Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JoxXaFeCpvUfmL4MpPAxLcJz3ig.roa
File: JoxXaFeCpvUfmL4MpPAxLcJz3ig.roa (raw, json)
Hash identifier: /Zw5XCBSJ4sIuMWYXK+paVzUaPju9GxFOObeBbU5mV4=
Subject key identifier: 26:8C:57:68:57:82:A6:F5:1F:98:BE:0C:A4:F0:31:2D:C2:73:DE:28
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 04B07197
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JoxXaFeCpvUfmL4MpPAxLcJz3ig.roa
Signing time: Tue 10 May 2022 21:22:02 +0000
ROA not before: Tue 10 May 2022 21:22:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134526
IP address blocks: 46.37.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78672279 (0x4b07197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 10 21:22:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=268c57685782a6f51f98be0ca4f0312dc273de28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:29:2a:13:14:1c:f1:25:de:fe:49:83:59:
29:c6:6c:68:96:27:d0:70:d5:04:2c:97:bc:02:de:
fe:2f:57:60:df:07:27:0d:0b:c7:eb:4d:94:86:d9:
fe:07:40:2e:fd:ef:e0:58:90:69:87:7c:fb:46:43:
a2:65:69:f0:2e:c5:34:c4:6a:98:69:81:2a:70:cf:
00:83:3c:6c:a5:cc:35:cc:a9:77:36:12:95:21:7e:
63:cd:fb:35:82:01:22:6c:2f:57:7c:60:da:58:fc:
e8:64:3c:83:53:ef:64:4f:3b:f2:ea:59:8c:4b:ca:
81:52:e0:86:1a:48:dd:8b:15:a1:95:6d:05:f8:af:
a2:7d:51:b0:f1:8d:26:2b:5f:e5:1a:07:75:49:2a:
7e:37:ca:14:96:ef:ab:22:a5:59:64:97:53:b6:f7:
76:f1:07:26:a2:53:90:38:a3:9c:1d:bf:ad:5d:8a:
fd:c8:dd:fc:5a:37:ce:47:5c:0a:c3:8b:5f:02:2f:
d1:4c:5c:45:00:89:f5:0e:9d:c4:42:7b:d1:db:13:
5a:4d:35:a1:17:a6:54:3b:ef:1d:d6:e2:8a:2d:fa:
73:1f:64:25:fa:6e:75:eb:48:ff:c0:6e:ae:28:6f:
46:9b:d1:b3:3e:01:06:8b:79:44:6d:0e:8c:6c:8e:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:57:68:57:82:A6:F5:1F:98:BE:0C:A4:F0:31:2D:C2:73:DE:28
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JoxXaFeCpvUfmL4MpPAxLcJz3ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:36:e9:53:4e:f6:33:88:a2:39:0b:91:46:d5:9d:22:b2:32:
11:ec:20:78:6d:43:3e:9c:01:48:d4:10:f8:d2:fe:e9:18:da:
6b:04:79:e1:70:92:f4:f2:5c:ce:54:b5:7a:bc:0e:65:d5:e2:
c4:51:a7:0a:c9:ac:4c:6b:09:1c:ad:a4:c7:18:04:cd:d3:01:
f8:26:4d:7c:e6:da:a6:4c:06:bb:2f:48:03:73:26:e8:08:cc:
0e:82:7d:c9:df:01:ff:07:64:b2:67:ee:bf:89:da:64:56:0e:
84:d8:8e:64:0a:11:24:ce:b5:58:cc:91:89:12:23:60:a2:3e:
eb:c3:2c:13:cd:ff:e8:7b:e1:55:24:4a:b9:35:40:63:cd:fc:
3d:a4:3e:27:2f:44:9d:8e:7a:c4:41:9b:7a:11:c4:cd:01:48:
19:68:bf:b1:a4:a3:a9:49:18:c9:a2:25:62:24:85:b1:c4:28:
03:e7:d4:c5:b8:2a:86:89:df:55:e6:65:63:de:c8:72:13:ea:
3c:6c:5e:f1:b8:e3:19:a8:9f:68:af:0f:a9:bc:f5:73:01:01:
e9:c4:d1:3d:15:7b:3d:fe:5f:48:c7:8c:8e:62:89:08:18:d6:
f1:ea:07:7c:80:ca:ab:53:76:b1:5e:8b:d6:5b:0e:1a:1c:69:
bf:b3:f7:cb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBLBxlzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2NmMDg4NDkxOGE1MDIzOWVmNzA1MThlZTlmYzA0ZjFhYWUxOTI5MB4XDTIyMDUx
MDIxMjIwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjY4YzU3Njg1Nzgy
YTZmNTFmOThiZTBjYTRmMDMxMmRjMjczZGUyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMjXKSoTFBzxJd7+SYNZKcZsaJYn0HDVBCyXvALe/i9XYN8H
Jw0Lx+tNlIbZ/gdALv3v4FiQaYd8+0ZDomVp8C7FNMRqmGmBKnDPAIM8bKXMNcyp
dzYSlSF+Y837NYIBImwvV3xg2lj86GQ8g1PvZE878upZjEvKgVLghhpI3YsVoZVt
Bfivon1RsPGNJitf5RoHdUkqfjfKFJbvqyKlWWSXU7b3dvEHJqJTkDijnB2/rV2K
/cjd/Fo3zkdcCsOLXwIv0UxcRQCJ9Q6dxEJ70dsTWk01oRemVDvvHdbiii36cx9k
JfpudetI/8BurihvRpvRsz4BBot5RG0OjGyOE3ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQmjFdoV4Km9R+Yvgyk8DEtwnPeKDAfBgNVHSMEGDAWgBTTzwiEkYpQI573
BRjun8BPGq4ZKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8x
L0pveFhhRmVDcHZVZm1MNE1wUEF4TGNKejNpZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
Y2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8xLzA4OEloSkdLVUNP
ZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC4lYjANBgkqhkiG9w0BAQsFAAOC
AQEALzbpU072M4iiOQuRRtWdIrIyEewgeG1DPpwBSNQQ+NL+6RjaawR54XCS9PJc
zlS1erwOZdXixFGnCsmsTGsJHK2kxxgEzdMB+CZNfObapkwGuy9IA3Mm6AjMDoJ9
yd8B/wdksmfuv4naZFYOhNiOZAoRJM61WMyRiRIjYKI+68MsE83/6HvhVSRKuTVA
Y838PaQ+Jy9EnY56xEGbehHEzQFIGWi/saSjqUkYyaIlYiSFscQoA+fUxbgqhonf
VeZlY97IchPqPGxe8bjjGaifaK8Pqbz1cwEB6cTRPRV7Pf5fSMeMjmKJCBjW8eoH
fIDKq1N2sV6L1lsOGhxpv7P3yw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org