Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/InKAjt7wi2TVPWq3-_Wg4glgHjw.roa
File: InKAjt7wi2TVPWq3-_Wg4glgHjw.roa (raw, json)
Hash identifier: jalkPVG+dd/eMtnhN2Xp4LlBB76rOzQq4J87sTuFc0g=
Subject key identifier: 22:72:80:8E:DE:F0:8B:64:D5:3D:6A:B7:FB:F5:A0:E2:09:60:1E:3C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03C0C71D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/InKAjt7wi2TVPWq3-_Wg4glgHjw.roa
Signing time: Thu 17 Feb 2022 14:00:21 +0000
ROA not before: Thu 17 Feb 2022 14:00:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62965533 (0x3c0c71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 17 14:00:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2272808edef08b64d53d6ab7fbf5a0e209601e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:12:f7:c1:af:a6:b8:82:c8:29:f5:e2:c3:
56:dd:9c:b9:97:b1:7c:ac:1a:b8:91:7d:98:a9:32:
05:a5:09:dc:14:0a:ab:4e:30:7f:20:90:64:f7:a2:
d6:9a:65:a2:8d:7f:cb:d3:de:fc:22:a8:7a:2d:2d:
8e:f9:ee:f7:a6:13:1f:e3:59:44:88:90:be:3b:44:
e8:16:23:07:5a:63:4f:5c:a6:84:a7:69:5f:67:62:
ba:21:50:c0:f0:4f:86:4d:bb:2c:3f:a5:a3:5a:bc:
e1:24:2c:12:b3:9c:7f:e6:54:a3:04:13:5c:04:4c:
fe:2f:15:23:8b:14:be:e5:f0:1e:f8:26:a3:b6:47:
f5:c9:91:d9:70:4c:e9:17:fa:b2:8f:15:05:31:c7:
a5:6d:ff:5d:5d:3b:ce:bb:38:0e:72:99:16:18:5b:
e2:db:1c:b8:b1:4e:b3:5a:39:d5:f9:f3:24:32:c7:
2b:a6:d1:72:ca:cc:1e:dc:1b:48:38:72:1b:5f:4d:
54:3d:ef:e6:63:99:79:42:d1:d0:47:84:dd:36:b9:
be:7d:04:44:fa:78:18:fd:87:78:e9:cf:d2:d9:03:
01:3f:51:d5:f1:12:e5:b7:19:2d:a6:f9:e8:86:ad:
ef:56:8b:d3:91:d3:aa:69:00:19:c9:13:5d:42:78:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:80:8E:DE:F0:8B:64:D5:3D:6A:B7:FB:F5:A0:E2:09:60:1E:3C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/InKAjt7wi2TVPWq3-_Wg4glgHjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.119.0/24
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5d:14:13:b8:a6:8e:55:54:66:ac:d8:d3:cc:9e:a5:4a:c9:
a9:6c:7f:a3:d4:41:27:dd:09:7f:15:4b:6f:38:30:31:0f:4f:
99:0b:3e:c7:10:14:e6:a9:a4:d6:b7:f4:f3:69:b0:58:94:08:
89:0f:3f:24:c1:97:6e:38:bc:c5:89:01:3b:09:93:0e:7e:c4:
2f:7f:01:86:1f:b6:85:a5:00:ab:b5:87:d9:f8:8e:e8:a0:1b:
b1:af:13:c3:86:3d:13:53:2c:80:58:cb:e9:ca:be:76:bb:e9:
d8:5b:42:b9:79:8d:31:41:9a:84:e9:c1:38:1f:27:70:57:2b:
d0:f1:74:b6:19:3d:96:a6:27:d9:8d:ce:31:b1:ee:31:a8:82:
61:79:65:49:cc:02:8a:e2:96:96:d6:cf:b8:d7:2b:64:cd:c7:
99:f9:2a:3e:19:6e:1b:79:11:38:a7:1f:40:ee:ec:4b:fb:b5:
56:0e:b4:a1:21:76:a5:41:34:67:e4:40:fe:32:71:de:22:8b:
e0:72:cf:e1:5f:83:0d:6f:b8:7d:9e:be:24:6a:4a:69:48:0a:
b8:e9:b6:59:61:3f:44:23:d8:30:de:9c:3f:68:36:3d:1c:40:
96:b0:07:e5:0a:13:a7:00:f8:99:a4:b2:d3:ac:92:a9:5a:5a:
fd:a2:5b:a8
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA8DHHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2NmMDg4NDkxOGE1MDIzOWVmNzA1MThlZTlmYzA0ZjFhYWUxOTI5MB4XDTIyMDIx
NzE0MDAyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjI3MjgwOGVkZWYw
OGI2NGQ1M2Q2YWI3ZmJmNWEwZTIwOTYwMWUzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKNUEvfBr6a4gsgp9eLDVt2cuZexfKwauJF9mKkyBaUJ3BQK
q04wfyCQZPei1pploo1/y9Pe/CKoei0tjvnu96YTH+NZRIiQvjtE6BYjB1pjT1ym
hKdpX2diuiFQwPBPhk27LD+lo1q84SQsErOcf+ZUowQTXARM/i8VI4sUvuXwHvgm
o7ZH9cmR2XBM6Rf6so8VBTHHpW3/XV07zrs4DnKZFhhb4tscuLFOs1o51fnzJDLH
K6bRcsrMHtwbSDhyG19NVD3v5mOZeULR0EeE3Ta5vn0ERPp4GP2HeOnP0tkDAT9R
1fES5bcZLab56Iat71aL05HTqmkAGckTXUJ4aHcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQicoCO3vCLZNU9arf79aDiCWAePDAfBgNVHSMEGDAWgBTTzwiEkYpQI573
BRjun8BPGq4ZKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8x
L0luS0FqdDd3aTJUVlBXcTMtX1dnNGdsZ0hqdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
Y2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8xLzA4OEloSkdLVUNP
ZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC4ldwMEALlcLDANBgkqhkiG9w0B
AQsFAAOCAQEAHV0UE7imjlVUZqzY08yepUrJqWx/o9RBJ90JfxVLbzgwMQ9PmQs+
xxAU5qmk1rf082mwWJQIiQ8/JMGXbji8xYkBOwmTDn7EL38Bhh+2haUAq7WH2fiO
6KAbsa8Tw4Y9E1MsgFjL6cq+drvp2FtCuXmNMUGahOnBOB8ncFcr0PF0thk9lqYn
2Y3OMbHuMaiCYXllScwCiuKWltbPuNcrZM3HmfkqPhluG3kROKcfQO7sS/u1Vg60
oSF2pUE0Z+RA/jJx3iKL4HLP4V+DDW+4fZ6+JGpKaUgKuOm2WWE/RCPYMN6cP2g2
PRxAlrAH5QoTpwD4maSy06ySqVpa/aJbqA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org