Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5PcidLbid-USNNvkTukMNqVdk2I.roa
File: 5PcidLbid-USNNvkTukMNqVdk2I.roa (raw, json)
Hash identifier: VQXuWQOMeMo4AZnyMXN0Xr2n79AzP5x91aELgB3R5XU=
Subject key identifier: E4:F7:22:74:B6:E2:77:E5:12:34:DB:E4:4E:E9:0C:36:A5:5D:93:62
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01844482C19D022A82BE9482DB0864376E0A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5PcidLbid-USNNvkTukMNqVdk2I.roa
Signing time: Fri 04 Nov 2022 21:18:50 +0000
ROA not before: Fri 04 Nov 2022 21:18:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 46.37.122.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:44:82:c1:9d:02:2a:82:be:94:82:db:08:64:37:6e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 4 21:18:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4f72274b6e277e51234dbe44ee90c36a55d9362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:39:0a:3a:18:54:96:33:fe:d0:b4:df:53:
a2:6e:90:56:3d:b9:87:3f:91:65:98:aa:c9:6e:af:
a2:f5:ea:46:b7:a2:96:07:45:a1:21:14:25:09:fc:
26:91:79:94:93:4e:c9:b1:ba:48:fd:6d:c3:1b:13:
14:f0:f8:08:12:0f:c3:3a:19:31:00:b5:65:4f:75:
61:06:0e:8d:be:8f:3a:7d:1f:7b:b8:d7:dc:7f:0a:
ff:3f:8b:01:4f:b8:35:10:10:3d:4c:06:47:ed:7a:
a3:fe:b3:2a:81:1d:80:05:fe:8d:d7:10:93:99:8d:
ad:dc:dd:9e:30:73:66:79:34:d7:2a:79:be:6a:88:
b3:f9:39:bc:49:b8:a6:b6:a5:c9:99:01:63:41:ff:
b5:4c:a5:50:aa:e4:ba:38:43:68:98:c3:30:8b:63:
1a:d6:56:01:55:9e:eb:e9:a7:11:bc:5d:9d:e7:ee:
51:f7:93:2e:fe:bb:7d:9e:de:5f:61:b5:84:28:18:
17:74:34:46:ea:e0:83:c2:87:1e:ce:49:ab:5f:42:
67:74:ae:e8:14:db:78:08:82:ab:2e:ea:d3:4e:9a:
b6:02:ef:47:7f:6e:50:8d:a9:75:e6:c0:0c:c4:69:
9d:47:61:75:d6:00:3b:c9:83:66:c4:c6:b5:0c:97:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:22:74:B6:E2:77:E5:12:34:DB:E4:4E:E9:0C:36:A5:5D:93:62
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5PcidLbid-USNNvkTukMNqVdk2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.122.0/24
46.37.126.0/24
Signature Algorithm: sha256WithRSAEncryption
00:27:06:9e:62:6b:7b:3f:da:6c:ef:de:e1:8b:c7:ec:c9:a7:
87:5e:b9:2f:98:2e:c7:24:c5:0e:89:18:47:af:6e:80:d6:0a:
4b:0c:59:01:90:8a:a8:f2:95:57:e0:9a:f0:76:b5:86:30:e3:
19:34:a9:d6:9e:2a:c4:8e:75:9e:5f:99:c4:db:fb:ce:a7:a4:
89:c7:cc:65:fb:28:02:70:49:6c:73:c2:8c:c2:5c:c7:99:2a:
aa:b4:3f:40:4d:6d:22:6e:39:66:45:5a:fa:bc:a5:62:17:83:
9e:78:d4:15:45:c8:df:6f:a6:26:d9:75:ad:36:f5:59:27:0d:
0b:15:53:ac:46:de:fd:79:d5:57:bb:f3:a0:8c:9b:bb:cd:43:
b1:1e:1b:11:10:5e:bb:50:31:54:c9:fc:43:3b:cb:74:a9:4b:
9a:a9:8c:7d:72:ce:71:55:f6:8c:72:37:28:19:f0:40:fa:0b:
7e:30:85:20:97:c0:c2:a7:01:28:57:3e:c5:e2:de:c3:85:a7:
9c:83:87:06:c6:a9:b3:ba:a1:cd:bf:63:b0:ea:c8:73:b4:96:
e5:d0:ef:a0:40:c1:00:4a:1b:d0:25:6f:fb:84:40:33:7d:db:
50:38:11:81:6e:96:04:22:7c:cf:6e:8b:24:13:c2:a3:1a:da:
c0:c2:56:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:53 2024 by rpki-client on console-fra.rpki-client.org