Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/a-j1DUORwz8pQhTCPcIzV1E5ad0.roa
File: a-j1DUORwz8pQhTCPcIzV1E5ad0.roa (raw, json)
Hash identifier: ILyjoJzNViBlWFeRZWJhFssfKVeWD7GCE9OXiloNKRY=
Subject key identifier: 6B:E8:F5:0D:43:91:C3:3F:29:42:14:C2:3D:C2:33:57:51:39:69:DD
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0182174F2A48009F2E4CD0455CF08B541528
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/a-j1DUORwz8pQhTCPcIzV1E5ad0.roa
Signing time: Tue 19 Jul 2022 16:34:00 +0000
ROA not before: Tue 19 Jul 2022 16:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197890
IP address blocks: 46.37.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:4f:2a:48:00:9f:2e:4c:d0:45:5c:f0:8b:54:15:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 19 16:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6be8f50d4391c33f294214c23dc23357513969dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:af:50:5a:dc:b4:2c:63:98:ba:27:60:20:
05:5e:64:33:4d:0f:0c:63:67:8a:8c:9c:ec:6d:e6:
03:24:29:86:21:bc:7d:2a:87:82:8c:d3:1c:6a:5f:
80:95:28:b9:ed:72:d8:d3:eb:f4:39:07:83:6d:42:
99:ee:14:c6:09:27:95:41:3e:72:1f:bd:e7:7a:e8:
0b:9e:78:87:5a:b0:92:56:e6:98:ee:f4:23:b2:b5:
cd:b1:e7:4b:fc:e3:64:7d:63:d7:50:54:91:74:c9:
ec:b9:74:e0:98:67:53:07:82:e4:11:63:24:d0:06:
5b:6e:4e:2a:c5:0b:68:45:ad:a7:e8:92:1d:7f:dd:
dc:6b:92:8e:36:c9:93:04:64:c1:03:a4:24:b5:0d:
eb:81:bf:f1:ab:ec:0b:e3:58:1f:82:01:19:a8:73:
3c:1e:3a:f3:38:b1:87:2b:27:1a:60:c9:a1:6f:cb:
65:ea:b8:f3:18:46:d9:d5:b8:dd:8c:fd:11:a1:cb:
d2:d1:07:c0:1a:6b:20:5e:7c:da:74:74:82:4c:05:
ca:71:04:b7:ab:77:73:39:59:20:1a:69:92:f1:b0:
a9:10:9c:c9:81:df:b6:c4:c6:ad:46:bf:aa:a0:6d:
a9:f4:9f:a7:74:15:ab:cf:67:15:3c:92:95:2e:f6:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E8:F5:0D:43:91:C3:3F:29:42:14:C2:3D:C2:33:57:51:39:69:DD
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/a-j1DUORwz8pQhTCPcIzV1E5ad0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:be:78:a3:f0:20:8f:2d:f0:1b:cd:74:2b:e3:53:a7:6c:a1:
84:46:d7:ce:ac:71:84:bd:2f:aa:f4:fb:43:c4:2e:c9:96:e1:
c8:b8:7c:33:10:c1:b5:e7:05:d1:4b:3c:04:99:8c:f5:75:f9:
d6:1d:65:8a:56:4a:a2:f3:e1:4a:cb:f8:ec:cc:e6:ce:8e:d6:
2a:b7:f3:e5:f4:c6:e8:7a:2f:ae:38:51:39:ce:d6:2b:ab:ba:
95:51:8b:ce:b0:ac:92:b0:21:95:be:64:91:5a:76:41:38:08:
75:e8:18:7d:f7:d2:b6:bb:40:e7:f1:6b:60:21:f0:60:2e:bd:
27:59:1e:df:42:2e:b9:a1:b3:4e:69:19:7e:73:07:bb:04:0c:
c7:fc:92:dd:50:24:fd:0a:37:6e:73:80:89:57:e7:b3:93:d9:
0f:7a:54:e1:be:52:9d:0c:8c:7b:19:c3:43:55:f8:c4:88:20:
09:02:c7:4a:f0:01:47:90:ca:78:92:4a:6c:83:83:99:26:0b:
3e:fa:02:be:5e:df:4f:b5:e8:d6:ca:3d:e1:48:d7:78:3e:87:
df:43:03:a3:5a:67:44:80:fc:d6:7f:83:08:75:9b:50:46:b6:
d3:3c:1b:5f:87:e7:48:4c:dd:3e:54:f3:5e:49:6f:d3:99:14:
03:f4:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org