Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1pn_7IBAK2W7pDKzdWsndIT-eR8.roa
File: 1pn_7IBAK2W7pDKzdWsndIT-eR8.roa (raw, json)
Hash identifier: bG8lEXW2M5+xkqjIncrlU7EAjEuJ8hxDYyJi7gf+gaY=
Subject key identifier: D6:99:FF:EC:80:40:2B:65:BB:A4:32:B3:75:6B:27:74:84:FE:79:1F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03F64B3E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1pn_7IBAK2W7pDKzdWsndIT-eR8.roa
Signing time: Thu 03 Mar 2022 13:52:33 +0000
ROA not before: Thu 03 Mar 2022 13:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 46.37.101.0/24 maxlen: 24
46.37.108.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66472766 (0x3f64b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 3 13:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d699ffec80402b65bba432b3756b277484fe791f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:5b:99:b7:82:78:05:c4:bd:98:8a:d6:10:
e4:36:15:9f:f0:81:a2:38:84:9b:70:cd:83:6a:dd:
dc:06:7a:fb:30:da:b0:55:13:6b:16:77:f8:03:d1:
2f:8e:9f:30:d3:5e:94:84:98:d3:35:64:77:50:fb:
95:b7:a7:b8:44:2c:18:77:fa:e5:ce:09:26:5a:18:
2f:b4:fa:cd:34:91:7d:93:9b:3c:97:1b:f0:5f:c6:
87:22:f3:b0:a5:25:66:64:ee:d8:93:8f:e0:41:6b:
30:30:53:05:43:e8:fd:27:fc:9c:5a:73:a6:82:6a:
ab:77:a0:f7:25:44:9d:68:c5:f7:1a:ee:21:dc:cc:
c9:f0:8a:2c:a5:ab:c2:ff:b6:56:0c:fe:ad:0a:dc:
02:c5:98:05:a6:e4:4c:4e:81:ca:40:67:7f:57:ef:
70:d6:02:96:8d:d8:7e:29:e5:df:86:0c:cd:36:00:
11:04:fe:b6:c8:ab:f7:76:e3:55:d0:06:7a:fc:97:
3c:9b:e7:ed:06:46:ae:bf:53:73:f4:c6:29:0b:95:
6c:84:9d:7e:26:d4:9f:58:3f:35:8b:79:0c:f7:92:
72:08:40:6b:3c:39:ad:8e:4a:4a:17:b1:fc:7a:82:
85:65:e3:5e:9b:3f:46:a5:dd:bf:4e:12:8b:bf:50:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:99:FF:EC:80:40:2B:65:BB:A4:32:B3:75:6B:27:74:84:FE:79:1F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1pn_7IBAK2W7pDKzdWsndIT-eR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
46.37.108.0/24
46.37.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:d4:a3:d4:86:c4:1e:3d:cc:ad:f9:b4:01:5e:79:ed:de:d6:
8a:b0:ee:0e:ca:f9:73:88:89:b7:d3:26:b7:26:14:86:76:46:
df:40:5f:23:b5:e0:c0:a5:79:02:f3:60:54:b0:15:07:72:aa:
8d:17:f6:54:85:61:3a:69:f7:8b:38:d6:74:22:3f:72:3e:eb:
09:4a:69:2e:05:41:9d:48:dd:63:09:7e:40:67:04:63:bb:f1:
7f:c8:58:3b:c0:da:cb:55:d1:26:57:9a:b3:a0:b7:36:9f:0b:
c8:38:6f:02:ec:2b:af:5a:7d:c6:fd:6e:d9:f1:aa:3c:34:c6:
10:a7:c6:fc:9f:56:26:e2:19:3d:6a:83:04:1f:57:d2:4f:7e:
a6:3f:0a:4b:db:4b:63:de:10:52:e1:77:95:f9:ba:a3:08:17:
1e:e5:80:b0:45:a1:cd:18:5c:af:dd:1c:77:cb:1d:5b:05:46:
30:0f:bb:97:95:b9:7e:88:2e:c8:7b:21:17:6d:f6:a2:0d:91:
4d:ca:61:f6:4c:4e:ee:4b:bc:b4:12:6a:2a:d7:d1:84:51:f2:
54:d9:a5:ec:67:10:57:1e:30:f8:d3:d5:63:01:13:f5:c7:fa:
3b:45:dc:de:91:6c:61:42:26:e3:e1:85:01:af:80:03:a8:fc:
2b:87:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org