Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mFjUd45zPMSzFe7A_r_ElLdgJUI.roa
File: mFjUd45zPMSzFe7A_r_ElLdgJUI.roa (raw, json)
Hash identifier: /rxYkC4UMz8smEtmPmi6JAV0C19CGt8gxlFkjhuBJbg=
Subject key identifier: 98:58:D4:77:8E:73:3C:C4:B3:15:EE:C0:FE:BF:C4:94:B7:60:25:42
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 042D2C87
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mFjUd45zPMSzFe7A_r_ElLdgJUI.roa
Signing time: Fri 18 Mar 2022 11:16:13 +0000
ROA not before: Fri 18 Mar 2022 11:16:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70069383 (0x42d2c87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Mar 18 11:16:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9858d4778e733cc4b315eec0febfc494b7602542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:3e:00:ce:7c:2a:0b:3f:1f:4e:a5:c1:f5:
90:d4:8d:1c:48:c8:a5:91:74:16:f8:af:36:56:d9:
9d:8a:cc:07:f0:3b:13:7e:a9:11:20:f2:bd:f8:8c:
b9:2c:88:ad:ea:ea:41:da:23:38:d1:99:d0:3b:45:
44:58:98:12:42:36:ea:d6:b8:d9:19:c2:11:67:21:
7c:cf:10:ba:08:81:a7:51:f9:1e:4b:0f:a1:00:77:
1a:0b:2c:26:17:49:0d:d8:4f:3a:d0:06:c8:91:ea:
80:e8:8d:c3:c7:4a:82:8f:45:be:27:e4:89:46:12:
4f:8c:5e:3d:7e:1b:54:b7:03:cf:56:36:a2:a7:b6:
18:66:99:11:36:6b:18:fd:ef:b4:eb:90:5c:b0:f8:
c3:65:9a:24:c1:48:11:52:01:54:63:c2:34:fb:8c:
98:6f:d2:0a:91:f8:9f:02:57:d6:33:64:ba:16:02:
1e:64:35:3b:8d:89:b5:07:54:25:cf:4f:a1:48:a9:
9d:87:3b:99:ba:9a:b4:0a:15:9a:9f:c9:90:5f:03:
29:0b:3a:e6:8a:5a:65:42:c6:e2:19:c0:dc:41:eb:
54:79:c8:5f:66:22:d7:ad:bd:d8:69:a1:fd:95:07:
4c:6d:eb:be:6d:8b:07:bb:f9:2e:78:c9:8a:08:c8:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:58:D4:77:8E:73:3C:C4:B3:15:EE:C0:FE:BF:C4:94:B7:60:25:42
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/mFjUd45zPMSzFe7A_r_ElLdgJUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.114.0/24
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ed:5e:4f:f2:2e:6f:de:f2:0f:02:2e:71:35:c9:08:6c:18:
0d:6b:af:6e:a3:8d:55:9d:36:92:48:f8:c6:b2:f0:83:cb:61:
80:5f:f8:6d:5c:85:a4:e9:2b:00:cf:45:98:1b:5b:1a:ec:1c:
8f:e8:42:c2:63:d3:49:84:45:57:d3:60:3c:29:5f:99:53:ee:
66:9d:12:cf:fd:86:79:38:06:a8:93:d6:20:d5:55:0b:d4:d9:
cf:2e:97:c7:45:93:e3:d7:64:35:2f:cb:f2:6e:65:d0:7c:95:
bf:2f:ff:c7:ef:96:ce:cb:2b:71:50:d2:79:9b:34:5e:fa:d9:
28:67:56:e2:32:32:70:4d:57:9d:33:8e:46:d2:1f:3b:11:bf:
4a:3f:97:a5:d4:56:ee:01:90:89:5b:6c:b1:c5:02:23:f9:23:
88:25:54:60:4f:6a:01:2f:73:57:38:11:62:5d:4d:59:2a:98:
ad:fc:81:cd:97:5a:81:75:34:43:03:f3:7a:ff:20:8b:c6:7f:
77:d5:d1:8d:34:83:2c:c5:d2:7a:04:95:c6:2d:bf:87:35:6c:
6a:33:f4:c6:13:84:8c:c3:13:3a:2b:3d:d6:f9:de:79:85:69:
e9:b0:55:72:77:55:4f:9e:05:e8:81:e7:a7:92:d5:52:5d:82:
2d:8b:7a:7c
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBC0shzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2NmMDg4NDkxOGE1MDIzOWVmNzA1MThlZTlmYzA0ZjFhYWUxOTI5MB4XDTIyMDMx
ODExMTYxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTg1OGQ0Nzc4ZTcz
M2NjNGIzMTVlZWMwZmViZmM0OTRiNzYwMjU0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJU1PgDOfCoLPx9OpcH1kNSNHEjIpZF0FvivNlbZnYrMB/A7
E36pESDyvfiMuSyIrerqQdojONGZ0DtFRFiYEkI26ta42RnCEWchfM8QugiBp1H5
HksPoQB3GgssJhdJDdhPOtAGyJHqgOiNw8dKgo9FvifkiUYST4xePX4bVLcDz1Y2
oqe2GGaZETZrGP3vtOuQXLD4w2WaJMFIEVIBVGPCNPuMmG/SCpH4nwJX1jNkuhYC
HmQ1O42JtQdUJc9PoUipnYc7mbqatAoVmp/JkF8DKQs65opaZULG4hnA3EHrVHnI
X2Yi16292Gmh/ZUHTG3rvm2LB7v5LnjJigjIRR0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSYWNR3jnM8xLMV7sD+v8SUt2AlQjAfBgNVHSMEGDAWgBTTzwiEkYpQI573
BRjun8BPGq4ZKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8x
L21GalVkNDV6UE1TekZlN0Ffcl9FbExkZ0pVSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
Y2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8xLzA4OEloSkdLVUNP
ZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC4lYgMEAC4lcgMEAC4ldDANBgkq
hkiG9w0BAQsFAAOCAQEACe1eT/Iub97yDwIucTXJCGwYDWuvbqONVZ02kkj4xrLw
g8thgF/4bVyFpOkrAM9FmBtbGuwcj+hCwmPTSYRFV9NgPClfmVPuZp0Sz/2GeTgG
qJPWINVVC9TZzy6Xx0WT49dkNS/L8m5l0HyVvy//x++WzssrcVDSeZs0XvrZKGdW
4jIycE1XnTOORtIfOxG/Sj+XpdRW7gGQiVtsscUCI/kjiCVUYE9qAS9zVzgRYl1N
WSqYrfyBzZdagXU0QwPzev8gi8Z/d9XRjTSDLMXSegSVxi2/hzVsajP0xhOEjMMT
Ois91vneeYVp6bBVcndVT54F6IHnp5LVUl2CLYt6fA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org