Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/83fiVWOjsJM6nj1-FpbyAqkqOuo.roa
File: 83fiVWOjsJM6nj1-FpbyAqkqOuo.roa (raw, json)
Hash identifier: qsLdS23/RPpyWUhMOQXQF3qcng7ieW0kDvWECTPWYAI=
Subject key identifier: F3:77:E2:55:63:A3:B0:93:3A:9E:3D:7E:16:96:F2:02:A9:2A:3A:EA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01836517E6D8FB71D0D2167EC06D0912463D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/83fiVWOjsJM6nj1-FpbyAqkqOuo.roa
Signing time: Thu 22 Sep 2022 12:06:48 +0000
ROA not before: Thu 22 Sep 2022 12:06:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 46.37.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:17:e6:d8:fb:71:d0:d2:16:7e:c0:6d:09:12:46:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 22 12:06:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f377e25563a3b0933a9e3d7e1696f202a92a3aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:a2:12:e0:e6:d4:1d:22:07:4a:57:06:d8:
b1:04:f2:d4:52:0d:49:6c:6e:69:67:bc:54:99:46:
d5:85:ff:75:5d:90:36:63:12:b8:c5:af:c8:95:1d:
54:20:68:ce:a4:4b:c1:f0:0a:a1:68:19:e0:e6:33:
80:90:e5:fe:cb:01:c0:fd:f8:27:43:b1:e0:3a:5c:
05:d9:d2:4d:59:fc:f3:9f:d8:22:2d:8b:b4:16:2a:
42:69:bf:c2:fd:43:8f:c9:a9:00:71:7a:40:9e:59:
bf:34:bc:2b:bf:d3:e4:56:52:16:0b:91:87:dd:4e:
8f:34:69:9c:b0:41:15:ac:46:ad:e4:f5:30:1a:6c:
8f:73:22:f2:0f:ba:8e:1e:1d:c8:18:cf:1f:99:e1:
55:3e:a7:53:84:f3:7c:7b:5b:71:e9:12:90:87:f9:
4a:2d:54:2c:50:0a:5b:88:48:3b:36:9a:da:08:02:
ff:4d:a1:17:f6:f7:05:65:2e:d1:14:d8:85:c2:42:
86:67:bf:54:2b:d0:3c:5e:bc:a6:de:92:d1:85:87:
f7:94:5a:95:33:22:0e:bd:6c:de:0e:6e:8b:4c:55:
55:b1:68:98:1e:d1:43:77:9b:ac:2b:c1:e6:58:fe:
99:4c:a8:09:c1:61:f6:9b:6f:05:86:71:f1:19:37:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:E2:55:63:A3:B0:93:3A:9E:3D:7E:16:96:F2:02:A9:2A:3A:EA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/83fiVWOjsJM6nj1-FpbyAqkqOuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f6:cd:de:b8:76:b7:5f:02:87:15:70:08:f4:dd:a2:e7:97:
af:fa:68:2f:0f:ab:df:f7:20:fd:dc:f6:ca:b7:33:5b:5c:b5:
05:b4:29:f2:b3:3f:8f:c3:5b:bf:cd:ee:58:d3:c6:ba:62:43:
ac:c2:a4:41:f2:28:b6:69:f6:d9:43:5a:54:fc:8e:1e:1a:2b:
d6:5f:97:a5:bb:69:35:bf:05:57:2c:1a:7b:1a:2d:02:1f:5d:
89:de:ac:da:58:49:ed:30:ed:f6:40:1d:34:aa:aa:c6:4d:b5:
38:39:92:40:78:e7:7c:22:3c:90:f7:8f:e0:da:43:72:f9:3f:
6c:fa:70:89:9b:d3:58:6b:16:4e:6d:6d:3a:ec:1a:d0:e7:bc:
0d:43:43:8e:84:ad:98:26:1a:78:8a:9d:1c:bd:5e:9a:e9:3e:
2c:9f:87:0d:c0:e1:77:95:2e:b2:b8:1f:ec:b9:c4:bd:82:06:
29:79:0d:d9:29:9d:ce:c7:5b:f7:88:8c:d3:4b:b7:0a:a1:e9:
0a:12:c0:94:5d:f7:6e:bb:b0:4a:29:bb:6f:2a:ba:ef:cb:e5:
6a:60:3c:9b:d4:56:ec:f7:4f:37:59:55:e2:24:90:fb:3d:32:
69:18:78:49:7f:fd:73:1f:b5:2b:e4:67:74:ce:a2:be:25:e4:
a9:c2:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org