Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nmFZzCUDaEvqfrNoUAhXYXNSQGA.roa
File: nmFZzCUDaEvqfrNoUAhXYXNSQGA.roa (raw, json)
Hash identifier: ANPWbVkCUcrmf3cJDBZSyUZzzdAyxOn0UfIRGCVjbsM=
Subject key identifier: 9E:61:59:CC:25:03:68:4B:EA:7E:B3:68:50:08:57:61:73:52:40:60
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 05083E20
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nmFZzCUDaEvqfrNoUAhXYXNSQGA.roa
Signing time: Tue 14 Jun 2022 23:45:44 +0000
ROA not before: Tue 14 Jun 2022 23:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.97.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.104.0/24 maxlen: 24
46.37.110.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.107.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
46.37.117.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84426272 (0x5083e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 14 23:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e6159cc2503684bea7eb3685008576173524060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:e2:56:74:ee:b2:a2:e8:68:62:2e:2f:d6:
a7:09:0a:49:b6:f4:f2:c8:bc:ef:d2:0d:fe:e8:4c:
f2:fd:6c:f0:e4:e2:81:47:ff:de:0b:51:d9:51:26:
bb:30:e6:34:21:a4:a5:a2:db:c6:18:80:ff:15:de:
89:ad:e0:60:0e:66:29:f5:6b:b8:22:3d:78:12:cb:
e0:1a:56:12:47:11:b9:5b:64:f1:8b:df:62:d2:42:
e2:56:f7:44:e4:44:a5:6e:86:d7:05:eb:ed:a1:fa:
91:bb:b6:2a:0c:6a:8c:90:db:c6:7a:8f:b0:1f:6f:
f3:1c:89:84:e5:5f:a6:c6:bf:7d:99:7d:11:17:b9:
17:86:f5:b5:52:01:51:18:28:35:0b:69:af:f8:7f:
a2:6f:d0:70:1f:60:cd:6b:29:d9:21:b9:6c:b8:7a:
fa:26:a3:e9:3b:3e:ef:23:c0:bd:87:f2:ab:1f:0f:
66:c2:70:1a:26:96:78:ab:7b:a1:27:c3:08:85:7e:
4f:02:ed:7c:bc:ab:f8:b2:7b:41:c6:5c:cd:81:95:
75:08:ff:07:1c:fc:1d:a7:b5:ca:a0:3c:9e:db:5d:
5b:26:cc:96:3d:f2:8c:31:10:ed:9c:ec:d6:6a:a7:
35:c3:fd:56:45:ff:8e:0b:9c:78:c9:ed:02:f7:17:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:61:59:CC:25:03:68:4B:EA:7E:B3:68:50:08:57:61:73:52:40:60
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/nmFZzCUDaEvqfrNoUAhXYXNSQGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0/24
46.37.100.0/24
46.37.102.0/24
46.37.104.0/22
46.37.110.0/24
46.37.115.0-46.37.117.255
46.37.119.0/24
185.92.44.0/24
185.92.46.0/23
Signature Algorithm: sha256WithRSAEncryption
01:45:b4:ca:38:72:1f:97:cf:c7:22:88:0a:3d:56:55:68:dc:
76:6b:f1:7a:04:85:ae:05:e8:cc:0b:58:44:d3:61:fd:89:da:
39:ff:44:f9:bb:ed:16:e6:e3:10:41:47:c8:dd:bf:78:e3:89:
64:a3:d0:5e:e6:62:a7:0a:bc:ca:bb:c8:a4:b1:eb:e8:41:6b:
11:d6:a6:6f:0f:32:52:a0:38:e2:03:9a:48:de:3b:00:0e:a7:
b1:04:cb:48:03:42:ba:17:d6:39:e3:92:33:d9:ff:dc:43:31:
ed:71:0a:91:66:cf:26:8b:7e:31:a4:d2:e7:31:ba:b2:6f:fa:
73:51:9c:d4:72:28:76:45:fa:6c:8b:45:e4:f3:54:23:73:6d:
08:17:a2:d0:7a:5e:d9:0f:36:b9:29:f9:8d:91:93:a3:e8:4f:
c8:d1:9f:de:94:db:cd:c4:1e:27:a4:cf:0a:ef:0a:11:9e:00:
20:7b:95:23:89:5f:3f:c2:1e:e4:af:94:ab:f7:75:2c:9a:bf:
f4:a7:68:6e:de:98:2d:87:3e:f9:3b:0b:98:0b:1f:55:27:ad:
2b:44:97:9f:a4:cb:e9:f9:1d:a4:ab:df:93:26:c4:2c:1f:3b:
bf:bb:7b:2d:5b:b1:92:60:27:0c:ee:ce:0c:77:fa:97:db:b9:
95:f7:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org