Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d9AtferhnK76h_c5rsIUwrD7tZQ.roa
File: d9AtferhnK76h_c5rsIUwrD7tZQ.roa (raw, json)
Hash identifier: 4m3MwBULW2K6KogwGYRKSU1JuqxK6Bkts5ybGBNrN5g=
Subject key identifier: 77:D0:2D:7D:EA:E1:9C:AE:FA:87:F7:39:AE:C2:14:C2:B0:FB:B5:94
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03D942C3
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d9AtferhnK76h_c5rsIUwrD7tZQ.roa
Signing time: Tue 22 Feb 2022 09:10:53 +0000
ROA not before: Tue 22 Feb 2022 09:10:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 46.37.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64570051 (0x3d942c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 22 09:10:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77d02d7deae19caefa87f739aec214c2b0fbb594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:ae:3a:67:7c:9a:e5:72:3c:01:9b:2e:54:
94:7d:75:b5:72:1a:46:4f:12:5e:67:03:44:5a:79:
2a:a3:85:a5:d8:56:b4:4f:01:0f:9e:2f:f1:12:d8:
8f:af:cf:80:72:09:83:30:33:7f:44:b4:65:d6:d0:
40:b7:1a:8a:9d:db:51:67:78:c8:1e:3c:62:11:71:
65:3c:3c:87:08:ed:65:0b:6b:11:17:60:98:f0:39:
3b:77:7a:00:29:a3:22:05:e7:b4:f1:96:1f:5b:dc:
6b:71:78:84:89:95:78:08:3f:4b:c0:9f:bc:41:a3:
a8:9d:08:5e:ff:0f:f5:98:53:58:72:b3:e6:f8:64:
7d:1c:9f:89:5b:62:78:50:5d:f3:3a:6a:c6:08:75:
48:03:57:26:cd:3d:21:4e:cb:c0:e6:63:ca:a2:bd:
ce:8c:cc:70:16:08:b5:13:00:aa:32:9e:11:e6:db:
b8:81:31:ae:ae:1d:5c:b6:e1:cc:ce:57:13:d4:2d:
8e:d3:8a:a8:07:07:f9:7b:1d:23:40:55:ec:b4:e2:
a9:cd:b3:62:0e:ba:ff:2b:40:e9:25:b9:d7:c6:f3:
da:83:bf:b9:8a:e1:f4:4b:b5:e6:05:55:6b:1a:eb:
4e:42:1d:65:64:f0:11:e5:e8:f2:d4:84:51:e9:36:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D0:2D:7D:EA:E1:9C:AE:FA:87:F7:39:AE:C2:14:C2:B0:FB:B5:94
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/d9AtferhnK76h_c5rsIUwrD7tZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.114.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f9:96:68:0e:a8:63:29:da:d4:55:1f:b9:ea:6e:ad:fd:d2:
97:01:ff:d7:52:f1:cd:12:55:13:81:36:c0:23:81:ce:00:c8:
81:fb:1e:7b:84:a9:01:b1:df:0f:e8:2b:93:36:65:98:fc:1a:
9c:3f:67:69:cf:5f:58:15:01:3c:91:79:6a:64:0d:ef:12:4c:
9e:b9:bb:ec:e9:90:e8:45:90:f7:0c:66:67:1d:c9:7f:0e:c7:
81:2b:c0:2d:ab:35:88:20:6b:29:3e:91:4b:41:1b:6f:ec:15:
82:2d:4b:79:df:84:21:38:1a:cc:96:c3:8c:22:44:c7:9a:ab:
c5:9e:fe:81:3f:b5:5d:68:4d:ed:5c:a2:dc:0f:44:0c:2d:d5:
76:bf:0a:02:98:92:d3:22:95:6d:af:e3:b5:1a:7d:ce:d1:e4:
7b:8b:1d:7d:6e:fb:24:f3:96:a5:aa:ce:2b:44:2a:5a:60:7c:
b5:fd:f7:91:55:6a:db:5e:19:85:d4:26:9d:93:f2:53:45:78:
df:76:87:36:d9:c2:d5:ce:39:c6:e1:3b:96:63:a1:c1:73:59:
96:fa:32:66:fa:b8:44:b2:10:d8:58:54:c4:5e:90:e9:d1:06:
c3:ba:ab:cc:f5:49:00:24:f9:3c:39:fd:f4:28:49:88:ea:80:
a2:03:be:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org