Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/C-DARIBWG5R-lrC6_FD8UAJ-ipk.roa
File: C-DARIBWG5R-lrC6_FD8UAJ-ipk.roa (raw, json)
Hash identifier: qyRtZjun0KdHFxZxXarPvow97GLDnwy2UtckDhTFzRw=
Subject key identifier: 0B:E0:C0:44:80:56:1B:94:7E:96:B0:BA:FC:50:FC:50:02:7E:8A:99
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01835B5F87E75D8BA8F0C302D196FC0CA3AD
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/C-DARIBWG5R-lrC6_FD8UAJ-ipk.roa
Signing time: Tue 20 Sep 2022 14:48:50 +0000
ROA not before: Tue 20 Sep 2022 14:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 46.8.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5b:5f:87:e7:5d:8b:a8:f0:c3:02:d1:96:fc:0c:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Sep 20 14:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0be0c04480561b947e96b0bafc50fc50027e8a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:2d:cf:b5:9c:40:78:88:f8:08:32:fb:d6:
27:e5:6e:bc:d4:6a:67:b8:29:4f:e0:85:82:e0:2d:
39:b2:55:a3:44:63:09:c5:69:5f:ff:c7:f2:85:62:
a2:cd:73:4b:0e:5d:16:a9:71:39:ba:67:d4:14:3e:
38:1d:5f:9a:d1:6e:9e:46:39:ad:0f:b7:81:5c:f6:
6d:26:d2:61:84:45:3f:9f:f1:52:28:71:41:9d:ca:
ad:f0:eb:28:a1:fb:30:3e:96:5c:e2:36:b6:b7:b4:
28:0d:4b:2d:e3:1c:82:8e:9b:a1:fe:81:bb:81:50:
3b:32:d2:08:18:6a:e1:5b:9c:e3:3b:41:ea:46:1a:
5a:4f:fd:ea:c9:85:fc:6e:d0:36:08:c8:07:fb:03:
91:f8:d3:cc:98:65:95:ed:20:d5:e6:1d:81:91:ac:
69:55:7c:07:e4:34:76:de:05:b4:64:40:87:1b:7f:
86:c9:e9:2b:31:8a:d1:37:31:f1:8c:86:2d:04:91:
b7:b5:13:56:13:86:ef:5f:b1:78:2f:4e:70:23:8b:
40:05:34:48:a7:91:52:e9:7c:6c:b8:e8:65:84:4c:
06:43:9a:b5:22:eb:91:00:88:aa:8f:1f:1e:04:6f:
01:95:da:c6:d8:00:5e:da:3e:23:dc:0e:67:9c:8e:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:C0:44:80:56:1B:94:7E:96:B0:BA:FC:50:FC:50:02:7E:8A:99
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/C-DARIBWG5R-lrC6_FD8UAJ-ipk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:42:2c:8b:cd:0b:13:5f:b9:27:1b:d8:d2:73:e1:86:7f:51:
ba:60:66:73:54:a6:e9:db:dd:f1:11:c2:de:20:2c:4f:4c:66:
ba:1d:f5:75:63:da:99:22:40:f2:49:c9:89:33:97:74:94:66:
04:29:87:ba:61:37:4c:e8:79:95:0b:64:76:f0:26:6b:b2:02:
89:4c:dd:ff:84:40:dd:3d:9e:d5:ed:e5:c3:2f:b9:bc:d8:ee:
6c:5e:12:5a:f7:94:63:f6:57:60:d2:bc:86:b3:3d:95:59:ad:
00:7c:90:03:1f:b1:2c:6e:ae:b1:04:c4:88:b9:1e:a0:8e:56:
f2:7f:b5:86:2f:ec:87:75:d4:d2:b4:64:b2:e9:66:d3:11:cc:
8e:e3:19:54:e3:0e:e1:d4:4b:e1:42:f9:79:b0:75:66:81:ef:
16:2a:7d:54:53:11:c9:6b:ea:3c:45:a5:3f:04:29:bd:f6:d9:
fa:7b:08:4c:e2:cd:8b:84:5b:af:a8:05:13:ab:97:d0:13:f9:
73:ae:d3:a2:35:2a:c1:1f:5f:cc:da:85:c1:b8:0a:6c:ae:a9:
6f:65:54:1e:89:7f:7b:85:01:d8:b6:b0:8b:ea:36:18:cb:76:
2e:b6:31:62:55:68:ac:50:bd:43:81:a1:57:52:c8:77:84:fd:
ec:ea:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:39 2025 by rpki-client