Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Rz7jtRgbRQzma2wm8PMKS4CXOwU.roa
File: Rz7jtRgbRQzma2wm8PMKS4CXOwU.roa (raw, json)
Hash identifier: jGRniopz/eOuXF93SJvfnqeGetVFSditahWVDJaEDyI=
Subject key identifier: 47:3E:E3:B5:18:1B:45:0C:E6:6B:6C:26:F0:F3:0A:4B:80:97:3B:05
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0184E34AEB865DE6C043968F6E9AC2FD9973
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Rz7jtRgbRQzma2wm8PMKS4CXOwU.roa
Signing time: Mon 05 Dec 2022 17:17:28 +0000
ROA not before: Mon 05 Dec 2022 17:17:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 46.37.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:4a:eb:86:5d:e6:c0:43:96:8f:6e:9a:c2:fd:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 5 17:17:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=473ee3b5181b450ce66b6c26f0f30a4b80973b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:c6:f1:0e:32:c2:60:d6:68:18:85:4b:6a:
93:e2:4c:83:97:59:88:4f:2d:09:6e:e6:26:57:2f:
62:60:5f:07:4b:dc:64:47:cc:d6:10:31:0d:3c:d1:
9a:b6:eb:ad:ac:04:d6:33:6b:cb:63:99:68:85:27:
c7:2f:89:15:c1:fb:fb:cd:8d:81:b9:bf:5b:56:7f:
d3:68:df:b8:bd:41:28:1f:b2:e1:03:4d:2a:9c:c2:
bf:3b:6c:ff:a9:67:d9:fb:3f:9f:a3:68:d8:00:fb:
12:f7:59:fb:6a:20:aa:4b:a3:53:7f:18:61:59:ce:
73:27:ec:fb:37:e4:1f:a2:6c:61:d7:96:5e:3c:a4:
60:5c:db:c8:84:6c:47:40:1f:50:fd:83:1e:a0:33:
ca:f3:bb:fe:75:1a:33:f6:04:cc:0d:94:83:75:47:
fa:4b:1f:5e:2f:69:6d:a4:35:6a:47:e6:7d:38:2b:
fb:90:f4:7e:87:15:05:15:7b:b3:3b:a6:9c:92:bb:
3d:31:e5:74:09:c5:a4:05:fe:27:4e:79:53:7f:7d:
ec:07:61:34:9f:ea:27:13:59:c7:22:10:34:ae:9e:
47:93:6f:9e:e8:ca:3c:2a:a2:4f:a9:74:7f:32:b0:
50:52:f8:56:76:33:62:e0:2f:07:cf:1c:1c:c3:67:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3E:E3:B5:18:1B:45:0C:E6:6B:6C:26:F0:F3:0A:4B:80:97:3B:05
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Rz7jtRgbRQzma2wm8PMKS4CXOwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.126.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cf:d4:12:33:1a:41:44:2e:1c:69:37:2c:27:1b:db:4b:c0:
1f:2c:59:f6:d5:3f:2f:bd:2b:13:f6:56:56:f8:2c:5d:15:0a:
15:fd:ea:1f:98:8f:95:a0:e4:b2:c1:06:f5:3d:ef:02:e6:99:
4d:69:64:1e:c6:af:23:8c:71:5f:e7:65:fa:08:b6:20:21:b9:
3b:68:23:2f:15:fc:63:b3:41:38:ad:a4:00:8d:99:e9:52:eb:
4a:32:c4:e1:63:d1:76:bc:a8:c9:ed:7a:1b:a9:df:b5:96:05:
b3:b7:97:d7:de:e6:1b:08:e9:5b:c7:07:bc:6a:7c:d6:9f:0a:
2a:d1:28:05:1c:fb:12:6a:d8:58:de:c1:f6:34:3c:6f:a9:13:
1c:03:76:d1:a7:5e:d7:ff:e9:d9:03:64:90:a3:d2:0f:e1:10:
70:ed:51:14:e8:64:5d:76:db:78:bb:6e:f1:5d:ff:89:9b:a8:
b4:15:25:69:80:e4:69:98:b6:be:13:e6:71:78:51:9b:99:68:
ae:65:4b:a6:f2:32:55:5f:71:e2:58:91:26:de:1e:f6:34:07:
f5:4f:d0:ba:16:22:6f:e7:5d:ee:e7:0c:4f:19:f3:d6:0a:ae:
b1:ad:af:02:ee:23:0d:06:1d:e4:b7:cc:1e:cc:22:0f:6d:e7:
77:ee:0f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org