Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WtBELzZnSiZiWL3BcfF8vxnKfU8.roa
File: WtBELzZnSiZiWL3BcfF8vxnKfU8.roa (raw, json)
Hash identifier: +hOITlLf8r5Q8/gEuT3VjcePvxHEqKHTRY8htWKBe/s=
Subject key identifier: 5A:D0:44:2F:36:67:4A:26:62:58:BD:C1:71:F1:7C:BF:19:CA:7D:4F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0183842A0082A744F295E8B1D08B5D012452
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WtBELzZnSiZiWL3BcfF8vxnKfU8.roa
Signing time: Wed 28 Sep 2022 12:54:48 +0000
ROA not before: Wed 28 Sep 2022 12:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210574
IP address blocks: 46.37.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:84:2a:00:82:a7:44:f2:95:e8:b1:d0:8b:5d:01:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 28 12:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ad0442f36674a266258bdc171f17cbf19ca7d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:de:c4:ac:f7:2a:8f:cf:b5:b3:38:53:5f:
88:29:2f:47:9a:ba:53:24:52:0a:7c:9c:c6:e4:0a:
79:b7:6d:3c:d2:f7:f3:1a:c0:93:fc:03:52:ff:3d:
3d:26:31:00:06:c9:b8:76:d0:b2:6b:01:a6:a9:b5:
7a:49:4e:47:8c:39:3c:68:ba:75:ef:4b:3f:05:d2:
73:0d:98:02:64:ac:d3:d9:54:ca:9e:d4:12:46:c2:
db:8b:3a:67:63:3a:7c:a9:f3:7c:04:97:77:64:9d:
b9:60:de:90:de:5f:1c:d1:5f:b2:a0:91:4c:75:fe:
f3:99:47:c0:bb:83:38:44:81:30:9a:0c:32:49:b0:
d8:68:56:cf:e2:99:9f:6a:05:78:c4:6a:53:81:ea:
de:bf:40:f0:24:6f:3e:b6:f1:00:27:28:b8:0d:64:
91:99:42:38:df:28:59:1f:8f:41:5f:4d:ea:81:74:
7e:73:01:ab:be:6a:3b:8e:93:bc:24:2c:34:9b:e4:
ec:ee:bb:14:af:cf:7d:0e:5c:77:72:ed:f8:2e:91:
b0:e9:9a:60:89:6e:01:ad:6d:01:78:f4:b1:30:11:
0b:1d:68:b7:9b:ff:4d:f5:b5:da:77:0c:a0:0f:76:
4b:16:00:79:41:3a:86:6b:7c:44:4a:2f:af:9d:01:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D0:44:2F:36:67:4A:26:62:58:BD:C1:71:F1:7C:BF:19:CA:7D:4F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WtBELzZnSiZiWL3BcfF8vxnKfU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9f:77:fb:19:66:55:05:66:17:91:e7:5c:b9:66:0b:5b:34:
c9:73:98:2e:e8:da:9d:6d:93:33:0d:d9:d5:86:02:76:32:28:
87:d3:8c:fc:53:ff:2c:69:94:94:2c:6a:5e:bd:1e:b8:f5:3d:
db:36:2f:a8:ac:fb:8c:dc:5f:ed:6c:ba:03:d4:d2:36:5c:a9:
5c:38:30:3b:7c:49:77:ee:6e:ac:10:3a:d2:9d:d7:8a:b5:57:
31:70:e0:ea:c5:c6:f4:f0:67:09:99:c6:32:53:21:3b:95:1a:
e2:8a:47:85:1d:f2:aa:4e:44:45:82:11:42:98:23:11:b6:39:
02:6c:b6:b5:3c:b0:06:a4:c9:e7:3c:51:60:eb:88:97:8a:1c:
ae:58:9d:aa:ba:0a:00:6c:e7:99:3a:93:79:e0:79:cb:a2:ab:
df:88:c3:d1:39:19:c0:ae:47:f5:d8:fd:4c:1b:f0:c4:e8:ba:
44:bf:36:a2:05:ab:76:80:f8:1f:96:6e:e5:a6:6e:53:ad:74:
36:1d:38:8b:05:0b:ba:af:9a:45:32:a9:0f:15:c4:75:8b:6a:
72:3c:9f:79:0c:e4:57:a9:a9:2d:b0:75:ea:2e:79:55:24:34:
63:34:02:24:20:f5:12:5c:90:78:90:3e:ec:0f:50:ba:0a:f6:
6f:41:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org