Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/m-tD3qPmcVLqu_FQjaIPvvrr6bw.roa
File: m-tD3qPmcVLqu_FQjaIPvvrr6bw.roa (raw, json)
Hash identifier: E4HqDthZj5kFBf8Dm78Mbo5I1FSjedsZy/2YV0WkQmA=
Subject key identifier: 9B:EB:43:DE:A3:E6:71:52:EA:BB:F1:50:8D:A2:0F:BE:FA:EB:E9:BC
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 032CF7E4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/m-tD3qPmcVLqu_FQjaIPvvrr6bw.roa
Signing time: Sat 01 Jan 2022 09:57:12 +0000
ROA not before: Sat 01 Jan 2022 09:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 46.37.97.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53278692 (0x32cf7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 09:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9beb43dea3e67152eabbf1508da20fbefaebe9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:81:12:b6:e6:10:d1:7b:51:95:24:f3:2c:
b7:7f:0b:25:bf:83:9a:fe:a8:da:34:6d:c6:b1:5e:
97:49:80:7a:39:e4:66:59:de:7f:70:b8:71:a1:e0:
9d:97:5c:49:5d:42:04:7d:11:5a:a3:35:b8:c7:56:
39:90:f7:74:3f:c1:5e:6c:ab:c6:a9:41:62:d2:cf:
09:0f:c4:29:5d:fb:e8:4a:19:28:5a:01:da:b4:c9:
a8:a3:00:d7:45:de:e9:65:84:5d:d7:3f:08:08:e6:
48:96:69:93:cc:2c:67:29:97:a2:dc:24:42:f7:3d:
07:db:17:14:21:c6:73:65:3b:0c:dc:76:9b:e7:1c:
62:fb:bf:b5:06:06:cf:38:38:e3:d8:7b:f0:54:75:
2c:dd:99:8d:b7:26:7e:3f:cf:5b:69:60:08:a1:28:
aa:91:f2:e8:6d:94:0d:6a:f0:6b:97:d5:3e:36:72:
c7:36:e2:68:74:2e:47:2c:b3:93:d0:20:20:41:9f:
7b:1c:e3:e2:14:30:b1:d2:60:33:a1:fd:29:36:5f:
53:cb:15:87:07:c6:bd:a2:5a:37:3b:01:f7:62:f0:
c1:e7:44:00:53:c7:b0:75:ca:21:26:46:e0:39:7e:
98:9f:e7:4a:0f:a9:2d:5e:f2:3f:71:55:f0:98:18:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:43:DE:A3:E6:71:52:EA:BB:F1:50:8D:A2:0F:BE:FA:EB:E9:BC
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/m-tD3qPmcVLqu_FQjaIPvvrr6bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0-46.37.98.255
46.37.114.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:92:c3:d7:26:5d:81:63:67:cb:1f:88:29:c1:58:be:a2:17:
56:c8:f7:a6:f5:04:73:42:d5:55:ad:e7:49:32:cb:e9:37:6a:
59:b6:d0:5b:2f:a9:ce:d4:06:b6:61:c8:56:18:f6:73:27:07:
b9:08:b5:1a:3f:4c:f9:11:71:7c:7e:15:2e:cf:42:3f:27:e2:
32:d4:ed:46:c9:21:3b:2b:f5:d5:b3:34:bb:e8:b1:03:b0:2f:
64:09:b8:a9:90:71:91:2d:0a:fb:00:50:fa:0c:35:3c:04:35:
66:d1:a7:59:75:35:0b:f4:71:82:30:86:2b:15:5b:da:5a:a1:
db:b3:6d:37:24:54:48:a0:14:5f:65:14:c3:d5:35:79:a7:f5:
52:4c:05:e6:0e:bb:dd:e2:50:8a:8e:0f:e9:f7:49:9c:6e:f6:
0f:bf:55:f0:f5:ac:4e:09:0d:b6:45:67:b7:57:ee:f8:7a:e4:
e0:40:9c:20:51:90:bf:28:58:5d:b2:e2:a8:89:a0:fc:ff:f9:
11:2f:1c:04:fa:8b:1d:d0:97:b2:d1:50:16:46:22:ff:7b:f9:
76:97:2c:0c:c1:2e:de:31:62:cf:e2:0f:8f:af:0a:2e:31:3d:
f9:b3:dd:8b:93:ba:22:31:05:08:4f:fb:0b:89:78:1a:4e:da:
6e:4e:56:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEAyz35DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2NmMDg4NDkxOGE1MDIzOWVmNzA1MThlZTlmYzA0ZjFhYWUxOTI5MB4XDTIyMDEw
MTA5NTcxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWJlYjQzZGVhM2U2
NzE1MmVhYmJmMTUwOGRhMjBmYmVmYWViZTliYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKS7gRK25hDRe1GVJPMst38LJb+Dmv6o2jRtxrFel0mAejnk
Zlnef3C4caHgnZdcSV1CBH0RWqM1uMdWOZD3dD/BXmyrxqlBYtLPCQ/EKV376EoZ
KFoB2rTJqKMA10Xe6WWEXdc/CAjmSJZpk8wsZymXotwkQvc9B9sXFCHGc2U7DNx2
m+ccYvu/tQYGzzg449h78FR1LN2Zjbcmfj/PW2lgCKEoqpHy6G2UDWrwa5fVPjZy
xzbiaHQuRyyzk9AgIEGfexzj4hQwsdJgM6H9KTZfU8sVhwfGvaJaNzsB92LwwedE
AFPHsHXKISZG4Dl+mJ/nSg+pLV7yP3FV8JgYKl0CAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBSb60Peo+ZxUuq78VCNog+++uvpvDAfBgNVHSMEGDAWgBTTzwiEkYpQI573
BRjun8BPGq4ZKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8x
L20tdEQzcVBtY1ZMcXVfRlFqYUlQdnZycjZidy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
Y2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8xLzA4OEloSkdLVUNP
ZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQALiVhAwQALiViAwQALiVyMA0G
CSqGSIb3DQEBCwUAA4IBAQC2ksPXJl2BY2fLH4gpwVi+ohdWyPem9QRzQtVVredJ
MsvpN2pZttBbL6nO1Aa2YchWGPZzJwe5CLUaP0z5EXF8fhUuz0I/J+Iy1O1GySE7
K/XVszS76LEDsC9kCbipkHGRLQr7AFD6DDU8BDVm0adZdTUL9HGCMIYrFVvaWqHb
s203JFRIoBRfZRTD1TV5p/VSTAXmDrvd4lCKjg/p90mcbvYPv1Xw9axOCQ22RWe3
V+74euTgQJwgUZC/KFhdsuKoiaD8//kRLxwE+osd0Jey0VAWRiL/e/l2lywMwS7e
MWLP4g+PrwouMT35s92Lk7oiMQUIT/sLiXgaTtpuTlaY
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org