Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nSB-j1U-_-jmHW988LMtYNIKAeE.roa
File: nSB-j1U-_-jmHW988LMtYNIKAeE.roa (raw, json)
Hash identifier: nr9u2HJy56NtqIewincUqHub/8uvR37TkyM0tNkBySU=
Subject key identifier: 9D:20:7E:8F:55:3E:FF:E8:E6:1D:6F:7C:F0:B3:2D:60:D2:0A:01:E1
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0184787C51D8128EA6B94447D503BD01E54D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nSB-j1U-_-jmHW988LMtYNIKAeE.roa
Signing time: Mon 14 Nov 2022 23:32:04 +0000
ROA not before: Mon 14 Nov 2022 23:32:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 46.37.114.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:78:7c:51:d8:12:8e:a6:b9:44:47:d5:03:bd:01:e5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Nov 14 23:32:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d207e8f553effe8e61d6f7cf0b32d60d20a01e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:bc:a0:f6:d2:f4:ab:76:22:b7:d6:bd:da:
f7:0a:fc:1c:43:01:0d:b5:d8:8e:38:16:4a:78:de:
fc:0c:eb:80:72:ce:93:a3:8d:42:a6:0b:8e:49:15:
20:09:7d:c0:2b:91:f4:bd:d9:75:58:05:73:51:64:
ff:57:94:b3:c7:35:6c:bf:ab:a0:b8:07:02:01:3d:
ea:37:07:e7:a3:45:4e:b9:c8:e4:e1:56:fd:8a:d7:
82:f7:98:06:38:b4:94:48:c6:47:8f:94:06:ce:ef:
f4:5c:33:3b:d7:00:dd:14:02:fc:d3:70:49:f8:39:
88:67:95:f2:05:9e:2e:4b:44:08:56:03:d5:d6:c2:
7d:5e:95:60:65:89:a1:73:ba:8a:9d:32:48:4b:4d:
77:76:bb:e0:a0:85:f7:26:5d:fb:91:70:b0:91:d4:
83:5d:40:a8:48:e5:18:88:32:9d:79:24:bc:c6:db:
ca:f1:f8:0d:0a:b2:8e:f3:53:29:1d:9e:7d:46:d9:
10:b5:a9:be:26:31:bd:e2:2b:37:26:a7:ed:b1:48:
ea:e6:b4:2e:ed:75:76:ad:cd:b3:ee:40:f7:9a:a4:
ae:4d:e7:45:14:11:27:69:2d:38:f2:3a:73:44:52:
91:a8:6b:64:d9:01:10:30:a3:8a:6b:3b:8e:34:69:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:7E:8F:55:3E:FF:E8:E6:1D:6F:7C:F0:B3:2D:60:D2:0A:01:E1
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nSB-j1U-_-jmHW988LMtYNIKAeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.114.0/24
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5d:4f:d9:00:ae:8e:7b:af:41:15:9e:d3:91:ad:17:fa:da:
e4:04:a9:da:eb:33:28:00:19:cb:87:ac:23:d2:bd:f3:c3:07:
ad:05:e7:e6:8b:89:1d:c3:ce:35:ca:96:f0:84:f5:19:19:df:
13:e6:28:4b:b5:87:4f:f0:e6:12:f2:22:2d:d5:44:6d:b8:45:
6d:f7:bc:0a:d1:e0:ea:55:d6:32:87:dd:ee:91:4a:e9:94:4a:
77:93:4b:ff:81:1b:fd:04:8e:48:51:86:2f:3d:b3:31:d3:5e:
6e:be:39:d6:81:9b:0a:b4:60:dc:dc:ec:65:a2:0a:86:f1:ca:
be:8f:46:25:2c:94:92:df:ca:db:0a:67:fa:13:cd:7c:1a:17:
97:bc:56:2b:fa:00:07:b2:da:41:2a:d0:7c:7f:5f:8a:16:b2:
73:b3:c4:fd:d5:fc:ae:9f:e6:26:66:15:65:ae:7c:35:83:8d:
d7:fe:79:09:77:7d:9f:2f:8e:bb:af:4c:98:13:42:b5:70:26:
c4:9f:95:46:88:b9:a5:c4:c8:de:01:4d:9f:dc:5d:0d:1f:f3:
bc:71:8a:ed:0f:0c:7c:67:f6:77:51:66:66:00:3d:31:3e:17:
b4:2c:ad:3a:db:fa:c0:94:b6:01:21:8c:fc:73:6d:a2:04:b1:
39:9d:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org