Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6bYCEi_8BZBrWXaKJ1Yq_ggl5j4.roa
File: 6bYCEi_8BZBrWXaKJ1Yq_ggl5j4.roa (raw, json)
Hash identifier: 9sL7ZgBjaP4DzVO9hBLLJKHqBG/RFlc5J1xN3FQs+Jo=
Subject key identifier: E9:B6:02:12:2F:FC:05:90:6B:59:76:8A:27:56:2A:FE:08:25:E6:3E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0182B9F5956D52EC4368E4C6DB4DE005F07F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6bYCEi_8BZBrWXaKJ1Yq_ggl5j4.roa
Signing time: Sat 20 Aug 2022 06:34:15 +0000
ROA not before: Sat 20 Aug 2022 06:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 46.37.103.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b9:f5:95:6d:52:ec:43:68:e4:c6:db:4d:e0:05:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 20 06:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9b602122ffc05906b59768a27562afe0825e63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:53:82:35:db:61:2b:77:31:7e:3a:2b:64:83:
e7:76:ec:1e:1f:46:db:40:f3:26:cb:33:76:12:90:
09:02:2f:92:c0:ca:e2:a3:74:ec:5a:4a:27:f2:a1:
4f:72:77:a3:66:b1:1d:f2:ee:04:41:d2:aa:13:ac:
6f:a4:43:bf:42:fe:54:ba:8a:99:17:5c:0b:04:e4:
21:15:06:12:00:10:5b:7e:5c:f7:1f:07:57:88:1f:
91:cb:03:08:cb:89:a0:8c:14:e2:79:d0:de:f4:c9:
bc:60:29:39:ad:48:db:ca:61:c7:a4:88:b0:e6:fe:
98:3d:6c:47:12:a1:2d:62:46:b7:d4:d5:df:7b:92:
6f:de:55:b0:cf:d9:1b:39:d5:3f:d0:0b:04:12:30:
9b:ec:4e:6e:ca:0a:f4:4b:9f:d0:12:92:26:6b:c2:
e5:f3:f5:77:7d:de:a2:ac:9d:fc:6a:6d:03:b1:cd:
bf:27:0c:8b:31:6b:3e:e8:ec:10:8b:2c:84:63:d1:
df:85:a5:46:54:41:82:b5:b1:d8:cb:a8:70:92:87:
a1:72:0e:bd:da:d2:3c:d6:17:c7:3c:b4:be:d7:6f:
9c:1e:1b:19:dd:59:23:20:1d:7b:5a:62:4b:30:bb:
c4:64:27:aa:05:0f:04:53:d8:7e:4f:42:bb:21:76:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B6:02:12:2F:FC:05:90:6B:59:76:8A:27:56:2A:FE:08:25:E6:3E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6bYCEi_8BZBrWXaKJ1Yq_ggl5j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.103.0/24
46.37.109.0/24
46.37.114.0/24
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
83:86:2a:f5:ae:c2:7b:0d:84:cb:a3:0c:2f:1d:83:6a:d3:78:
40:3d:f9:8d:38:a3:b2:a4:d5:c9:12:af:55:b0:ea:12:d7:cf:
e3:d3:b1:09:94:51:e0:6f:3c:b4:02:9b:f4:87:51:0d:69:16:
e9:8f:dc:a4:02:7a:e3:48:85:62:cf:0d:57:43:7b:ed:d6:78:
9e:55:6c:b2:11:31:72:58:2d:be:c1:ee:d7:3f:9e:09:a1:3a:
7f:87:ce:97:39:fc:44:ed:6f:13:51:8d:81:18:c2:ed:14:ca:
f0:76:28:c6:78:42:60:70:86:9e:46:39:48:3f:c0:c6:80:60:
fe:e1:28:b2:37:c3:9a:1d:a1:65:57:44:50:3e:c8:8b:6a:3e:
38:2e:54:b3:1d:c5:d9:d9:24:45:a2:e6:be:e3:42:87:ff:f0:
79:c7:de:bd:20:ca:6f:fd:72:c0:92:ed:70:35:ae:df:e9:59:
4c:da:f5:56:e5:7b:5e:c5:03:ff:e1:16:51:14:9f:74:ce:be:
67:92:bb:90:10:2a:fa:b6:5a:3a:1b:c7:3f:17:cc:2a:ad:4c:
82:18:c4:c4:59:1b:2e:eb:17:17:53:a0:6d:8f:af:83:6b:03:
c2:b5:2c:b8:24:b3:a9:8f:38:03:15:36:2a:d4:36:ca:75:73:
e6:9f:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-fra.rpki-client.org