Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QFtUQIcA5mhyhdQ-47NArr6s2L0.roa
File: QFtUQIcA5mhyhdQ-47NArr6s2L0.roa (raw, json)
Hash identifier: yMElyAPiO+kclAzPS30GOFCxm7MlKVYtU6Ot5x+twD0=
Subject key identifier: 40:5B:54:40:87:00:E6:68:72:85:D4:3E:E3:B3:40:AE:BE:AC:D8:BD
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 04612BCF
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QFtUQIcA5mhyhdQ-47NArr6s2L0.roa
Signing time: Thu 07 Apr 2022 22:08:13 +0000
ROA not before: Thu 07 Apr 2022 22:08:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73477071 (0x4612bcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 7 22:08:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=405b54408700e6687285d43ee3b340aebeacd8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:85:ed:03:53:66:96:02:67:2f:b9:0e:1b:
23:f2:6e:c3:e5:c5:80:b6:af:46:96:e0:80:24:35:
41:ed:ed:d5:5a:be:f0:fa:3e:33:ed:79:ce:1b:f7:
60:d4:7d:6c:01:fc:f1:de:d6:0d:a8:44:2b:51:54:
80:6a:13:d1:5e:53:29:34:ab:1e:6a:72:84:7d:e7:
ab:69:83:31:30:a3:12:43:f3:46:cb:6a:37:53:7c:
b3:a4:22:6c:dd:1e:cb:38:30:4c:c0:23:e0:f2:ca:
33:e5:50:56:a9:b9:4d:a4:3a:a3:aa:ef:fc:74:14:
9e:35:a8:5f:d1:40:5e:1f:7c:e3:ae:50:28:b9:e3:
69:bc:10:61:34:e0:fc:42:16:5f:b2:8d:45:ed:9f:
fe:3c:bb:f9:8f:28:9d:3d:ee:7c:1f:a9:de:2a:06:
04:29:6f:72:36:f6:ce:11:ca:cf:73:15:c1:94:36:
5e:72:99:ef:b8:c3:10:2f:3b:6a:ac:e9:13:09:b5:
35:95:0d:96:da:bb:af:61:56:ed:62:59:52:78:a8:
f9:22:ee:b2:e6:05:5a:4b:93:be:0e:7f:a4:f3:f3:
3f:cf:14:ef:83:80:ac:01:3a:c8:5a:49:d9:a3:7d:
4b:e4:69:40:ec:94:e5:e2:ca:40:1b:c9:04:7f:d4:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:54:40:87:00:E6:68:72:85:D4:3E:E3:B3:40:AE:BE:AC:D8:BD
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QFtUQIcA5mhyhdQ-47NArr6s2L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b7:c1:96:f4:4c:e1:13:bb:86:cd:48:9a:9a:e3:58:dc:dd:
5d:10:f5:11:54:6a:32:52:64:37:8a:43:6e:fe:10:28:ba:d7:
8e:f7:50:9f:d7:1b:39:43:60:2a:76:b6:f7:67:ba:ac:10:0f:
a0:d7:a7:34:c5:5a:b8:a3:7b:9d:cc:c7:e7:dd:96:d5:8c:ef:
98:1d:2f:73:fd:be:16:78:d1:87:40:f8:20:61:6f:15:f0:f6:
50:4d:a0:9a:0f:9e:04:f5:b3:00:29:86:bf:c2:50:40:7f:64:
6f:b5:aa:72:f7:2e:c9:9f:f5:7c:6b:a1:d1:ef:24:a5:e3:a5:
93:9d:7b:ba:bd:66:dc:5e:0b:1d:0a:05:e3:58:2d:4b:58:ac:
27:dc:24:8b:61:68:86:c6:49:b1:cd:10:f7:90:5e:0e:dd:aa:
2e:42:44:0d:02:14:11:ba:dc:0b:f0:d4:9d:f2:ee:0a:1c:ef:
28:86:b7:e6:8f:f0:7c:63:d3:91:27:52:43:9f:8c:a0:03:44:
32:53:7c:75:99:5e:a2:c1:32:7c:f7:a4:c0:10:8b:1b:ce:2e:
f1:fc:7b:37:fa:40:cf:7e:0e:e5:da:94:37:67:00:32:9c:9c:
50:70:67:ee:a5:e5:9b:c8:2e:b0:95:4a:6b:5e:d3:e5:6c:de:
b3:f3:a6:55
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBGErzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2NmMDg4NDkxOGE1MDIzOWVmNzA1MThlZTlmYzA0ZjFhYWUxOTI5MB4XDTIyMDQw
NzIyMDgxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDA1YjU0NDA4NzAw
ZTY2ODcyODVkNDNlZTNiMzQwYWViZWFjZDhiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALTohe0DU2aWAmcvuQ4bI/Juw+XFgLavRpbggCQ1Qe3t1Vq+
8Po+M+15zhv3YNR9bAH88d7WDahEK1FUgGoT0V5TKTSrHmpyhH3nq2mDMTCjEkPz
RstqN1N8s6QibN0eyzgwTMAj4PLKM+VQVqm5TaQ6o6rv/HQUnjWoX9FAXh98465Q
KLnjabwQYTTg/EIWX7KNRe2f/jy7+Y8onT3ufB+p3ioGBClvcjb2zhHKz3MVwZQ2
XnKZ77jDEC87aqzpEwm1NZUNltq7r2FW7WJZUnio+SLusuYFWkuTvg5/pPPzP88U
74OArAE6yFpJ2aN9S+RpQOyU5eLKQBvJBH/UhqMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRAW1RAhwDmaHKF1D7js0CuvqzYvTAfBgNVHSMEGDAWgBTTzwiEkYpQI573
BRjun8BPGq4ZKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8x
L1FGdFVRSWNBNW1oeWhkUS00N05BcnI2czJMMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
Y2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8xLzA4OEloSkdLVUNP
ZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC4lYgMEAC4lbzANBgkqhkiG9w0B
AQsFAAOCAQEAf7fBlvRM4RO7hs1ImprjWNzdXRD1EVRqMlJkN4pDbv4QKLrXjvdQ
n9cbOUNgKna292e6rBAPoNenNMVauKN7nczH592W1YzvmB0vc/2+FnjRh0D4IGFv
FfD2UE2gmg+eBPWzACmGv8JQQH9kb7WqcvcuyZ/1fGuh0e8kpeOlk517ur1m3F4L
HQoF41gtS1isJ9wki2FohsZJsc0Q95BeDt2qLkJEDQIUEbrcC/DUnfLuChzvKIa3
5o/wfGPTkSdSQ5+MoANEMlN8dZleosEyfPekwBCLG84u8fx7N/pAz34O5dqUN2cA
MpycUHBn7qXlm8gusJVKa17T5Wzes/OmVQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-fra.rpki-client.org