Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/Dr-TiLZC0-dhG-0HBFdlLJxBgYo.roa
File: Dr-TiLZC0-dhG-0HBFdlLJxBgYo.roa (raw, json)
Hash identifier: upFU2aJ/WB8kzAFRF0FoUQNv6geolYPUey0r6XwRW2M=
Subject key identifier: 0E:BF:93:88:B6:42:D3:E7:61:1B:ED:07:04:57:65:2C:9C:41:81:8A
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 0183F45B119979B4D69894306E767594CC47
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/Dr-TiLZC0-dhG-0HBFdlLJxBgYo.roa
Signing time: Thu 20 Oct 2022 07:45:52 +0000
ROA not before: Thu 20 Oct 2022 07:45:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201925
IP address blocks: 94.246.168.0/21 maxlen: 24
94.246.179.0/24 maxlen: 24
94.246.180.0/23 maxlen: 23
94.246.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:5b:11:99:79:b4:d6:98:94:30:6e:76:75:94:cc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Oct 20 07:45:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ebf9388b642d3e7611bed070457652c9c41818a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:b5:59:54:52:fb:e9:3b:eb:ee:2b:ad:6e:
8d:b9:26:f3:0d:d6:e4:da:82:da:5e:af:40:2c:55:
3b:2d:19:45:2a:56:9a:2e:54:f1:29:3d:0e:a4:b4:
a3:57:ec:d4:97:35:7e:dc:f7:a7:48:cc:cb:02:05:
37:04:d9:cf:f1:ce:67:eb:0a:25:f9:11:fc:a1:b9:
3d:40:e2:3d:42:49:4d:12:10:0f:8a:be:ac:b4:c2:
85:a1:af:84:22:ab:ff:fd:f8:bb:e7:a9:31:eb:96:
4a:16:2b:4a:df:58:93:b2:76:92:c4:f8:6e:1c:dc:
d6:81:75:4e:d7:5e:23:20:11:dc:e4:ee:82:0e:a1:
5d:60:1b:d7:f9:e2:87:06:6d:fb:94:a8:70:d4:ad:
36:81:d4:68:65:cc:1d:c3:93:9f:c5:13:fb:d4:f8:
67:b9:63:23:4b:f5:b4:ab:34:f0:cd:91:f2:51:64:
ac:3f:98:43:c5:88:94:a4:a7:9d:c4:d9:33:26:24:
b2:2b:ac:e8:99:a4:82:9a:3b:36:41:0d:37:8b:e9:
d2:a8:5d:db:8e:cf:49:d1:cf:f5:e6:db:f3:5d:b7:
ac:9c:44:5a:71:6c:db:19:cb:d0:ea:aa:60:56:54:
d5:ba:c1:03:d5:87:a2:0f:1e:02:9f:0d:89:7d:cb:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BF:93:88:B6:42:D3:E7:61:1B:ED:07:04:57:65:2C:9C:41:81:8A
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/Dr-TiLZC0-dhG-0HBFdlLJxBgYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.246.168.0/21
94.246.179.0-94.246.182.255
Signature Algorithm: sha256WithRSAEncryption
9e:bd:0f:b2:46:3b:09:4d:3a:1f:d9:43:a6:db:b8:a9:e3:d3:
80:3b:b3:6b:f6:c3:56:07:72:ee:0b:a5:6a:05:71:c1:26:cd:
d5:d2:cc:17:93:aa:34:cb:c5:34:e4:ea:6b:e5:4a:9d:5e:c3:
bf:37:4f:57:87:f0:bc:d6:2b:3d:07:1c:e3:db:21:b7:7c:61:
db:3e:03:6f:65:d7:2c:5f:5f:b6:b3:06:a2:88:26:2b:86:51:
71:a8:3e:12:3b:62:8a:6a:33:23:e4:4c:fb:cc:55:af:74:18:
41:13:14:f4:5f:0c:ab:09:0c:f9:d3:0a:66:a3:76:fd:da:77:
6e:eb:b6:bc:85:56:23:ef:79:75:78:90:20:ed:09:cf:b1:4e:
c0:98:6a:06:1b:4b:f7:06:d8:31:c7:95:f5:c1:5b:ce:2f:38:
19:b2:d3:dd:78:f5:4d:49:fa:db:e4:f5:37:70:8d:c4:6b:c2:
80:43:fd:e8:d2:06:32:c1:a9:20:36:47:36:55:f6:e5:c8:21:
8d:3a:49:0c:a2:3a:e2:6f:e1:f9:c2:29:b3:3c:14:1a:b3:ef:
ad:f2:d8:1b:c6:0d:3a:c4:c0:ec:44:8d:d3:5c:1a:8f:03:57:
a2:94:77:9c:af:62:a0:51:f1:ee:7d:4d:5a:ad:64:80:81:4c:
ca:24:df:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:50 2023 by rpki-client on console-ams.rpki-client.org