Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/P9L2IMJ-1tHeAR_9r6LNKgZxSHs.roa
File: P9L2IMJ-1tHeAR_9r6LNKgZxSHs.roa (raw, json)
Hash identifier: G9/zhcoGHzUJwy755gvpPaqQ6QoajJsit1qwpkzb/tw=
Subject key identifier: 3F:D2:F6:20:C2:7E:D6:D1:DE:01:1F:FD:AF:A2:CD:2A:06:71:48:7B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03282026
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/P9L2IMJ-1tHeAR_9r6LNKgZxSHs.roa
Signing time: Sat 01 Jan 2022 09:57:10 +0000
ROA not before: Sat 01 Jan 2022 09:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 46.37.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52961318 (0x3282026)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 09:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fd2f620c27ed6d1de011ffdafa2cd2a0671487b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:4c:d6:75:4b:89:30:24:c3:3d:62:91:d4:
e6:39:b0:03:5f:fa:92:32:7f:16:fd:5d:38:4d:b9:
f3:b2:44:62:03:d7:4a:80:d6:2b:8b:47:2a:4c:68:
f7:6a:62:19:16:0b:d1:f8:08:9d:51:19:13:16:4d:
6d:22:64:4e:3a:36:06:d5:77:76:8e:fc:51:c8:7e:
9e:96:db:45:d7:ae:18:be:1f:d0:e4:ad:8f:16:45:
41:ec:a4:26:a8:92:8b:8b:d4:43:2c:5c:7a:12:90:
38:03:2e:e8:46:c9:fb:7b:fd:11:cc:2c:f7:79:49:
70:ad:6f:b6:79:ba:47:64:2b:3e:b9:48:a0:bf:b7:
d1:7f:eb:f6:70:0e:9f:51:2e:18:2d:ed:7a:be:a7:
e0:1a:e3:bd:98:7c:84:52:2b:a7:3c:75:23:41:71:
04:9b:f8:7c:50:fd:43:f6:54:c3:ab:9f:9c:8d:c2:
a4:72:95:f9:6d:50:4d:bf:b6:eb:3f:3e:78:55:9c:
1c:b7:f6:20:58:60:f4:36:93:b7:c5:a2:ae:65:eb:
be:4a:e3:e9:57:6c:23:65:22:a4:e8:f9:df:30:53:
f5:da:32:71:cf:e8:fb:78:bc:cc:83:c9:0a:6d:57:
fe:52:a8:14:fa:11:68:7c:11:88:57:99:cc:fb:f9:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:F6:20:C2:7E:D6:D1:DE:01:1F:FD:AF:A2:CD:2A:06:71:48:7B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/P9L2IMJ-1tHeAR_9r6LNKgZxSHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:74:0c:ed:ec:71:3d:fa:3a:06:a5:3d:4f:71:38:36:78:d6:
43:b7:80:74:8e:42:95:eb:9e:9e:e5:a9:11:74:0e:9c:9c:49:
2f:50:c2:53:02:ab:4d:7e:c6:dd:68:26:af:14:1e:52:d4:0c:
cc:a6:f3:ec:f8:a7:a0:2d:d8:fb:7a:4c:6b:11:15:67:89:d1:
48:34:06:09:06:a4:bf:f1:e0:5e:18:fb:78:69:ca:be:51:c5:
0e:a6:c2:79:e1:be:2e:16:97:c0:14:a1:de:85:e1:98:7d:0f:
89:8b:fc:56:ca:61:3d:46:4a:4b:96:4b:96:de:cc:51:d8:38:
ef:17:70:07:70:a2:74:9c:c8:57:1d:52:34:66:30:6e:77:ad:
56:cc:eb:bb:21:8d:51:71:7b:d3:aa:a4:0e:f3:fe:1c:65:56:
e6:27:dc:e0:78:5b:59:14:76:c8:a1:33:4b:0c:8d:41:dc:3a:
b0:7e:2d:e7:e9:d2:c9:f7:b8:38:2d:d8:03:f6:7a:b7:84:27:
a8:f5:a8:1d:61:77:93:cb:8d:d0:2c:c1:5c:62:a0:f8:de:05:
b5:11:0f:d3:12:7e:f7:31:b2:78:36:82:2a:73:9b:97:df:49:
b5:61:3b:d5:bb:e0:30:b5:e8:0e:72:e8:7e:98:15:06:e4:49:
63:19:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-fra.rpki-client.org