Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kQ_ZRI6pCT-9scKC59oQ-yYmZD8.roa
File: kQ_ZRI6pCT-9scKC59oQ-yYmZD8.roa (raw, json)
Hash identifier: ALuL/rfEYiZgP3g/8+D/yU7vXc7cX3gUF36JD5wbN4c=
Subject key identifier: 91:0F:D9:44:8E:A9:09:3F:BD:B1:C2:82:E7:DA:10:FB:26:26:64:3F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03498A84
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kQ_ZRI6pCT-9scKC59oQ-yYmZD8.roa
Signing time: Fri 07 Jan 2022 05:36:30 +0000
ROA not before: Fri 07 Jan 2022 05:36:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 46.37.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55151236 (0x3498a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 7 05:36:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=910fd9448ea9093fbdb1c282e7da10fb2626643f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:75:a6:4e:09:21:05:d9:75:03:40:54:d1:
b7:03:b9:46:0f:c9:18:0b:d7:5a:57:d9:ae:4d:4f:
c9:92:ed:cc:29:70:ed:b5:d7:89:c6:d5:91:cb:f6:
3f:42:19:93:28:5e:c4:2c:f7:23:1d:65:c1:aa:74:
19:eb:41:40:9a:bf:9f:ab:10:53:d3:3f:34:31:67:
fb:fc:02:17:04:e2:74:c0:06:94:96:52:1e:5e:ab:
64:8e:18:0b:a0:44:9e:38:30:8f:87:66:55:78:6d:
41:a3:a7:ab:a8:9d:72:2b:2d:13:d7:0d:6d:5b:b1:
76:bd:6b:a8:e9:da:53:37:ac:b7:e4:bb:30:7a:15:
2b:c9:b6:17:ab:97:b0:8f:67:05:36:bb:15:c2:f0:
48:f5:64:0d:d4:36:d2:a2:88:82:fe:7d:76:3e:99:
b8:1b:3d:fb:79:0a:bd:a9:59:05:e1:5b:ef:4f:c3:
5e:fc:1e:6e:a2:33:19:62:1f:59:a9:83:6a:61:9d:
93:be:c6:a4:95:0d:d2:1f:39:e0:6c:be:6a:29:15:
04:ad:8e:b3:3d:a3:10:01:f9:8d:31:20:3c:c5:ee:
a4:78:e2:fd:07:52:c3:9a:1f:aa:8c:40:79:76:86:
b9:52:54:fb:66:d5:69:dd:d8:09:db:87:ec:3b:ff:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0F:D9:44:8E:A9:09:3F:BD:B1:C2:82:E7:DA:10:FB:26:26:64:3F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/kQ_ZRI6pCT-9scKC59oQ-yYmZD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.115.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:47:a5:fb:a0:17:56:67:91:2b:fb:76:63:59:a5:40:60:51:
9a:85:ba:4e:ce:a4:e7:32:06:b0:b4:f0:f1:b8:6d:be:c2:d9:
0f:30:81:cf:b8:c5:4f:92:06:3b:08:0a:1f:0e:96:3d:bc:6e:
41:8f:f8:d5:39:b9:00:b0:68:3e:ad:b8:01:a4:f3:3b:62:56:
d4:4a:5b:25:6e:59:ef:4e:75:76:99:0b:4f:a4:65:46:5d:04:
23:17:fd:d7:95:63:07:76:81:24:17:a1:7b:1c:1d:56:d8:bf:
d1:dc:0a:35:19:bd:b8:a7:87:14:3a:7c:6c:8b:b4:72:a8:8f:
87:8d:ef:da:85:a8:48:b8:a4:f1:51:c3:23:68:21:b7:76:fe:
26:59:0c:b8:05:9d:77:e2:be:97:f4:e4:23:13:6f:28:dc:c6:
a0:f2:fd:27:1b:80:30:57:dc:a2:ab:3d:63:8e:d5:7e:71:35:
93:cb:80:57:29:ae:ec:c9:21:74:78:bd:1c:ff:29:66:d5:b7:
33:8d:b9:d7:37:c0:ce:14:8e:5e:d7:cb:32:f8:39:d9:fa:aa:
7c:6c:74:95:c4:67:3e:94:85:7d:24:e8:89:b1:2f:d2:9c:37:
e4:1d:54:55:64:db:95:4b:35:85:a1:91:6e:9b:43:18:b5:82:
b5:0e:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org