Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/laq61lM6MgF9UslF8S8mgBCSBSE.roa
File: laq61lM6MgF9UslF8S8mgBCSBSE.roa (raw, json)
Hash identifier: 6NvchosnIFzPYgt/SC1WkS4Cf96nW/z9msFGOMyYusM=
Subject key identifier: 95:AA:BA:D6:53:3A:32:01:7D:52:C9:45:F1:2F:26:80:10:92:05:21
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 032E8C9E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/laq61lM6MgF9UslF8S8mgBCSBSE.roa
Signing time: Sat 01 Jan 2022 09:57:13 +0000
ROA not before: Sat 01 Jan 2022 09:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 46.37.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53382302 (0x32e8c9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 09:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95aabad6533a32017d52c945f12f268010920521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:72:41:73:48:ab:96:44:6e:0d:86:0c:c5:
88:67:11:75:02:95:9a:96:b1:be:ce:1d:f4:b1:4c:
cc:79:87:08:d9:58:7c:db:d3:05:bc:30:64:81:33:
95:27:3b:3b:3f:98:88:ae:20:4b:4c:ac:5f:b9:27:
aa:12:48:c2:61:75:c2:04:82:d5:e2:65:50:32:2e:
47:db:b0:bd:c5:1d:18:99:76:ad:0f:af:26:da:34:
65:e8:45:7b:8d:e3:4e:09:d4:6b:90:9a:8a:85:bb:
43:9d:36:ee:a8:8d:93:38:30:1b:33:f5:a0:87:76:
0d:ff:c8:b4:dd:1c:ac:c2:d0:90:e8:06:4b:00:56:
5a:52:a7:27:62:9c:62:48:a7:77:b0:d3:59:18:31:
bc:24:90:21:fe:c6:0e:c3:40:ba:0b:17:66:6c:a0:
d8:c9:d0:fd:6d:77:a0:9a:58:8b:3e:80:69:14:29:
c8:0a:9a:16:1d:54:ab:0f:44:bb:d2:cc:d8:34:06:
e8:f7:0d:96:75:2e:f6:8a:0c:4e:83:9d:70:24:f1:
f8:9d:69:70:66:61:fc:6e:7a:6f:3d:1c:fc:ef:5b:
cd:5b:e2:4c:67:db:62:24:a1:d9:1a:e4:8e:8f:a5:
40:89:c3:7a:3f:6d:22:23:a0:c3:a2:90:51:d7:1b:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AA:BA:D6:53:3A:32:01:7D:52:C9:45:F1:2F:26:80:10:92:05:21
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/laq61lM6MgF9UslF8S8mgBCSBSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.110.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b3:9e:5a:d7:87:9b:12:17:e5:50:20:63:48:56:5c:e8:b2:
5f:c8:fb:a9:2c:4d:58:83:b1:05:50:62:d3:b3:a5:e2:d8:c6:
fe:27:a6:83:54:76:96:27:ab:9c:b7:0e:80:b4:c6:81:7d:05:
4d:a8:9a:4c:ae:79:c4:90:68:89:90:72:22:45:9f:ce:11:8a:
7a:c8:6c:96:3f:35:5a:e3:f3:3f:64:a2:b2:61:91:00:02:91:
fe:eb:a0:37:4b:80:6c:e8:bf:ac:a8:dd:dd:63:85:d2:4f:dc:
58:b0:ac:0c:41:31:fb:50:30:72:03:2b:ac:ec:3f:f8:48:f5:
2f:ca:6e:12:9a:06:d1:d7:21:37:9a:f5:68:f3:3c:18:d5:ff:
9a:59:9b:8a:23:36:d4:1b:77:0c:4c:2f:9c:fa:ff:9e:fa:17:
e6:54:5a:9e:c9:5e:de:27:91:b7:f5:f2:1a:96:d7:e0:35:57:
2b:af:c5:bc:82:f4:95:92:5f:07:d1:40:2c:bc:6c:be:63:18:
5d:e8:71:9f:3b:34:63:5e:7f:a3:52:98:14:be:9f:49:43:3d:
50:3e:80:21:f1:5f:eb:66:29:1b:48:a8:cf:8f:39:3d:6b:df:
2e:1d:f8:69:8e:6c:52:6f:5d:c0:1e:d4:19:b6:c2:9c:2b:38:
a9:50:00:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org