Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fKnpE7ZNgmarvGzKLIl8JhJsHrs.roa
File: fKnpE7ZNgmarvGzKLIl8JhJsHrs.roa (raw, json)
Hash identifier: yaVBucUo1QjJmsjdWM04iv2CgX8l6FEiNjr/LrcZiiY=
Subject key identifier: 7C:A9:E9:13:B6:4D:82:66:AB:BC:6C:CA:2C:89:7C:26:12:6C:1E:BB
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0183B26C7C00D26BD13CED3A17E0967BDB55
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fKnpE7ZNgmarvGzKLIl8JhJsHrs.roa
Signing time: Fri 07 Oct 2022 12:29:57 +0000
ROA not before: Fri 07 Oct 2022 12:29:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 46.37.125.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:6c:7c:00:d2:6b:d1:3c:ed:3a:17:e0:96:7b:db:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 7 12:29:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ca9e913b64d8266abbc6cca2c897c26126c1ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:dd:ab:fc:42:29:95:2a:b1:5e:1b:7e:9a:
ac:18:ec:b0:86:dd:08:f9:3b:67:a5:6d:87:ee:bb:
d9:f0:1c:6f:c7:07:ea:3a:8d:b9:a4:93:ed:57:1b:
f7:c5:bb:86:0d:47:2e:0d:da:b6:d8:db:46:11:e1:
e0:14:7c:30:9a:48:79:a3:41:4e:e6:3a:ef:8c:d4:
23:e5:f0:30:ce:8a:90:b1:f1:9a:b4:cc:de:55:05:
7a:93:58:1c:3f:42:6d:a6:98:8f:19:7e:c0:9b:72:
e9:0e:0d:f7:99:f8:90:08:75:e2:b6:05:36:0d:36:
02:f6:6d:8e:0c:8e:55:43:c4:5d:e6:9f:b4:0e:a8:
56:2e:34:a9:37:f8:3f:c2:65:e0:ef:8b:21:2c:2f:
99:50:c8:26:32:c8:66:aa:da:9c:e5:99:d4:c8:c6:
2d:20:16:e8:39:39:ca:8b:c5:d2:c6:ab:33:8d:85:
18:b3:6e:c8:f6:be:92:12:1b:fa:28:d1:e5:b5:20:
4e:6f:c7:d5:9c:57:0e:6d:4b:58:1b:0c:8e:be:93:
29:3d:7c:47:30:72:aa:7c:37:2b:c1:4e:74:6e:11:
30:0d:59:c3:f0:96:5d:86:76:19:b1:1b:fe:4f:02:
71:30:00:b6:0c:93:55:68:be:f8:a4:69:12:50:51:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A9:E9:13:B6:4D:82:66:AB:BC:6C:CA:2C:89:7C:26:12:6C:1E:BB
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fKnpE7ZNgmarvGzKLIl8JhJsHrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.122.0/24
46.37.125.0-46.37.126.255
Signature Algorithm: sha256WithRSAEncryption
2f:45:ac:b2:53:0c:06:38:67:89:a4:10:45:8a:00:3a:a3:69:
f1:5e:62:2b:e2:41:aa:f8:8c:51:be:2a:0a:9e:90:44:54:15:
cb:b3:5e:f6:0f:fa:76:f2:50:06:94:12:9b:bc:b7:93:d2:12:
f4:3b:72:d9:96:8f:48:b8:dc:7a:b5:b9:d3:e8:de:e1:56:d3:
0c:60:7a:7c:14:e8:dc:9d:cd:4f:70:4f:10:17:37:86:b2:61:
c8:19:ae:98:30:f3:ff:e0:0b:fb:3c:29:26:e7:0f:e1:48:ac:
bc:94:bc:19:67:5c:ad:e7:39:a6:da:15:ea:88:8c:99:1c:22:
74:5f:7b:da:3d:d7:ef:d8:c1:24:8d:49:b3:93:31:9f:d9:d3:
52:52:01:35:00:30:6b:cc:4b:bc:0b:df:af:d7:9d:77:7b:26:
c6:c5:30:d5:93:30:9b:b3:fc:a6:ad:db:2f:5f:0e:36:e0:2f:
24:cd:0a:aa:c2:bf:b9:c8:02:9d:bf:83:76:2b:49:00:e8:5e:
cb:02:7b:ec:98:42:4e:e1:32:c9:50:69:d7:0e:80:c1:b7:a0:
d3:54:1f:00:5d:15:6e:7d:fc:cb:6f:fb:71:94:ec:01:ba:77:
ac:ca:c7:88:48:ba:b7:7f:24:ab:9a:7d:7b:3b:a1:eb:15:81:
47:15:4a:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org