Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KvRAFmF8ei-gt3uMmSxdUqM52zc.roa
File: KvRAFmF8ei-gt3uMmSxdUqM52zc.roa (raw, json)
Hash identifier: IpFX7/D37tjtYyS7hhoSQbpGwaV53mHyKY1oBZT16q0=
Subject key identifier: 2A:F4:40:16:61:7C:7A:2F:A0:B7:7B:8C:99:2C:5D:52:A3:39:DB:37
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0461EB40
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KvRAFmF8ei-gt3uMmSxdUqM52zc.roa
Signing time: Thu 07 Apr 2022 22:08:38 +0000
ROA not before: Thu 07 Apr 2022 22:08:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 46.37.114.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73526080 (0x461eb40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 7 22:08:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2af44016617c7a2fa0b77b8c992c5d52a339db37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:77:48:19:23:ba:6e:9d:f7:b7:6d:56:fa:
e0:00:92:4e:0a:ee:f8:10:f9:84:d9:01:03:f3:ae:
24:6a:87:0b:a8:dc:1a:f0:c6:61:e9:55:d7:10:3b:
70:bc:aa:cf:d7:dc:5e:95:ea:f7:2d:50:c1:93:6e:
c2:82:47:40:20:93:ae:81:b6:2c:0f:c8:49:d9:81:
54:9e:9a:46:cb:27:9b:3c:72:54:f0:fa:7f:ce:10:
37:16:5c:e0:70:50:2b:e3:c4:ac:7d:6b:1e:fd:5d:
63:51:f6:8d:63:c3:dd:e8:a4:7e:d7:fa:a4:15:6c:
44:97:da:3b:41:39:af:c1:34:50:58:1a:20:57:6d:
12:c2:46:ba:30:8e:c3:2c:4d:f9:ca:33:60:09:4c:
f1:89:88:a5:3f:39:0c:48:dc:91:7a:03:8b:92:87:
78:30:21:38:63:ac:12:77:34:4b:41:ce:7e:fa:21:
d1:2e:9f:4f:ef:41:b6:5f:b6:55:bc:8d:0d:c4:a9:
5d:6d:7a:89:af:1f:f7:b6:fc:41:bd:89:6e:ef:93:
0b:87:46:0d:8b:90:91:8d:8e:49:aa:d6:dc:6a:c9:
27:32:41:70:dc:c5:e7:4f:79:3f:5a:15:8c:da:37:
f1:8e:a6:e6:67:eb:a2:9d:25:5a:69:92:a3:0c:6e:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:40:16:61:7C:7A:2F:A0:B7:7B:8C:99:2C:5D:52:A3:39:DB:37
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/KvRAFmF8ei-gt3uMmSxdUqM52zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.114.0/24
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e9:da:3e:23:81:82:76:af:8c:bc:1f:eb:e3:3d:39:ed:d9:
15:94:a1:6d:d9:35:b9:eb:eb:7f:9b:8b:9b:18:96:e2:3f:13:
ae:8e:69:34:8f:5a:45:46:3f:4b:e3:2e:dc:b3:e4:2d:45:08:
b2:97:e9:60:da:64:63:94:c1:3b:d6:81:d5:61:62:54:61:3d:
60:eb:ac:65:55:46:c0:dc:7a:07:d8:92:99:eb:f0:bd:57:53:
fd:49:ad:27:21:98:c4:5a:a8:1c:98:e5:51:0a:5e:98:f8:1f:
68:2f:0f:4c:80:27:58:0a:f7:53:4f:1e:0d:4d:b5:a5:bf:f6:
64:84:2a:e6:e7:54:ee:70:2a:30:68:62:1d:c8:85:bf:88:f6:
3e:e6:e9:b5:d8:33:b5:66:37:72:f0:43:81:32:0d:8a:f1:03:
e1:dd:96:9b:e6:38:d1:e6:3f:69:50:6a:e4:74:a2:f5:71:89:
3f:e1:80:68:6a:1b:51:9d:95:39:49:a5:1d:5e:4a:38:cf:5a:
ba:f2:9e:ea:cd:0d:cb:19:7c:e1:83:51:e2:69:13:62:eb:0c:
01:d3:96:cd:13:3f:15:7b:af:dc:a7:96:79:19:d3:73:e9:1d:
bc:0c:01:15:20:2a:c4:8c:75:90:61:f0:9a:65:42:7c:bf:73:
e7:74:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org