Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/RUyMlB_dH5Ywgv0VMSiu_r9io90.roa
File: RUyMlB_dH5Ywgv0VMSiu_r9io90.roa (raw, json)
Hash identifier: 3JklTxqzt0EAUgzzyPkQkBC/SFkpiX1auTQDDIHZXNM=
Subject key identifier: 45:4C:8C:94:1F:DD:1F:96:30:82:FD:15:31:28:AE:FE:BF:62:A3:DD
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0184EE243863F0EBE22C18863C2CB84D08EE
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/RUyMlB_dH5Ywgv0VMSiu_r9io90.roa
Signing time: Wed 07 Dec 2022 19:51:01 +0000
ROA not before: Wed 07 Dec 2022 19:51:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.104.0/24 maxlen: 24
46.37.110.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:24:38:63:f0:eb:e2:2c:18:86:3c:2c:b8:4d:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 7 19:51:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=454c8c941fdd1f963082fd153128aefebf62a3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:20:3e:6d:dc:a1:1c:33:68:2f:d7:03:21:
9b:5d:2d:f0:f5:91:d1:91:2b:e5:84:f0:5d:8d:3b:
2b:f7:a5:8c:47:85:9f:57:4b:0d:76:fb:f4:41:92:
d6:1f:f1:9b:df:15:36:77:34:fa:7c:b5:44:55:12:
a8:a5:30:65:b1:c4:f9:15:76:ef:4e:89:cf:f0:f5:
0d:70:24:8c:b2:2f:d9:98:6e:e3:2c:93:09:68:50:
11:11:78:66:c0:7f:0c:b9:85:8c:71:58:27:1f:f1:
0e:87:8b:c5:d8:0e:4d:30:7a:ff:ec:01:cc:77:d2:
d9:ed:28:b2:b0:56:26:d3:1f:c8:3c:82:19:3d:6b:
f2:4d:62:d1:0d:60:4f:be:f6:f8:cb:d9:ca:8c:ad:
e2:0c:d0:dd:9e:7a:fd:05:c5:ee:31:33:ec:fa:37:
c3:4d:8c:cd:c9:60:1c:3d:be:7c:73:20:dc:65:7d:
2c:56:6a:c9:53:84:f6:be:30:c0:84:19:29:4d:c2:
10:47:fd:3e:c8:dd:25:f0:6b:dc:17:c4:74:70:56:
e2:9d:a9:33:e2:97:3c:99:a0:1e:9b:4d:0c:34:3e:
77:2d:1f:65:df:0b:5c:09:3f:1f:60:62:08:02:58:
d4:0f:3e:cc:ed:28:1b:20:02:85:a4:d4:4b:82:11:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4C:8C:94:1F:DD:1F:96:30:82:FD:15:31:28:AE:FE:BF:62:A3:DD
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/RUyMlB_dH5Ywgv0VMSiu_r9io90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.100.0/24
46.37.102.0/24
46.37.104.0-46.37.106.255
46.37.110.0/24
46.37.119.0/24
46.37.126.0/24
185.92.44.0/24
185.92.46.0/23
Signature Algorithm: sha256WithRSAEncryption
17:7e:39:4f:4a:38:1b:88:9c:43:b1:8b:dc:f2:73:f8:8a:17:
0c:e8:ff:bb:fc:1a:45:01:3d:e8:f8:32:1c:50:8b:e5:a5:92:
93:1b:c6:f7:d2:f8:f8:d9:19:8b:23:8d:f4:54:3a:16:5d:a5:
da:62:73:cd:59:44:e4:4d:6d:a1:47:0e:b0:46:c7:85:36:9f:
12:69:57:5c:73:8b:18:4f:52:7f:6d:41:9e:0e:78:4c:e0:47:
69:92:7f:99:83:bf:00:84:74:d6:15:ef:2e:ca:8b:41:c8:ff:
63:79:ba:99:eb:6d:e0:61:0e:10:06:c4:23:b6:4d:ef:4a:2b:
37:51:1b:29:bf:be:47:b4:21:33:bf:83:68:3a:a0:0f:03:9c:
97:64:0c:ee:01:03:ff:b4:cb:e2:34:7d:d7:7c:04:07:da:e1:
16:43:6c:fb:dd:b9:97:71:f4:36:30:0c:05:d3:4c:53:83:8c:
21:4a:5f:82:30:f0:40:de:82:1a:cd:33:19:bf:1a:fe:bf:68:
c9:f9:ae:8a:64:94:82:ee:49:b3:b2:1e:fb:69:9b:5e:3b:69:
81:2e:e8:62:b3:e4:a5:5f:dd:09:0d:60:14:91:08:93:ff:b9:
52:8d:33:f6:2c:81:8b:55:32:2c:37:38:53:ba:15:f3:81:d5:
26:a2:d6:54
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYTuJDhj8OviLBiGPCy4TQjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjIxMjA3MTk1MTAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTRjOGM5NDFmZGQxZjk2MzA4MmZkMTUzMTI4YWVmZWJmNjJhM2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYcgPm3coRwzaC/XAyGbXS3w9ZHR
kSvlhPBdjTsr96WMR4WfV0sNdvv0QZLWH/Gb3xU2dzT6fLVEVRKopTBlscT5FXbv
TonP8PUNcCSMsi/ZmG7jLJMJaFAREXhmwH8MuYWMcVgnH/EOh4vF2A5NMHr/7AHM
d9LZ7SiysFYm0x/IPIIZPWvyTWLRDWBPvvb4y9nKjK3iDNDdnnr9BcXuMTPs+jfD
TYzNyWAcPb58cyDcZX0sVmrJU4T2vjDAhBkpTcIQR/0+yN0l8GvcF8R0cFbinakz
4pc8maAem00MND53LR9l3wtcCT8fYGIIAljUDz7M7SgbIAKFpNRLghFA8QIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFEVMjJQf3R+WMIL9FTEorv6/YqPdMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvUlV5TWxCX2RINVl3Z3YwVk1TaXVfcjlpbzkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQALiVkAwQA
LiVmMAwDBAMuJWgDBAAuJWoDBAAuJW4DBAAuJXcDBAAuJX4DBAC5XCwDBAG5XC4w
DQYJKoZIhvcNAQELBQADggEBABd+OU9KOBuInEOxi9zyc/iKFwzo/7v8GkUBPej4
MhxQi+WlkpMbxvfS+PjZGYsjjfRUOhZdpdpic81ZRORNbaFHDrBGx4U2nxJpV1xz
ixhPUn9tQZ4OeEzgR2mSf5mDvwCEdNYV7y7Ki0HI/2N5upnrbeBhDhAGxCO2Te9K
KzdRGym/vke0ITO/g2g6oA8DnJdkDO4BA/+0y+I0fdd8BAfa4RZDbPvduZdx9DYw
DAXTTFODjCFKX4Iw8EDeghrNMxm/Gv6/aMn5ropklILuSbOyHvtpm147aYEu6GKz
5KVf3QkNYBSRCJP/uVKNM/YsgYtVMiw3OFO6FfOB1Sai1lQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org