Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/F3wveYHzVInQ3oT-ZwKOhSPX-7E.roa
File: F3wveYHzVInQ3oT-ZwKOhSPX-7E.roa (raw, json)
Hash identifier: qLfJplLq5xw5RFzDRLnmeQ8MSuGJTCu+zI4C1d7jYC8=
Subject key identifier: 17:7C:2F:79:81:F3:54:89:D0:DE:84:FE:67:02:8E:85:23:D7:FB:B1
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03FDBAAA
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/F3wveYHzVInQ3oT-ZwKOhSPX-7E.roa
Signing time: Fri 04 Mar 2022 06:13:17 +0000
ROA not before: Fri 04 Mar 2022 06:13:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.37.103.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66960042 (0x3fdbaaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 4 06:13:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=177c2f7981f35489d0de84fe67028e8523d7fbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8a:85:e8:be:58:54:cb:5a:26:f3:5e:34:c4:
6e:54:37:b2:80:23:08:21:8f:7c:76:80:69:dc:da:
9d:ce:03:ad:74:da:0b:ce:bc:e1:3d:02:02:cf:e0:
d8:2d:15:93:6a:7d:39:fc:16:ac:b4:46:1e:97:c8:
a9:11:a8:ae:86:21:68:33:06:31:42:e5:84:b8:90:
15:0c:c9:d0:2c:c2:15:01:82:cb:94:21:fd:99:e5:
0e:45:e3:cf:10:93:56:f0:7e:c7:62:1d:64:c1:93:
4b:20:29:a8:e8:02:44:a5:aa:56:6a:9f:bf:fc:67:
7e:92:85:3a:1a:70:9f:bc:77:ec:b5:f2:d0:c2:87:
97:6f:89:4e:d7:91:20:86:ba:cb:aa:b5:39:17:f7:
04:af:a8:b6:71:27:90:7a:1b:13:11:4e:c8:56:3d:
6b:c3:bf:17:fa:c7:1a:38:83:37:91:5f:38:2a:57:
60:f5:df:67:dd:29:67:dd:d6:14:7c:23:04:81:54:
ed:cb:3c:57:e4:cf:ba:4c:53:ff:5f:13:77:81:a8:
3f:c7:c7:14:12:45:81:77:ea:12:e4:0f:ad:38:78:
6f:b5:b4:1c:fa:3f:06:bb:41:69:10:a6:1d:cc:1b:
f2:50:66:06:0f:99:8f:04:fb:bb:86:da:c8:c6:f3:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:2F:79:81:F3:54:89:D0:DE:84:FE:67:02:8E:85:23:D7:FB:B1
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/F3wveYHzVInQ3oT-ZwKOhSPX-7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.103.0/24
46.37.119.0/24
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d7:64:ef:5e:48:08:7b:79:58:f6:a5:c7:b5:a9:17:7c:71:
81:57:de:70:8b:0c:27:c2:21:8d:0d:20:b1:de:fc:b8:fd:a0:
ee:cb:54:d1:6d:53:ae:9a:9b:5d:63:14:10:f0:6e:e9:ba:89:
0a:fc:15:a4:a3:a9:2f:2c:39:14:97:33:95:aa:a8:dc:1c:e8:
ff:fe:f1:ad:c8:1f:a6:9f:94:a3:95:24:db:c4:da:21:18:30:
06:6d:bd:4f:9d:f2:b4:8b:4f:3d:67:18:df:54:84:d8:9a:02:
4e:8d:3f:d5:4a:27:23:a0:a0:37:3a:5a:18:0c:4a:8d:6a:6d:
2e:92:eb:32:c4:3d:cf:85:f7:47:a4:5a:bd:5c:e2:c2:4a:55:
e3:d4:63:81:88:6f:21:0e:b1:92:46:34:b9:5b:93:c4:c4:28:
6b:af:94:b7:21:e6:58:da:57:71:93:ae:f0:19:c6:01:55:3d:
d7:bf:f4:02:ea:f1:bd:c9:b5:c5:8a:c5:cf:51:de:b9:0b:b4:
8b:08:cf:27:6a:93:d0:82:8c:4a:19:86:45:4f:e9:03:6a:69:
23:cd:9f:ed:27:b0:1c:5f:f6:b9:08:82:b4:5e:24:23:ff:79:
c7:6d:92:5e:61:bf:75:42:54:07:4b:8d:7f:95:71:4b:3a:6c:
ea:b2:bc:42
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA/26qjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2NmMDg4NDkxOGE1MDIzOWVmNzA1MThlZTlmYzA0ZjFhYWUxOTI5MB4XDTIyMDMw
NDA2MTMxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc3YzJmNzk4MWYz
NTQ4OWQwZGU4NGZlNjcwMjhlODUyM2Q3ZmJiMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOSKhei+WFTLWibzXjTEblQ3soAjCCGPfHaAadzanc4DrXTa
C8684T0CAs/g2C0Vk2p9OfwWrLRGHpfIqRGoroYhaDMGMULlhLiQFQzJ0CzCFQGC
y5Qh/ZnlDkXjzxCTVvB+x2IdZMGTSyApqOgCRKWqVmqfv/xnfpKFOhpwn7x37LXy
0MKHl2+JTteRIIa6y6q1ORf3BK+otnEnkHobExFOyFY9a8O/F/rHGjiDN5FfOCpX
YPXfZ90pZ93WFHwjBIFU7cs8V+TPukxT/18Td4GoP8fHFBJFgXfqEuQPrTh4b7W0
HPo/BrtBaRCmHcwb8lBmBg+ZjwT7u4bayMbzVsMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQXfC95gfNUidDehP5nAo6FI9f7sTAfBgNVHSMEGDAWgBTTzwiEkYpQI573
BRjun8BPGq4ZKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8x
L0Yzd3ZlWUh6VkluUTNvVC1ad0tPaFNQWC03RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
Y2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8xLzA4OEloSkdLVUNP
ZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC4lZwMEAC4ldwMEALlcLDANBgkq
hkiG9w0BAQsFAAOCAQEAGtdk715ICHt5WPalx7WpF3xxgVfecIsMJ8IhjQ0gsd78
uP2g7stU0W1TrpqbXWMUEPBu6bqJCvwVpKOpLyw5FJczlaqo3Bzo//7xrcgfpp+U
o5Uk28TaIRgwBm29T53ytItPPWcY31SE2JoCTo0/1UonI6CgNzpaGAxKjWptLpLr
MsQ9z4X3R6RavVziwkpV49RjgYhvIQ6xkkY0uVuTxMQoa6+UtyHmWNpXcZOu8BnG
AVU917/0Aurxvcm1xYrFz1HeuQu0iwjPJ2qT0IKMShmGRU/pA2ppI82f7SewHF/2
uQiCtF4kI/95x22SXmG/dUJUB0uNf5VxSzps6rK8Qg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org