Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/BFV1ytyrEZllCjszCCn4d_9qpnM.roa
File: BFV1ytyrEZllCjszCCn4d_9qpnM.roa (raw, json)
Hash identifier: FClMloSVjJ0BfCQmiFGvi0WLpHowRejY/TXNuLYXg/I=
Subject key identifier: 04:55:75:CA:DC:AB:11:99:65:0A:3B:33:08:29:F8:77:FF:6A:A6:73
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 04AEC0D2
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/BFV1ytyrEZllCjszCCn4d_9qpnM.roa
Signing time: Tue 10 May 2022 21:20:02 +0000
ROA not before: Tue 10 May 2022 21:20:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 46.37.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78561490 (0x4aec0d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 10 21:20:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=045575cadcab1199650a3b330829f877ff6aa673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:0d:d1:c3:3b:ab:45:24:91:1d:d0:ac:f1:
22:b5:f7:05:8a:a7:c9:c6:cc:ff:20:55:15:80:3f:
e9:12:bc:6f:4b:fb:40:ff:fb:8f:53:61:5b:64:4e:
1e:4e:ac:c2:f4:b6:35:8d:b8:ea:f0:95:70:27:c7:
41:1d:b7:b3:2f:fc:c7:95:ef:c7:dd:cd:f9:ff:e5:
63:10:13:8c:89:cd:23:ab:d0:3c:ce:64:1f:31:45:
55:04:2c:b4:4a:fd:a6:01:3c:de:8f:59:29:75:a9:
88:38:b9:70:22:e9:4f:04:08:79:78:de:33:16:29:
a0:eb:bf:59:98:77:50:db:6d:d4:0c:fb:2d:a8:0e:
ea:ad:9e:fe:ba:3c:10:48:ab:7d:f2:46:38:e4:94:
8c:63:a5:e0:d2:62:72:29:31:94:57:07:f3:f7:7e:
70:60:e5:44:08:82:30:d7:ec:1d:1a:ef:50:00:f1:
a9:c6:c2:79:5b:86:c0:48:d9:67:d5:bf:e4:12:46:
c2:ee:90:d1:71:05:80:85:b8:54:8a:ec:07:13:42:
7d:41:20:02:3e:0c:b5:f2:77:a7:79:f5:d5:02:e5:
91:a0:0d:c4:79:f5:a4:73:9c:50:42:d1:05:c6:48:
1a:8c:68:26:b7:01:c4:e2:7f:0d:fc:49:5d:4d:76:
8f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:75:CA:DC:AB:11:99:65:0A:3B:33:08:29:F8:77:FF:6A:A6:73
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/BFV1ytyrEZllCjszCCn4d_9qpnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0b:f3:d6:4f:69:ab:bc:77:48:f7:9a:6b:d4:ab:0d:19:87:
33:68:94:fd:7a:45:ee:07:9d:85:09:8e:f3:3f:49:bb:a0:4a:
42:46:ed:28:af:dc:bf:cd:3a:82:33:9f:b7:1c:2a:fc:5c:3b:
10:fb:40:e8:ae:fd:db:86:3b:91:46:17:48:2f:18:23:1b:8d:
89:49:49:21:2b:41:ba:26:26:48:1c:d3:aa:d4:41:a7:99:e8:
95:4e:10:24:b3:9b:73:0c:c3:c6:e3:31:16:68:a4:0c:ee:0a:
c0:40:c7:a4:bf:03:81:b8:b8:a5:62:eb:b3:74:46:b9:1b:8c:
7f:78:d2:75:56:0f:99:51:5c:2c:a6:0f:9d:41:b8:ea:29:23:
e4:28:dc:a1:ef:bf:a0:07:fc:09:3b:53:34:be:9a:85:70:84:
1f:de:cc:b9:e5:05:6c:52:64:7a:91:a3:eb:dd:29:f7:d4:68:
69:a5:dd:08:62:32:aa:3f:aa:57:00:38:3d:41:ff:57:29:02:
41:71:1a:76:56:fc:52:cc:eb:c3:93:48:6c:d0:e1:a2:6b:3d:
83:dd:fa:40:03:18:a6:cb:72:77:2d:f7:58:8c:cf:5f:3b:c2:
86:40:a2:d2:8a:65:c4:76:68:9a:be:4c:86:e1:b4:0b:24:9d:
93:8d:63:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org