:7c:df:f9:79:55:41:34:50:d4:06:ea:f0:
88:df:a7:6a:9f:94:f0:f6:b7:5a:5f:b4:34:3c:a6:23:59:d7:
7f:bb:73:d9:85:da:0e:8a:35:56:7f:f9:5e:e4:b7:0a:32:dd:
2d:8e:59:f9:35:2b:d7:e9:7e:2e:56:ec:7b:ad:27:c8:3e:e9:
27:f7:a5:8b:0b:5f:53:81:a3:e3:38:bf:d8:84:22:26:52:e7:
f4:bb:80:fd:f7:f2:00:11:a1:96:ac:91:4d:70:ea:b0:d7:20:
7f:7d:31:70:62:ae:7e:a4:2a:8c:c3:b9:e9:ba:6b:0a:a1:11:
d6:f1:b0:4a:4a:5d:fb:e7:fb:66:73:31:d4:10:f2:3c:f9:98:
58:b1:58:c8:b1:e2:91:37:38:35:1a:3d:17:6a:0e:73:07:2b:
9b:9f:6c:0b:e5:ad:0e:f2:1f:22:6b:6a:c8:eb:c2:e9:f8:bf:
22:f6:9a:30:b3:03:a3:2c:3c:56:ed:ce:ae:8a:8c:90:6d:98:
16:ad:32:07:b9:48:10:d7:1b:0c:2e:c7:f8:d2:26:fa:fb:26:
47:a7:f1:db:83:40:2c:37:7b:92:88:f0:68:05:33:35:0d:0f:
d6:ed:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:17 2023 by rpki-client on console-fra.rpki-client.org