Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/k4_EDAuWg-CzOvcfNOWWXANuz7w.roa
File: k4_EDAuWg-CzOvcfNOWWXANuz7w.roa (raw, json)
Hash identifier: UUes/vdYXmTCcDUukG0AXjSun1gxCPK28aefySO50tg=
Subject key identifier: 93:8F:C4:0C:0B:96:83:E0:B3:3A:F7:1F:34:E5:96:5C:03:6E:CF:BC
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 388BDA19
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/k4_EDAuWg-CzOvcfNOWWXANuz7w.roa
Signing time: Sat 01 Jan 2022 12:00:57 +0000
ROA not before: Sat 01 Jan 2022 12:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201925
IP address blocks: 94.246.168.0/21 maxlen: 21
94.246.179.0/24 maxlen: 24
94.246.180.0/23 maxlen: 23
94.246.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948689433 (0x388bda19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 1 12:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=938fc40c0b9683e0b33af71f34e5965c036ecfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:98:90:11:b0:2c:83:79:69:fc:2f:c2:d7:
2e:58:f1:f9:e6:44:28:8c:17:0d:64:a4:5b:db:7f:
24:ea:32:9b:35:34:5d:cf:0f:c5:c9:42:c5:4a:fc:
c5:7f:c6:ce:2a:61:ab:57:61:29:3d:66:53:9e:3e:
8a:6f:02:77:c8:71:da:e1:d2:ff:2f:7d:c9:85:57:
d8:41:d6:71:86:79:02:43:3a:e3:97:5d:7b:f1:6a:
11:72:28:c3:60:8b:46:b7:9e:13:6c:e7:ca:21:1f:
72:13:32:62:25:cb:2b:52:ff:32:41:14:0a:a3:23:
f7:27:af:41:3f:52:b3:b1:0f:5a:41:12:fd:aa:20:
78:35:39:88:1a:cc:76:d9:95:35:8b:d5:a3:0e:e4:
fe:52:7f:44:70:35:1a:de:4f:cb:56:a3:8c:24:d9:
56:6b:14:c5:0b:41:54:03:b5:2c:e1:67:03:a9:27:
c2:4b:d4:2b:c9:a2:69:67:89:87:04:71:a7:91:c7:
48:78:02:44:fc:15:83:bf:b1:aa:8f:a0:c1:56:55:
8c:d8:9e:e1:85:72:13:a5:66:af:d0:84:a2:a3:cd:
77:f0:fe:96:bd:6c:ab:df:97:f9:d4:6d:fb:69:9c:
55:fe:d6:93:64:6b:09:7c:0b:31:07:65:5c:8a:34:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8F:C4:0C:0B:96:83:E0:B3:3A:F7:1F:34:E5:96:5C:03:6E:CF:BC
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/k4_EDAuWg-CzOvcfNOWWXANuz7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.246.168.0/21
94.246.179.0-94.246.182.255
Signature Algorithm: sha256WithRSAEncryption
40:79:da:ec:6a:09:1f:d0:ad:38:8b:3b:b0:f7:fe:c5:37:34:
32:ab:8c:01:ac:4a:6f:a7:bf:84:f3:b1:1a:24:e2:72:d0:83:
b0:44:90:4e:45:9f:2d:3c:f6:e4:dd:e1:b5:46:0f:15:2d:62:
94:4a:79:1a:68:6f:73:37:ce:4b:4c:8d:a6:7a:b3:46:19:6a:
eb:07:c3:b9:c9:7a:73:99:58:a0:b4:98:7a:6d:e5:48:99:fc:
57:6a:ec:0a:dc:c8:1a:7c:6e:2b:2e:ce:76:25:9e:a5:49:9d:
e0:5e:6e:30:b3:74:93:81:d0:d3:36:ba:38:17:17:8e:cf:0b:
1f:05:78:b7:91:e6:10:6e:91:1c:dd:01:39:3d:cd:a7:b1:55:
e4:2c:02:46:01:77:f4:24:30:f8:e8:11:38:ff:c4:27:8f:a7:
05:dc:bf:82:3a:f6:9d:d6:22:7b:bb:e0:53:67:04:64:1e:93:
63:2b:6a:1a:89:d1:87:f2:a7:8b:f8:7a:2c:19:e5:35:c4:65:
f4:40:17:c0:ff:8a:f1:14:69:4e:5a:f2:c6:b4:d1:fe:3e:37:
b5:7c:e1:d3:c4:15:66:df:cd:0b:26:6a:66:8a:dd:63:9c:f5:
01:c3:6d:60:d0:de:85:7e:3f:d0:69:db:00:77:8b:7c:0b:36:
37:9c:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:05 2023 by rpki-client on console-fra.rpki-client.org