Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DpTEe4YeIL2ArMNkYOz9QnFHaJA.roa
File: DpTEe4YeIL2ArMNkYOz9QnFHaJA.roa (raw, json)
Hash identifier: 7DnC042mmvHjLWWg44lCGWTRpIGJFFOUqWdvV6+RE9c=
Subject key identifier: 0E:94:C4:7B:86:1E:20:BD:80:AC:C3:64:60:EC:FD:42:71:47:68:90
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0184C8C3B7D31F2FF9318D66E3826DC5B3B0
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DpTEe4YeIL2ArMNkYOz9QnFHaJA.roa
Signing time: Wed 30 Nov 2022 13:39:40 +0000
ROA not before: Wed 30 Nov 2022 13:39:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 46.37.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:c3:b7:d3:1f:2f:f9:31:8d:66:e3:82:6d:c5:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 30 13:39:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e94c47b861e20bd80acc36460ecfd4271476890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:c0:8c:96:9e:49:cc:11:ad:5e:63:43:50:
57:3d:5e:dd:14:57:12:bf:bf:46:63:6c:f2:90:4e:
08:74:9d:0a:46:06:f8:34:f7:0a:0c:2b:1d:8a:74:
09:5f:81:48:ca:ac:e9:07:25:08:96:20:14:51:e8:
1b:8b:92:78:d4:f7:2b:ec:52:1a:a6:cc:7b:3a:f6:
4f:1c:2f:bd:a6:60:5c:9c:54:58:d2:0e:3c:b7:b2:
89:f2:dd:88:0c:7d:44:dc:f1:76:d8:5b:42:ea:af:
95:bf:ff:6a:1a:ed:f7:cf:80:65:50:c7:a0:b7:1b:
40:63:a4:fb:d6:a9:d9:84:4c:92:e4:15:bb:2b:52:
fe:6d:ae:27:8f:33:fd:2c:55:10:5f:e0:d2:36:b2:
92:b3:85:ef:19:36:b3:0f:78:29:c6:9a:71:64:2d:
95:ab:b3:28:af:2b:70:03:3e:f4:93:b9:4e:84:30:
8c:d6:a7:b1:6e:10:4f:bf:70:cb:da:15:c4:c4:95:
60:bb:e6:1c:30:19:b1:e3:67:57:12:06:4a:f4:43:
7d:d5:25:c3:9f:d3:54:cc:f4:b9:06:1d:ca:d0:f4:
09:a7:ab:01:01:17:ff:c6:5e:e4:4b:f5:12:03:2b:
8e:19:aa:e4:b6:6a:79:5c:bd:5a:38:52:c4:f4:5f:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:94:C4:7B:86:1E:20:BD:80:AC:C3:64:60:EC:FD:42:71:47:68:90
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DpTEe4YeIL2ArMNkYOz9QnFHaJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4f:55:06:b5:a3:70:c4:e8:32:88:c6:34:dc:9f:b7:b3:e3:
06:fd:32:aa:e9:62:e3:71:f2:ce:f6:07:cb:36:73:1e:3c:bc:
91:52:d4:0a:c7:33:3d:0b:72:82:57:16:df:85:38:a0:70:0c:
22:bd:3e:dc:d7:c2:17:2f:2a:fd:11:dc:a5:0c:37:b2:1f:32:
7f:32:02:c7:bb:6f:cb:73:c4:06:a5:ff:e0:98:b0:49:f1:7b:
e6:1b:d1:4c:c5:03:1c:e3:ed:02:35:da:b8:0f:2d:5b:c4:7e:
91:82:16:58:e6:0d:57:55:31:03:bc:5d:4b:9f:c0:70:6c:eb:
ea:1b:8b:13:db:e5:c6:0b:b1:00:46:6a:d0:4e:5a:fc:49:1a:
38:41:55:53:89:2f:43:1f:dd:8f:ae:98:2f:f7:12:c4:0c:cc:
c1:be:b4:a5:fb:9a:9a:09:ab:a1:81:ea:fb:a2:f0:c3:c7:3a:
cc:80:f5:55:47:14:7c:c5:50:07:8d:54:90:be:6f:e4:04:be:
4e:3d:e0:6a:73:af:4c:58:20:87:a3:30:8e:83:f6:d5:03:4a:
03:28:09:8e:87:5a:91:32:bd:00:af:37:8d:09:65:91:6e:e3:
21:8f:a5:f9:d9:91:62:bd:6b:83:59:a1:95:38:83:d2:ca:0c:
41:9d:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org