Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/f14Ank8N2xld42KO8uQOUj4Rn1U.roa
File: f14Ank8N2xld42KO8uQOUj4Rn1U.roa (raw, json)
Hash identifier: N0WIhgRmX1TblEIH9yxgb3C2sZ3TiEqw5oLiGtq+iK4=
Subject key identifier: 7F:5E:00:9E:4F:0D:DB:19:5D:E3:62:8E:F2:E4:0E:52:3E:11:9F:55
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 050A11B4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/f14Ank8N2xld42KO8uQOUj4Rn1U.roa
Signing time: Tue 14 Jun 2022 23:47:44 +0000
ROA not before: Tue 14 Jun 2022 23:47:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 46.37.109.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84545972 (0x50a11b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 14 23:47:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f5e009e4f0ddb195de3628ef2e40e523e119f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:11:ce:20:9c:60:70:7c:34:64:63:bf:57:
50:d9:01:06:23:3c:e4:b1:fc:09:d1:9d:ea:77:9d:
d4:4c:18:57:d1:f0:41:5d:2e:fe:6d:58:ce:16:fd:
48:e8:c7:c1:8c:fc:e2:86:58:14:0a:a1:b6:3c:da:
24:b2:a3:f9:33:1b:26:e0:a4:b0:37:ed:26:74:d4:
0f:ef:37:be:f5:74:f8:ef:c4:16:7b:2d:0a:ac:af:
d4:b1:c1:77:6f:fb:79:c4:b9:e5:5e:55:2a:bc:4b:
d4:61:61:dc:1e:bd:42:8c:c3:45:10:85:b3:9b:0c:
b1:50:4d:5d:72:e5:28:d3:1b:5c:4c:1a:b3:e0:18:
0c:79:82:11:9c:47:d6:0c:a5:ad:2b:ca:2e:5f:2b:
ac:13:f8:7b:f7:30:e6:22:f8:ef:c2:cb:b2:89:33:
0d:f3:90:7c:c8:be:12:cf:7e:f3:42:5f:0c:a7:50:
44:f5:5d:23:97:a4:86:4c:c0:26:79:a8:13:49:43:
47:bc:56:32:9d:88:6b:df:f6:32:89:0c:ec:8f:97:
47:08:bc:07:ba:b4:b8:ed:76:39:c2:fc:28:d8:e5:
cd:38:b7:23:39:5e:25:0e:91:24:6a:2b:c6:20:39:
35:02:65:c9:20:79:03:02:c9:c3:55:77:9d:02:90:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5E:00:9E:4F:0D:DB:19:5D:E3:62:8E:F2:E4:0E:52:3E:11:9F:55
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/f14Ank8N2xld42KO8uQOUj4Rn1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.109.0/24
46.37.114.0/24
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c7:60:d7:c1:0a:cf:05:84:5d:2e:11:62:e9:c0:53:03:6b:
43:e2:c3:13:3c:32:e6:ab:af:1f:9d:47:67:1e:b6:7a:5a:a8:
3e:b0:dc:33:80:8c:74:08:bf:f3:02:de:74:54:7f:bc:c4:44:
1c:ba:ab:68:1e:72:1a:3e:b3:e8:e5:cc:d7:1a:1e:88:55:75:
e8:72:73:d8:55:5f:c4:8f:16:e7:a6:15:9d:ee:b9:28:fc:0e:
25:58:8d:03:99:f7:17:4f:d8:a3:ea:03:b0:5f:08:48:6f:ab:
8d:2b:6d:0c:1c:cf:5a:d5:c6:d9:26:b5:ac:e7:1d:f5:8a:5d:
af:76:39:c0:37:9e:bd:40:cb:b9:7e:f4:1e:a3:00:db:2f:70:
20:7b:28:38:bf:79:bc:a8:b4:0f:0e:7e:67:23:86:28:51:da:
d6:1b:79:9a:20:b8:58:94:d7:69:55:3c:4f:36:23:ef:38:ed:
c7:cd:ff:99:ce:6a:83:74:9e:48:cc:22:16:06:02:b5:c9:a0:
db:ea:8d:16:d7:28:33:ca:26:fe:a7:65:61:ff:05:cb:e4:3f:
46:c5:0c:98:ab:54:d1:eb:5a:d4:b7:a4:69:da:da:10:24:b0:
19:f8:ac:33:e5:64:77:08:c7:de:a3:1b:c9:5c:31:df:02:74:
98:84:91:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org