Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/DGnRboPMDaA_hwgrYmSEpMzFR88.roa
File: DGnRboPMDaA_hwgrYmSEpMzFR88.roa (raw, json)
Hash identifier: beaz7zAVTXqTuNNu00H+fPG1l2xlidjqqb8tOTYvSts=
Subject key identifier: 0C:69:D1:6E:83:CC:0D:A0:3F:87:08:2B:62:64:84:A4:CC:C5:47:CF
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01821ABF55EBD01A9845356DF3F141A32592
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/DGnRboPMDaA_hwgrYmSEpMzFR88.roa
Signing time: Wed 20 Jul 2022 08:35:23 +0000
ROA not before: Wed 20 Jul 2022 08:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 194.107.162.0/24 maxlen: 24
194.107.160.0/24 maxlen: 24
194.107.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:bf:55:eb:d0:1a:98:45:35:6d:f3:f1:41:a3:25:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jul 20 08:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c69d16e83cc0da03f87082b626484a4ccc547cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:7a:24:11:51:c8:d5:18:ca:b8:6c:b1:c9:
af:0e:57:fb:56:eb:99:17:6b:b0:e8:9f:8f:eb:7b:
cc:1b:8a:8f:1d:80:bc:81:9a:60:cc:f0:3a:62:f0:
85:15:82:15:8a:19:61:55:ce:32:24:03:77:ee:4c:
88:40:20:2f:54:83:0a:fa:7c:0e:5b:c4:98:ef:4b:
0a:60:e6:53:1d:f3:99:18:69:19:50:ed:0e:bd:e0:
31:ce:d2:eb:76:6d:90:d3:00:48:39:09:90:af:4c:
f3:7a:33:1f:b8:fa:d0:10:bd:d9:d2:e6:48:c0:35:
87:35:86:d4:4b:08:0b:41:d1:fb:34:8d:36:d2:bd:
89:73:42:82:db:33:aa:0a:92:f2:63:7d:f7:d4:a6:
f6:71:a4:f3:2d:d2:c0:48:22:59:0f:da:40:68:69:
31:d9:94:29:1e:d2:e6:9b:2b:b2:66:20:b0:60:53:
ba:f2:ed:0b:6c:e2:eb:9f:bb:5f:9a:78:1c:37:ad:
49:5e:08:c0:b6:fd:9c:2e:8c:2b:4b:db:b7:9b:f8:
42:48:f3:c5:99:c9:8e:5c:62:5d:0a:24:77:90:18:
e7:5d:78:c2:0b:91:99:98:c9:93:b3:62:fa:21:6c:
ca:7b:3e:10:47:a6:ae:99:ae:b7:14:44:71:b5:4d:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:69:D1:6E:83:CC:0D:A0:3F:87:08:2B:62:64:84:A4:CC:C5:47:CF
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/DGnRboPMDaA_hwgrYmSEpMzFR88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.160.0-194.107.162.255
Signature Algorithm: sha256WithRSAEncryption
2c:0c:84:e7:45:8e:2c:60:88:7f:14:5f:34:29:5c:21:61:18:
2a:e2:ab:b6:77:a3:f5:50:a0:89:c0:37:b7:5e:4e:ba:fb:24:
da:4d:6d:63:0c:e8:db:cd:65:e9:8f:11:df:36:0d:85:b9:59:
96:4a:d8:25:c4:da:1b:32:9a:53:5e:46:ec:04:4a:60:6c:24:
76:26:f0:a1:3f:57:cb:81:23:9a:78:b7:cf:78:c4:94:82:87:
ca:37:6a:20:4e:7a:b4:54:cc:f9:83:fa:35:2f:f6:b0:c4:97:
96:b1:b2:af:f3:d6:f2:79:bf:c1:63:bd:f9:3b:94:fd:f4:6c:
c7:51:32:5b:25:03:78:ac:ec:e2:92:03:13:f9:ea:73:0f:d5:
a0:69:06:3d:d5:c6:5e:33:41:96:e0:d3:77:1f:ee:23:c6:4f:
a9:33:ab:a9:3e:66:a6:7d:8b:01:88:d2:5e:12:58:fa:a1:83:
0a:b4:5e:d9:5e:67:6b:b5:3e:66:f0:04:1d:6c:c2:8b:8c:f0:
d7:ff:1c:ea:2b:c7:da:52:9a:fb:27:f9:33:f8:d3:cf:73:5c:
e0:5f:02:ec:4f:13:46:3b:b2:23:15:13:f6:b9:a2:11:65:78:
c6:ec:85:a7:9d:8a:12:ed:eb:71:92:6f:cc:41:9e:18:c7:e1:
5a:ae:cf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-fra.rpki-client.org