Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ndaqCoWpS1e4RExrqdDHlp0ngOI.roa
File: ndaqCoWpS1e4RExrqdDHlp0ngOI.roa (raw, json)
Hash identifier: W9++WQgymC3c7qcLcPUqs6CeuhXsHeQ/NlYHNGxBM90=
Subject key identifier: 9D:D6:AA:0A:85:A9:4B:57:B8:44:4C:6B:A9:D0:C7:96:9D:27:80:E2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0181D71A1CCE56129E8C4694EB3BE6D98B26
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ndaqCoWpS1e4RExrqdDHlp0ngOI.roa
Signing time: Thu 07 Jul 2022 05:20:21 +0000
ROA not before: Thu 07 Jul 2022 05:20:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142111
IP address blocks: 46.37.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:1a:1c:ce:56:12:9e:8c:46:94:eb:3b:e6:d9:8b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 7 05:20:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dd6aa0a85a94b57b8444c6ba9d0c7969d2780e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:17:59:01:f7:0a:2b:27:03:1a:0f:19:aa:
fe:34:c7:39:08:cd:25:d1:36:6f:46:30:69:e2:08:
41:0f:c0:d2:66:b5:b5:22:e1:27:f3:76:f4:cc:02:
fc:75:31:74:38:e2:28:d1:27:9a:3c:8d:76:51:54:
18:c8:da:c0:d4:4e:6f:d4:4b:13:ad:be:d5:bd:ef:
e1:44:9f:2f:db:ce:f4:00:ee:d4:12:d9:2c:9b:19:
7f:5e:08:9a:63:84:db:96:5e:e4:ca:ed:3c:4e:44:
9f:7a:72:af:9e:4c:ee:53:7f:30:e1:18:56:1d:19:
10:91:0f:09:4e:13:b5:90:3f:85:77:07:54:3b:04:
a2:5c:70:75:32:b5:ba:2f:5d:70:22:bb:73:8d:da:
8a:18:84:94:be:c4:bc:70:ce:94:a0:be:f3:d3:a9:
0c:0f:9f:dd:f9:c3:b2:35:78:88:b9:07:a2:5b:bd:
fc:43:52:7f:46:6a:8b:29:58:c5:56:7d:ea:79:01:
fd:01:85:fa:9f:39:e0:b8:78:11:e1:7a:13:76:e8:
14:78:c6:d6:c1:06:3b:17:60:38:49:f3:e9:98:5f:
8c:09:3d:f8:75:6f:ce:9f:0d:ad:d6:c4:b5:9c:0b:
a6:e3:fd:b7:3d:db:55:7e:33:80:25:89:53:35:c8:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D6:AA:0A:85:A9:4B:57:B8:44:4C:6B:A9:D0:C7:96:9D:27:80:E2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ndaqCoWpS1e4RExrqdDHlp0ngOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.112.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5b:bb:d6:64:f8:71:9b:18:05:8b:fa:7e:5e:8f:c9:89:42:
bf:d9:b6:2c:01:a6:e7:8b:5f:36:43:ea:78:25:9d:2c:a9:bc:
20:1e:f4:fe:70:d0:b3:4d:18:96:03:c8:5a:da:ae:84:b9:f0:
4f:d5:4c:08:02:eb:50:60:c2:ec:1b:c9:95:1a:5d:4f:d4:58:
5b:2a:2f:8e:e6:3b:70:c6:5b:f8:00:87:68:0a:1f:34:0a:22:
90:b6:12:e8:94:1e:4d:46:90:c9:16:41:97:a4:44:fa:01:81:
69:61:f5:c9:cd:74:d6:69:09:f9:43:b2:d4:6c:e5:f1:8b:f3:
de:c4:73:6c:52:58:0e:0b:94:93:15:22:a4:e6:cb:99:ec:39:
a4:10:8e:e3:5f:a7:40:f8:61:9c:5d:54:d6:08:e4:77:54:c1:
2c:d5:d5:ce:dd:ce:a7:67:5c:da:5f:22:f0:06:d2:ba:a5:10:
c1:67:20:3f:d6:ff:3d:96:5d:2c:b6:20:02:8c:6f:d7:ac:fb:
71:31:2c:1d:37:85:db:c2:f8:65:df:8f:73:c7:b0:6c:35:aa:
6a:e2:8f:45:79:a6:49:3f:cd:b8:07:7d:f3:8a:ad:35:2d:de:
7c:51:53:f9:35:d8:00:fa:32:d9:b2:07:77:6e:08:ae:16:5c:
f6:14:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org