Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gGofXeuBFUOQl5V1jOAUAXKdcqg.roa
File: gGofXeuBFUOQl5V1jOAUAXKdcqg.roa (raw, json)
Hash identifier: 3f72uRGazSsvCmwuRf0eXEmgCRBMPIgrT76jdDlnqKo=
Subject key identifier: 80:6A:1F:5D:EB:81:15:43:90:97:95:75:8C:E0:14:01:72:9D:72:A8
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 04F89221
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gGofXeuBFUOQl5V1jOAUAXKdcqg.roa
Signing time: Thu 09 Jun 2022 22:25:02 +0000
ROA not before: Thu 09 Jun 2022 22:25:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 46.37.110.0/24 maxlen: 24
185.92.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83399201 (0x4f89221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 9 22:25:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=806a1f5deb811543909795758ce01401729d72a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:46:02:9d:fd:58:e1:43:ad:06:9e:8e:3f:
5a:80:be:64:da:60:c8:66:07:ad:cf:fd:b6:b3:a1:
33:01:94:3e:27:ec:f5:25:db:c1:eb:4b:42:00:fe:
6e:d2:e5:f0:7d:22:73:45:cc:fc:20:b6:e2:e5:6c:
9e:97:0e:c3:a1:d8:21:5b:91:1c:51:ec:f7:79:78:
97:14:ae:47:98:ed:fc:81:de:e3:84:68:cf:2a:68:
bb:96:d6:86:46:7b:5a:3e:2e:fd:7b:bb:04:52:f7:
aa:58:69:e4:12:91:a7:ec:53:dd:00:03:78:3d:ee:
e4:53:0b:f3:8e:3b:a7:bb:0b:55:ee:53:d9:b2:ce:
4d:43:a5:c1:09:09:62:18:09:44:9a:fd:8d:b8:99:
67:0f:3d:7e:d6:12:3e:bf:b1:da:95:d5:b6:e7:a3:
aa:ff:98:d0:6b:71:4b:92:d1:b4:12:aa:b3:b6:a2:
c9:30:75:6a:e9:c9:2d:d4:34:88:7b:4b:e4:29:66:
b0:3c:1e:eb:d3:52:59:34:6e:a3:4f:bb:30:34:04:
26:d5:5d:0b:d0:65:ac:d3:32:ad:b1:12:0c:56:ee:
1a:09:e5:ba:c7:e0:92:17:be:b2:70:44:53:76:aa:
73:0a:11:1d:6d:50:06:9f:a9:bf:b3:77:87:9c:d5:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:1F:5D:EB:81:15:43:90:97:95:75:8C:E0:14:01:72:9D:72:A8
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/gGofXeuBFUOQl5V1jOAUAXKdcqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.110.0/24
185.92.45.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c3:8c:e0:ee:ad:4f:ef:83:a5:61:eb:4a:6e:65:4b:67:f5:
b0:1e:aa:46:aa:1c:9e:16:90:4a:cf:98:31:4e:32:2c:70:7d:
65:c1:ee:16:75:5f:00:17:6c:95:09:ef:c4:d7:3a:80:2e:42:
eb:91:23:d0:63:fc:1c:30:04:e0:77:b3:cf:7a:f7:41:70:5e:
1c:90:24:56:7e:f5:ec:1a:58:8c:20:c4:79:e7:1d:da:11:63:
61:b5:69:3a:89:3e:c6:eb:7a:f5:4c:54:38:c7:55:2c:5e:9d:
1a:45:4c:3a:5d:f6:44:aa:cc:1b:77:81:98:03:53:2e:b2:f7:
f9:7d:27:06:a4:53:57:ae:e9:54:d0:a5:76:26:3d:21:9c:0a:
70:58:7a:8a:ea:cc:88:14:d0:b1:86:ed:2a:90:ee:02:2b:03:
7b:50:f6:85:8f:fb:b4:41:95:74:53:59:bf:91:60:67:46:4c:
36:f2:d9:7c:79:ed:9a:92:88:1b:c4:b8:90:0c:8f:d5:8b:13:
36:9c:d8:5b:42:84:6f:47:cf:ef:53:c0:55:a2:e8:dc:03:c5:
7d:ea:f4:80:b9:8a:62:50:7c:2e:ee:3c:86:2c:2b:f8:b3:de:
45:9f:37:c1:e8:2e:46:c7:e9:89:6e:c5:68:c5:ed:01:50:be:
e9:b8:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org