Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lqyNZnugNWFl3yHuTM2sqLKCvP4.roa
File: lqyNZnugNWFl3yHuTM2sqLKCvP4.roa (raw, json)
Hash identifier: JEwa9YqNfk4bq0S4iUp4KMzLmKmsuBRQRSiyW/Kay/Y=
Subject key identifier: 96:AC:8D:66:7B:A0:35:61:65:DF:21:EE:4C:CD:AC:A8:B2:82:BC:FE
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01845CD6FBF188E6466DC5775DFA89F2387F
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lqyNZnugNWFl3yHuTM2sqLKCvP4.roa
Signing time: Wed 09 Nov 2022 14:41:43 +0000
ROA not before: Wed 09 Nov 2022 14:41:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:d6:fb:f1:88:e6:46:6d:c5:77:5d:fa:89:f2:38:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 9 14:41:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96ac8d667ba0356165df21ee4ccdaca8b282bcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1a:0e:58:8e:28:30:bd:f1:09:d8:67:5b:66:
c2:ff:6d:9e:ea:fe:7c:f9:2d:6d:bf:a2:5f:3c:ef:
c0:06:f7:88:23:6e:91:8f:34:28:ef:74:28:7c:00:
d4:b1:5e:64:13:c6:b4:22:a8:f2:79:99:88:81:30:
a1:ff:b6:0a:e4:31:03:ea:95:48:3a:d6:26:b7:f1:
6f:59:64:4c:c5:81:74:d5:cf:1d:98:bf:cd:4b:2d:
21:f1:8b:3a:59:40:d3:93:cf:81:00:47:a4:3e:c0:
ef:58:37:5b:ee:b8:c2:5f:3c:65:3c:5b:b7:55:6d:
e7:1f:d0:b0:e7:e0:71:95:2e:e3:49:5f:aa:ca:88:
85:12:11:f3:8c:c9:0f:f0:30:95:68:56:a1:66:8d:
99:b8:ea:8a:73:5b:6a:fb:37:19:7d:a6:49:29:2b:
67:7a:a7:11:32:1c:bb:79:c5:1d:6c:af:63:98:4d:
a8:7e:28:94:0d:f3:75:17:fc:0a:fe:a0:7a:5f:b4:
dd:60:04:b9:e6:0a:6f:77:f7:05:11:c2:0c:57:9e:
dc:8f:0d:15:9a:17:da:91:d0:c0:01:9a:29:13:ee:
f1:d5:51:cc:33:8f:c6:79:99:3c:6d:1a:92:a5:7c:
8f:be:8a:3d:12:0a:ae:52:fe:1f:eb:5b:a2:c4:b4:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:8D:66:7B:A0:35:61:65:DF:21:EE:4C:CD:AC:A8:B2:82:BC:FE
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/lqyNZnugNWFl3yHuTM2sqLKCvP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8e:ee:83:fd:72:25:ed:4a:68:eb:26:a1:29:81:7c:cb:3c:
d6:1b:a3:7d:96:64:a0:d4:90:f2:af:df:64:e2:21:45:cc:1f:
95:80:67:ea:9f:7b:f3:dd:ed:bc:47:7d:73:80:60:03:1b:18:
92:79:22:ae:20:70:71:63:30:57:3c:92:d1:23:5a:6d:46:73:
27:77:9f:01:8d:90:ee:db:18:27:46:58:1c:37:17:1c:f5:a7:
80:f4:26:db:33:33:6e:f2:0e:92:b1:3b:a3:cc:b3:44:01:d9:
7c:92:e6:ba:96:c2:b5:7f:2f:bd:09:35:49:55:88:5a:df:58:
78:ad:87:03:c9:45:55:ec:d2:d0:98:b7:05:14:1d:9d:20:4e:
97:68:70:79:3e:09:bf:c6:f2:cd:f6:37:cb:40:96:c3:f1:19:
29:92:1b:34:d3:74:05:18:63:2b:0f:98:f8:8f:e1:8f:24:10:
50:1c:4a:ef:95:29:36:48:ad:df:76:de:1c:ed:30:e3:c1:54:
62:c5:2a:82:87:97:e8:87:3e:c5:90:88:b8:69:4d:5f:81:a5:
41:ff:23:25:b2:8e:13:3a:3b:40:b3:e6:34:3a:9f:e1:91:17:
02:1d:c9:20:2c:da:56:c5:b1:c8:26:48:61:4d:4e:07:b3:34:
03:90:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org