Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/F5HACJ2dy7XD0PGPWqAo5FEmtQ4.roa
File: F5HACJ2dy7XD0PGPWqAo5FEmtQ4.roa (raw, json)
Hash identifier: kwzCHVfFt3UR892X8mo/24+OEXy/zRrcvgGcvIDW06M=
Subject key identifier: 17:91:C0:08:9D:9D:CB:B5:C3:D0:F1:8F:5A:A0:28:E4:51:26:B5:0E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018523A99793C8BC5B4B161DDAFA7B4085CF
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/F5HACJ2dy7XD0PGPWqAo5FEmtQ4.roa
Signing time: Sun 18 Dec 2022 05:16:34 +0000
ROA not before: Sun 18 Dec 2022 05:16:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:23:a9:97:93:c8:bc:5b:4b:16:1d:da:fa:7b:40:85:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 18 05:16:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1791c0089d9dcbb5c3d0f18f5aa028e45126b50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:ae:c0:f5:85:41:4f:ce:de:52:8e:47:e2:
b0:8d:72:f3:29:86:43:8f:ba:a9:2c:3e:75:39:2f:
2e:3d:27:f1:8f:21:b3:e6:01:e9:8b:c7:95:0c:f2:
48:79:80:65:a9:af:b2:82:f0:18:a5:12:51:4c:df:
db:d7:39:92:7d:01:13:fb:e7:76:c3:fd:5c:33:8f:
75:a0:f0:f7:b2:61:02:2b:6f:56:a1:c4:9d:0a:ad:
db:d2:ca:07:c2:bd:37:d9:b8:34:ac:04:8e:46:fc:
60:32:7e:ea:2e:a0:f0:a9:75:80:45:4a:bc:c5:09:
81:58:72:a4:69:6d:7f:86:8d:15:d5:c6:0b:fc:05:
d0:5e:41:93:87:a1:fa:a6:17:ff:94:52:7c:1a:31:
f0:86:25:57:f7:f4:cf:0b:59:22:a3:6c:c9:bf:c5:
81:3a:60:8a:11:c9:ce:06:b0:29:2d:b0:b0:2e:00:
4b:49:f8:31:35:ff:74:9a:12:c1:2b:64:2d:cf:28:
22:66:7a:08:b2:66:e6:05:6d:f6:de:ca:2e:0a:85:
1e:4d:04:8a:cd:43:cb:13:db:2c:31:8e:76:b8:ad:
4d:df:0b:f5:0c:f7:80:1d:ec:ed:54:98:f8:a8:eb:
fb:06:b9:e8:bd:9f:e8:50:2c:99:f3:dc:3d:ff:f4:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:91:C0:08:9D:9D:CB:B5:C3:D0:F1:8F:5A:A0:28:E4:51:26:B5:0E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/F5HACJ2dy7XD0PGPWqAo5FEmtQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c4:57:98:4e:3f:16:c6:cc:1a:77:f1:69:02:2d:a6:48:71:
ff:6f:b1:04:6f:a2:7d:67:17:3a:8b:c8:a6:64:28:16:16:79:
71:f8:79:c9:12:03:32:ec:4f:36:16:77:87:06:51:18:01:2e:
da:64:ea:d0:cc:fd:e6:3d:19:6d:07:ec:ab:42:65:a6:c0:dc:
08:c3:ec:88:4f:4e:09:34:a3:f9:26:a2:63:d4:16:2c:f5:0b:
4f:e0:85:33:0f:5a:09:1e:fa:5d:b1:9c:2e:a9:4f:07:0f:dd:
03:81:88:12:8d:d0:d5:e5:f3:3f:72:79:a9:f8:6d:8b:08:e5:
89:04:b6:a9:a3:0a:bc:56:d2:0a:af:32:74:0b:ed:0b:bd:67:
66:30:07:b2:5e:82:ef:b5:83:97:11:e5:af:ae:32:34:d7:92:
b6:50:a5:18:a8:5e:42:d2:01:b7:29:de:fc:9b:24:d6:a8:46:
6e:25:8a:77:6b:16:d7:9f:85:49:43:db:4a:21:49:10:e0:c6:
99:0e:20:bb:11:d5:64:ad:4d:80:2d:da:f7:ac:eb:73:3e:ca:
4d:7d:6d:ce:1a:aa:ed:e2:b8:15:ee:23:60:20:e1:e3:c1:b4:
12:5e:1e:5a:a0:c2:00:a7:06:a2:41:e0:d4:86:50:f3:51:fd:
65:79:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org