Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GBuEuRFj3e48IcrB2tkRW-H-MZg.roa
File: GBuEuRFj3e48IcrB2tkRW-H-MZg.roa (raw, json)
Hash identifier: PrBNbHlWFvc5tNiOUPTmG3o/NwQW1/l1GDQC9j57la8=
Subject key identifier: 18:1B:84:B9:11:63:DD:EE:3C:21:CA:C1:DA:D9:11:5B:E1:FE:31:98
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018444849463D4AB76CD39A838FA7A92AED3
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GBuEuRFj3e48IcrB2tkRW-H-MZg.roa
Signing time: Fri 04 Nov 2022 21:20:50 +0000
ROA not before: Fri 04 Nov 2022 21:20:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.108.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:44:84:94:63:d4:ab:76:cd:39:a8:38:fa:7a:92:ae:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 4 21:20:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=181b84b91163ddee3c21cac1dad9115be1fe3198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:e4:36:ef:0d:b2:04:f8:c3:5a:45:79:3b:
60:65:aa:e2:23:cd:19:1a:08:2e:1f:35:94:80:c0:
fd:f6:d5:2d:cb:65:fc:65:4b:28:8b:6f:1d:a1:d4:
f8:d5:02:57:78:d4:d0:29:2f:d6:9b:56:1a:20:d9:
36:89:b5:cd:06:c7:53:53:8c:5a:1e:a1:ce:48:54:
86:7d:af:83:a9:33:ca:de:8a:bb:38:93:dd:dd:0e:
d9:2d:78:24:4a:95:7f:a8:06:1c:96:77:98:05:a7:
07:4f:eb:5a:22:22:be:c5:7f:00:a2:76:b8:69:97:
f2:d6:4f:39:c6:1b:b2:6e:df:65:52:af:1e:06:0c:
f6:ef:cb:7d:64:0c:d0:60:79:ed:70:8e:e7:ef:2e:
b5:4a:52:bd:c1:d4:21:f9:91:36:9a:ef:a2:74:99:
bf:d4:29:5b:e3:c1:bf:02:57:24:a4:12:05:87:bd:
2c:79:16:0f:ae:e1:c5:17:b8:f5:1d:dd:36:0c:cd:
aa:8b:80:0e:b0:58:48:c3:e3:d6:00:05:d3:76:6f:
17:d6:f0:31:e7:c2:27:b9:00:1b:b2:e3:97:64:aa:
d2:89:29:67:bb:cf:22:a6:6f:98:4c:ab:94:03:a9:
eb:0c:14:97:22:e8:04:ae:97:43:90:32:ca:59:da:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:84:B9:11:63:DD:EE:3C:21:CA:C1:DA:D9:11:5B:E1:FE:31:98
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GBuEuRFj3e48IcrB2tkRW-H-MZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.101.0/24
46.37.108.0/24
46.37.115.0/24
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:be:08:57:7d:2a:2a:1b:df:75:3a:dc:5a:62:f5:1a:6e:0b:
db:7b:ef:6a:af:cb:d6:a9:bf:18:6a:dc:98:e6:60:31:54:0a:
35:1a:7b:ab:90:34:03:7a:c8:31:83:76:10:0f:2f:3e:3b:ca:
1d:3c:e1:97:6b:44:b0:bd:02:12:63:8d:73:3a:59:2e:a8:f6:
24:e3:6d:67:22:a7:f9:76:41:00:ce:d0:8f:7b:d2:ef:14:4a:
49:20:bd:51:24:17:3c:35:c7:e4:72:a1:62:06:4b:31:60:8d:
fa:96:89:72:9f:73:bf:c9:6e:d3:32:1d:41:0e:c5:10:cf:76:
be:92:bf:56:cb:7c:24:60:fb:82:c4:00:b2:5a:15:cd:9c:94:
0d:15:a6:2a:b5:7c:d4:6c:59:27:6b:d1:8c:86:e3:24:96:7a:
d1:b4:1b:90:ec:04:07:98:c5:e5:b5:11:21:d1:ca:68:b0:a3:
47:b3:f7:c5:18:b6:7e:8b:2e:cd:9d:e7:fb:47:93:fa:7d:76:
8a:d8:d9:78:86:59:20:a3:a8:db:3d:df:8c:a4:02:0a:67:f5:
a4:4e:5d:5e:89:7b:1b:35:4f:c1:bb:9b:b9:3e:f5:1b:82:53:
d7:84:9f:f2:d8:fe:95:5c:86:87:94:b6:ba:5f:a5:ca:4b:b8:
67:b4:e3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org