Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nbV5p1fbwbtl_ey5ouVrflOJCnA.roa
File: nbV5p1fbwbtl_ey5ouVrflOJCnA.roa (raw, json)
Hash identifier: 0sNMYjahffAK5xLOw6sEBlNsXeumtzFuIi4eC3KUYCg=
Subject key identifier: 9D:B5:79:A7:57:DB:C1:BB:65:FD:EC:B9:A2:E5:6B:7E:53:89:0A:70
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0184E34CC02EBC8954813A9F53A7DD49A718
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nbV5p1fbwbtl_ey5ouVrflOJCnA.roa
Signing time: Mon 05 Dec 2022 17:19:28 +0000
ROA not before: Mon 05 Dec 2022 17:19:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.92.44.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:4c:c0:2e:bc:89:54:81:3a:9f:53:a7:dd:49:a7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 5 17:19:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9db579a757dbc1bb65fdecb9a2e56b7e53890a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:66:f8:2f:7b:1b:d1:96:3b:29:28:e5:c8:
b7:82:87:e8:83:68:1a:22:57:bb:75:40:07:ae:4a:
1d:ec:4f:e7:2d:0d:25:8a:ee:a4:db:17:66:88:66:
88:6f:f4:26:9c:ab:a8:be:04:4a:fd:88:23:36:ab:
8e:28:88:a1:32:fc:45:c9:6f:a6:af:2a:b0:f0:6c:
69:9a:2e:29:6a:56:af:76:0f:fa:31:25:d1:cd:4e:
db:89:22:8b:d2:54:89:3f:65:ca:a8:98:a5:5b:50:
b7:30:cd:96:e6:9a:35:65:96:74:ac:af:22:1d:f8:
35:48:be:30:9c:ca:42:c6:ed:e5:a4:8e:fd:4b:e9:
82:77:51:28:36:1b:fb:62:1f:70:a2:53:94:2d:17:
9a:f3:3d:9e:cb:1e:79:e0:7b:08:52:82:7d:18:19:
2a:00:72:f7:cb:87:70:52:79:03:00:1a:ba:0b:14:
7f:31:25:a5:96:7f:69:eb:9a:5f:63:9d:87:6d:98:
42:42:97:15:a3:ea:56:6e:4e:12:a2:4c:75:4b:24:
7d:10:2b:b0:bb:a1:2b:1e:f4:06:72:7a:1d:9c:4b:
86:cf:11:c8:32:09:f2:e3:bf:ec:9b:db:b1:ca:ea:
27:7d:38:e3:be:af:0c:3d:51:b7:97:95:a9:cc:f1:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B5:79:A7:57:DB:C1:BB:65:FD:EC:B9:A2:E5:6B:7E:53:89:0A:70
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nbV5p1fbwbtl_ey5ouVrflOJCnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.119.0/24
46.37.122.0/24
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
45:11:36:bf:19:ea:dc:eb:73:d0:3c:20:1d:ed:ed:8a:db:31:
55:0a:92:c7:b3:20:c3:4d:49:0d:25:28:af:67:76:d7:1b:f8:
93:0d:79:c0:f5:f4:52:c0:c5:44:eb:02:15:f3:72:2f:90:b7:
3f:1f:f4:2d:c6:42:51:f2:f6:3d:80:b2:9f:0a:d7:ef:44:47:
00:d0:49:21:dd:6a:da:16:14:1c:8e:0e:52:b4:63:66:97:e4:
80:e5:9b:45:0c:70:73:f5:54:4d:bb:24:fa:cd:97:0d:8f:fc:
af:ca:7e:bc:af:8a:fe:68:43:6e:1d:fe:8e:e7:88:54:0e:f3:
ef:c2:d0:29:a4:f2:31:dd:89:42:55:ef:de:78:f9:b8:fe:80:
b8:81:63:bd:0d:77:2b:b0:73:dc:90:bf:81:2c:00:76:5a:b2:
a2:c3:b6:23:eb:8d:e4:1c:a2:61:b8:86:60:e8:eb:c3:fd:a2:
51:a3:ff:f4:e3:be:d9:a7:b2:7c:d7:35:2a:fe:3d:ac:d9:9b:
be:67:e5:1d:b3:86:ed:02:f8:1a:12:be:ee:8a:b1:d1:dd:ef:
64:4e:f6:10:a5:03:92:8c:0c:89:ef:91:a3:03:fc:6b:fd:82:
22:33:34:1e:e8:c8:37:3c:fb:9e:12:ca:cd:a3:24:7c:e5:53:
9f:32:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org