Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ipJ3jfY6EbPH1XcG1MJKdsmqD20.roa
File: ipJ3jfY6EbPH1XcG1MJKdsmqD20.roa (raw, json)
Hash identifier: Uy1I2DHIDS1i8h4zimmL7x6atGHrLTpF2JYuN3fDvxg=
Subject key identifier: 8A:92:77:8D:F6:3A:11:B3:C7:D5:77:06:D4:C2:4A:76:C9:AA:0F:6D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0184808B00D60E04978DD39D9E54513B22B4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ipJ3jfY6EbPH1XcG1MJKdsmqD20.roa
Signing time: Wed 16 Nov 2022 13:05:04 +0000
ROA not before: Wed 16 Nov 2022 13:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.108.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:8b:00:d6:0e:04:97:8d:d3:9d:9e:54:51:3b:22:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 16 13:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a92778df63a11b3c7d57706d4c24a76c9aa0f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:d1:4a:fb:cd:2d:e9:5b:64:b2:7c:c8:10:
e9:80:82:0b:8a:bd:63:bc:66:f5:79:6b:8e:c6:2b:
26:84:83:b6:8b:6f:b7:30:ea:de:27:ec:1f:82:57:
74:8b:3f:78:30:71:0a:b7:b1:85:87:89:54:55:38:
90:26:22:1c:7c:40:4f:80:ed:a3:a4:09:32:9a:16:
82:a6:03:88:39:bf:8a:27:27:ab:5e:60:09:e6:79:
a2:5f:88:97:93:4a:12:29:40:ce:22:ee:3f:7d:74:
31:7b:6b:95:1c:a3:79:7d:79:17:d9:59:07:7e:7c:
c6:e3:9f:df:43:28:1c:35:db:ee:e6:39:17:40:2e:
cf:5a:50:e4:99:c0:e5:e2:33:81:61:97:92:ca:47:
7d:f6:8c:fe:33:2a:09:eb:2b:a2:6a:f3:1e:65:ce:
50:be:9b:9e:e1:8d:b2:0b:90:22:15:60:e5:f2:77:
a3:f2:4b:b1:b4:cf:a4:f9:46:96:fd:6b:4f:98:f0:
1d:13:34:71:f4:8e:61:dc:bf:ab:3b:62:f4:db:45:
42:f7:1e:65:af:9c:33:6f:f2:a6:84:90:e9:85:87:
e6:49:25:44:aa:c2:38:5f:70:46:3c:fd:d8:c3:bc:
db:3f:e5:78:dc:12:52:05:54:31:27:d7:5c:58:34:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:92:77:8D:F6:3A:11:B3:C7:D5:77:06:D4:C2:4A:76:C9:AA:0F:6D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ipJ3jfY6EbPH1XcG1MJKdsmqD20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.101.0/24
46.37.108.0/24
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:82:2f:b6:c2:9f:c6:68:8b:e2:7f:63:7e:9f:9c:09:da:75:
59:e3:65:36:aa:90:23:f1:04:ec:26:88:95:9a:fc:11:d6:09:
ea:d6:7b:d6:d2:aa:d9:77:99:81:df:93:b2:33:09:60:78:c4:
9b:88:53:69:6b:7e:39:21:b6:01:02:22:fc:72:78:38:ed:cc:
bc:8b:59:84:fa:79:68:96:c8:7c:56:d2:53:65:27:29:bb:31:
36:62:d2:23:a4:59:c1:e5:47:99:8a:62:c2:55:9e:e8:12:af:
7c:e7:da:15:75:d2:8b:fd:fe:1e:a1:da:f2:9a:89:89:1f:84:
4e:74:3e:ce:2d:3a:39:30:41:7c:07:55:18:61:36:23:87:3d:
6a:7c:8f:71:7e:55:5d:17:a4:4a:8a:e0:64:42:a0:d1:e9:30:
30:fc:7d:39:ae:cb:59:dd:fb:63:ac:6a:26:62:44:50:1d:db:
9e:64:1d:0d:64:07:54:00:70:f4:87:56:1b:bf:60:62:cd:7d:
f9:cf:1e:b0:43:63:45:53:cd:da:5d:44:21:b9:46:a3:0b:2c:
23:ad:a4:e2:87:f2:c4:43:da:ab:d6:cb:8b:ff:6f:3a:98:f2:
37:d0:39:7b:c6:d6:99:22:7b:d1:64:44:65:e0:c3:ce:dc:9c:
3f:07:b1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org