Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/29qeHV7HH5kPOM9XODkUNufivMU.roa
File: 29qeHV7HH5kPOM9XODkUNufivMU.roa (raw, json)
Hash identifier: G2t/+tE1s43fOtk0ETFiy3uRCP8oANKeYPcVw81QAMs=
Subject key identifier: DB:DA:9E:1D:5E:C7:1F:99:0F:38:CF:57:38:39:14:36:E7:E2:BC:C5
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03B0934C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/29qeHV7HH5kPOM9XODkUNufivMU.roa
Signing time: Mon 14 Feb 2022 18:34:50 +0000
ROA not before: Mon 14 Feb 2022 18:34:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 46.37.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61903692 (0x3b0934c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 14 18:34:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbda9e1d5ec71f990f38cf5738391436e7e2bcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:e2:4e:f8:3d:98:b0:0b:e1:9c:5a:51:a1:
28:c3:8d:c3:68:67:03:c3:ff:7f:ff:fe:26:5c:45:
a7:fa:05:f5:dc:b1:c4:87:e8:43:ef:37:e1:b4:68:
f6:59:ca:df:f4:d8:05:b3:f9:77:0d:36:a5:35:8f:
9b:fc:3c:e3:e9:be:00:0f:bb:2b:6c:35:7e:56:29:
88:13:ec:81:89:a8:52:09:ef:38:e5:ff:31:e8:e9:
e3:c7:13:e2:ca:ee:54:58:fd:8a:35:62:55:da:65:
12:2b:ae:fb:4e:e1:b0:c3:0d:f8:94:26:fd:5f:2e:
78:34:68:03:89:f2:02:40:c8:6e:63:ef:9a:c8:8a:
db:51:d0:9d:bd:bf:22:8c:50:4a:f1:1a:64:9b:c4:
41:2e:6d:a1:e7:86:59:81:64:75:09:65:f4:b1:0a:
d4:63:5c:da:ec:07:94:73:f5:80:f3:ec:ae:3c:be:
12:b6:1a:73:8f:e5:9a:59:77:e5:70:b6:25:28:36:
4b:b3:e7:a4:20:85:fe:66:1e:49:ab:ec:80:95:9c:
08:e6:80:f3:7f:ee:66:e2:ec:27:34:2e:a4:7d:69:
e8:e8:ac:af:f8:2a:23:f0:79:a3:b7:40:be:3a:52:
04:7c:70:db:df:26:45:74:aa:c8:54:ea:bf:30:7d:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:9E:1D:5E:C7:1F:99:0F:38:CF:57:38:39:14:36:E7:E2:BC:C5
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/29qeHV7HH5kPOM9XODkUNufivMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a2:b2:c3:a2:0d:f0:94:f3:03:be:3e:81:43:ba:3d:05:59:
97:b4:60:3b:89:12:8d:a0:08:52:41:0c:9c:4e:31:a8:7f:51:
3a:bb:f6:2c:22:8d:e8:63:85:71:e0:9d:fa:c1:fe:17:c7:e9:
05:e4:5c:6a:7d:b2:cb:12:e1:0e:d9:30:14:fa:ce:74:97:43:
23:4f:12:35:3c:d5:e5:0f:c6:8b:52:2b:9a:b4:9e:c9:57:6a:
9e:ec:6d:b4:8a:f0:d1:83:0a:34:05:bb:61:75:cd:d5:79:4d:
61:d9:6d:ff:5f:db:bc:27:55:b6:59:fc:1d:0d:ae:29:a0:94:
8f:6b:f7:22:b0:0c:fe:ce:eb:26:c7:2e:75:6a:d9:5a:5b:4e:
86:22:42:59:71:5a:a0:07:c0:61:70:33:0a:c8:88:99:77:ce:
78:11:40:4f:bb:38:55:69:83:e8:75:93:26:b4:9d:a6:a1:68:
52:12:90:22:45:b4:2a:94:e9:97:75:fb:f2:41:78:d8:b4:32:
6c:14:f5:cd:6b:de:49:78:38:cd:41:9d:1f:05:b3:df:ca:e7:
86:0b:87:41:e9:78:1f:3d:d0:06:70:e0:6d:ae:0a:c6:bd:7c:
7f:10:06:ea:e2:7d:7d:0a:2f:15:62:34:38:15:89:e9:57:cf:
32:15:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org