Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6wMhxnClvKQWvRqOWc4aHsajz8o.roa
File: 6wMhxnClvKQWvRqOWc4aHsajz8o.roa (raw, json)
Hash identifier: PJk5GrVRBk3zPh0VDvlnhXNvEgR1Sbh1fg6U9OzEKmA=
Subject key identifier: EB:03:21:C6:70:A5:BC:A4:16:BD:1A:8E:59:CE:1A:1E:C6:A3:CF:CA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0183872B0BF0C18E4B50D0775173B9BF2D5D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6wMhxnClvKQWvRqOWc4aHsajz8o.roa
Signing time: Thu 29 Sep 2022 02:54:48 +0000
ROA not before: Thu 29 Sep 2022 02:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52037
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
46.37.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:87:2b:0b:f0:c1:8e:4b:50:d0:77:51:73:b9:bf:2d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 29 02:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb0321c670a5bca416bd1a8e59ce1a1ec6a3cfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:c6:d4:38:26:40:e2:35:80:bf:31:91:d4:
81:fb:ed:85:36:2a:aa:4b:9d:c8:a7:f0:f9:5f:17:
60:21:da:c4:10:10:95:02:6b:f8:67:6c:1b:2e:d7:
a4:e5:73:02:f9:09:01:a7:a6:d4:95:09:fb:a8:32:
ca:06:4e:65:96:9a:12:3e:0e:b1:ff:c4:fd:19:fd:
44:74:0a:ac:02:45:e2:86:87:44:df:67:62:c6:53:
28:f8:bb:47:2e:c3:77:97:b6:59:d9:46:dc:55:f5:
50:0e:ea:27:8f:f4:d9:24:74:de:03:5b:fa:5f:e6:
c4:22:25:e6:cd:d3:24:9b:10:85:ac:0d:1a:95:ca:
e7:1e:ec:92:d3:b0:24:a8:7f:80:88:95:f7:03:08:
c8:e5:99:a6:20:2b:e4:b6:c4:6d:d6:35:2a:61:4c:
fc:c7:32:dd:d6:69:9e:41:6b:b1:69:aa:b2:2b:45:
65:af:fe:9a:75:7f:73:5e:52:42:3f:dd:25:11:8d:
f8:95:3f:fe:d2:31:25:d0:60:63:a9:12:b9:a8:fc:
e7:18:cb:41:89:2a:af:36:28:27:87:93:bd:52:18:
b6:92:9e:84:12:c8:bd:b9:97:95:01:6c:2c:ec:7d:
c8:af:30:0e:e7:98:48:25:dd:5a:0b:d5:29:92:5b:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:03:21:C6:70:A5:BC:A4:16:BD:1A:8E:59:CE:1A:1E:C6:A3:CF:CA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6wMhxnClvKQWvRqOWc4aHsajz8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.118.0/24
46.37.120.0/23
Signature Algorithm: sha256WithRSAEncryption
37:34:b5:8b:ff:89:69:e2:b1:32:bc:2b:7f:1c:15:c0:38:da:
45:d1:45:1d:ab:aa:4a:7c:b9:21:8a:73:3c:b7:9e:4e:8a:78:
00:8f:1c:04:ce:fa:7e:27:87:34:a7:dd:1a:af:65:f2:44:c3:
35:ed:2b:92:27:05:68:0c:9b:59:e7:f3:0a:fa:2c:d7:17:11:
44:48:6a:83:20:4d:53:06:a2:a2:50:2f:a5:b9:14:5b:56:d3:
42:03:ef:32:90:d8:c9:46:00:9d:25:16:a9:12:a2:9e:76:48:
35:79:5c:4d:a2:b2:b1:80:2c:2f:dd:3c:28:74:29:05:04:73:
cc:93:e6:0b:ab:fd:c3:ba:7c:3e:b7:bd:bb:ab:76:db:c4:ed:
6d:fb:0d:0b:7d:6f:2f:d1:6c:93:6c:d5:3b:ca:3a:26:b4:df:
81:07:3c:27:50:a8:a4:8b:6b:cd:4b:53:5f:1a:dc:59:df:2e:
b8:b3:9a:e6:cf:9d:65:ad:80:66:9d:c7:74:6c:45:c9:97:ad:
78:e5:1c:82:5a:87:31:1b:51:7e:10:85:62:98:2a:e0:64:2d:
76:8d:37:68:db:16:15:7a:99:e2:d6:6f:ad:9c:51:b0:82:ba:
99:42:2f:d0:e1:92:5c:53:6a:4f:ef:d2:81:03:b4:7d:7d:55:
22:7a:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org