Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8hlZB0w9vzN1ac1Yd4EPnkCI23U.roa
File: 8hlZB0w9vzN1ac1Yd4EPnkCI23U.roa (raw, json)
Hash identifier: dUdQsTWg2gHqqEcSNm//NyZB+Tc7Md6gpvyQLDeGMBQ=
Subject key identifier: F2:19:59:07:4C:3D:BF:33:75:69:CD:58:77:81:0F:9E:40:88:DB:75
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03C53895
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8hlZB0w9vzN1ac1Yd4EPnkCI23U.roa
Signing time: Fri 18 Feb 2022 09:10:53 +0000
ROA not before: Fri 18 Feb 2022 09:10:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 46.37.101.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63256725 (0x3c53895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 18 09:10:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f21959074c3dbf337569cd5877810f9e4088db75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:7e:b0:51:52:92:40:e0:24:0c:d3:5a:97:
c6:b8:13:00:73:b6:11:29:ae:8b:2d:da:f4:4b:82:
43:f2:1d:a6:7f:e2:5f:bc:d4:41:8d:9d:3f:dc:bb:
28:ae:ed:cc:b8:e1:4f:c5:59:7d:a9:21:93:d8:ef:
74:b9:c7:47:e0:58:87:4d:32:49:32:9c:3c:54:99:
14:81:db:48:a6:9b:5e:9e:dc:ed:f9:96:4b:a2:3a:
cd:2b:8e:4a:15:ad:12:59:d0:91:86:68:9f:6d:79:
44:b9:b7:a1:1d:7c:b3:f2:49:10:6a:8f:f6:ff:c5:
99:f6:04:03:9e:4b:0b:01:dd:8a:8c:49:55:b7:26:
0a:1c:c4:e9:f6:ce:3a:3e:8d:d8:ab:de:2d:26:91:
47:e1:25:26:f6:63:c0:55:8f:06:41:9c:54:cd:c7:
6d:fb:8a:f4:eb:95:cc:4f:34:e7:b9:ee:eb:f0:ba:
80:2d:00:10:90:86:77:7f:2f:7f:48:95:fb:02:04:
76:61:ba:c6:1b:4e:f8:32:11:bf:9a:77:a8:06:d2:
48:80:9d:07:43:5c:a0:a7:6d:e5:a7:a4:04:ea:ca:
12:6a:eb:ef:60:ec:b8:9d:34:0a:c7:cd:c1:ac:3f:
94:b9:09:24:f6:23:e1:85:0b:dd:46:be:6d:53:c6:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:19:59:07:4C:3D:BF:33:75:69:CD:58:77:81:0F:9E:40:88:DB:75
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8hlZB0w9vzN1ac1Yd4EPnkCI23U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
46.37.114.0/23
Signature Algorithm: sha256WithRSAEncryption
69:d0:72:b7:3e:e3:f4:86:8e:80:ad:c8:75:49:6a:aa:b8:17:
4a:b6:04:f9:68:02:84:6f:fe:37:33:27:bc:ac:ed:e7:df:02:
b0:ed:99:e9:bc:1a:e6:42:58:66:38:e1:97:e0:de:72:7f:35:
aa:a4:e8:b7:15:dc:9f:12:08:0e:44:78:4c:99:f1:fe:ed:83:
e1:a1:5e:09:7f:a0:ae:bb:ed:22:e2:c7:4c:f8:ce:36:fa:d8:
cd:ea:16:42:d0:13:f2:36:16:3e:db:3e:bc:79:fd:34:cb:f2:
90:34:04:5f:b9:83:94:0c:8f:85:a3:e9:37:51:6b:91:72:79:
55:f1:c1:bd:6f:cd:fe:1c:bf:cf:dc:3d:e2:d1:f7:fa:13:2e:
db:28:c9:ff:b1:5e:5f:20:21:b5:f8:fb:1c:ad:0b:b6:31:8e:
35:a3:a1:f7:f8:0c:d9:be:bf:82:3c:3f:f5:12:c6:94:68:26:
45:c5:38:b5:6b:40:d4:f9:db:d5:57:ec:f8:40:9f:f6:91:a3:
47:7c:99:df:3b:d5:12:cc:f0:a6:35:65:06:09:48:71:38:30:
8d:e0:90:b7:8d:63:a8:5e:a6:6b:08:76:61:6f:e8:4a:0a:14:
4d:73:d4:13:2f:ad:c1:89:a4:05:a7:05:a7:0b:d7:f0:d4:2a:
4e:44:69:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org