Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Cljji9LnwaxNtBnUDjHNXFA8FPo.roa
File: Cljji9LnwaxNtBnUDjHNXFA8FPo.roa (raw, json)
Hash identifier: WuM1Q1ZksrfSkfc648uiT7ENnEZJaH1DZHSU/z4wc9Y=
Subject key identifier: 0A:58:E3:8B:D2:E7:C1:AC:4D:B4:19:D4:0E:31:CD:5C:50:3C:14:FA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0184EF0FD0A14509A31864931190283F8D07
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Cljji9LnwaxNtBnUDjHNXFA8FPo.roa
Signing time: Thu 08 Dec 2022 00:08:21 +0000
ROA not before: Thu 08 Dec 2022 00:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 46.37.101.0/24 maxlen: 24
46.37.108.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:0f:d0:a1:45:09:a3:18:64:93:11:90:28:3f:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 8 00:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a58e38bd2e7c1ac4db419d40e31cd5c503c14fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:a6:a4:4b:26:ba:88:f9:d4:c3:fe:85:1f:
1b:61:ac:a7:e8:0a:20:67:6f:bd:75:4b:f1:7e:ac:
03:1e:91:45:53:ea:1c:2f:10:8e:33:a7:e4:ae:d2:
4c:0c:40:e6:27:fb:7f:23:78:53:86:32:f8:3d:4e:
e6:57:f0:64:4f:fa:af:3d:f3:69:78:17:d8:2f:13:
9c:75:81:83:e1:26:62:89:6c:ad:79:40:14:d3:17:
9d:f8:55:1b:4a:f3:b5:18:de:19:48:db:cf:80:c8:
43:73:9a:d3:7f:64:5a:a7:09:21:ea:84:84:9a:d1:
ba:fb:1e:fa:86:e2:e0:75:f7:92:e8:29:3e:d5:ea:
7c:cc:52:f4:c6:31:c9:6d:e2:cb:09:b1:c6:e3:f2:
fb:c2:08:71:82:97:bf:77:e2:a9:57:63:80:84:16:
18:a0:c2:10:9e:2b:b3:94:57:ed:46:f3:6d:32:6b:
a2:32:05:33:1b:1e:0b:1e:94:05:ad:9d:f1:90:f8:
45:04:e8:b4:ef:38:f3:bf:d5:3e:ec:b1:30:09:48:
b4:51:10:fc:db:04:16:f7:b3:80:54:23:dd:4d:cf:
4f:32:30:e4:a7:c4:33:23:4e:2d:e5:5f:ba:de:5c:
1f:34:3f:f5:29:ab:db:f9:f9:f3:77:74:a2:34:a3:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:E3:8B:D2:E7:C1:AC:4D:B4:19:D4:0E:31:CD:5C:50:3C:14:FA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Cljji9LnwaxNtBnUDjHNXFA8FPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
46.37.108.0/24
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b1:ce:1b:ec:6f:6b:e7:f5:5c:31:30:de:9a:b3:0e:ca:42:
71:d6:ba:92:e7:50:e5:a3:e6:4d:6c:0c:75:a4:98:ce:88:75:
08:bf:6b:0c:91:44:dc:1f:d1:7f:ce:ac:de:0f:ca:d8:92:3a:
b1:5b:33:ca:89:84:15:d3:4f:7f:f2:34:f9:0c:2a:48:dd:ef:
9b:35:ea:ff:c8:28:b6:43:f9:3d:5c:98:80:d2:b8:96:3e:ad:
46:a8:56:06:18:48:2c:b3:de:f2:45:50:f0:70:89:32:3d:34:
6b:3f:49:2b:9e:b7:f0:a8:96:71:98:d5:22:d6:b9:be:e7:41:
24:9a:a6:5e:d6:72:51:d0:9a:46:b0:0a:2d:9a:04:fb:a8:d3:
45:c2:f1:79:ae:1f:37:4b:1d:75:d8:c4:94:52:e8:82:34:60:
8e:93:6a:cd:87:27:bb:4b:d3:6c:a7:aa:e7:27:c2:ae:e4:31:
32:6c:4a:b2:b0:1b:5c:5a:b0:2e:12:75:f8:ca:a8:96:0b:c4:
b6:85:4f:ec:70:3b:ec:ca:80:3f:a6:d8:1f:8a:60:3d:1a:cd:
fb:e9:3f:36:84:3d:50:11:dd:d5:51:8e:39:f9:f3:28:6b:2e:
6c:18:5b:9e:ab:93:17:83:3c:d0:7c:c5:fc:56:c4:7a:2b:4e:
eb:de:ed:1a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYTvD9ChRQmjGGSTEZAoP40HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjIxMjA4MDAwODIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTU4ZTM4YmQyZTdjMWFjNGRiNDE5ZDQwZTMxY2Q1YzUwM2MxNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU6mpEsmuoj51MP+hR8bYayn6Aog
Z2+9dUvxfqwDHpFFU+ocLxCOM6fkrtJMDEDmJ/t/I3hThjL4PU7mV/BkT/qvPfNp
eBfYLxOcdYGD4SZiiWyteUAU0xed+FUbSvO1GN4ZSNvPgMhDc5rTf2Rapwkh6oSE
mtG6+x76huLgdfeS6Ck+1ep8zFL0xjHJbeLLCbHG4/L7wghxgpe/d+KpV2OAhBYY
oMIQniuzlFftRvNtMmuiMgUzGx4LHpQFrZ3xkPhFBOi07zjzv9U+7LEwCUi0URD8
2wQW97OAVCPdTc9PMjDkp8QzI04t5V+63lwfND/1Kavb+fnzd3SiNKM20wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFApY44vS58GsTbQZ1A4xzVxQPBT6MB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvQ2xqamk5TG53YXhOdEJuVURqSE5YRkE4RlBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiVlAwQA
LiVsAwQALiV9MA0GCSqGSIb3DQEBCwUAA4IBAQAdsc4b7G9r5/VcMTDemrMOykJx
1rqS51Dlo+ZNbAx1pJjOiHUIv2sMkUTcH9F/zqzeD8rYkjqxWzPKiYQV009/8jT5
DCpI3e+bNer/yCi2Q/k9XJiA0riWPq1GqFYGGEgss97yRVDwcIkyPTRrP0krnrfw
qJZxmNUi1rm+50EkmqZe1nJR0JpGsAotmgT7qNNFwvF5rh83Sx112MSUUuiCNGCO
k2rNhye7S9Nsp6rnJ8Ku5DEybEqysBtcWrAuEnX4yqiWC8S2hU/scDvsyoA/ptgf
imA9Gs376T82hD1QEd3VUY45+fMoay5sGFueq5MXgzzQfMX8VsR6K07r3u0a
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org