Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/pf-0syCkZnVdgluDhkhRAZN4N1I.roa
File: pf-0syCkZnVdgluDhkhRAZN4N1I.roa (raw, json)
Hash identifier: qyp//mWFJF/H0/jqO0JepZRQrqVaq5KZ0MYC+giEu10=
Subject key identifier: A5:FF:B4:B3:20:A4:66:75:5D:82:5B:83:86:48:51:01:93:78:37:52
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 03C0B3FE
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/pf-0syCkZnVdgluDhkhRAZN4N1I.roa
Signing time: Thu 17 Feb 2022 13:59:06 +0000
ROA not before: Thu 17 Feb 2022 13:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 46.37.101.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62960638 (0x3c0b3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 17 13:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5ffb4b320a466755d825b838648510193783752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:7a:5a:2b:c4:89:9a:64:b6:87:69:ef:13:
f0:f4:3f:63:fc:77:0a:bc:9f:b3:e9:73:4a:21:0a:
18:9c:bb:b0:85:3a:a1:b2:89:4a:05:7a:a7:ad:99:
20:e4:17:5d:f7:2c:a1:98:a5:91:7b:d8:58:c1:c8:
10:09:59:13:62:74:ad:8a:33:ee:94:69:78:86:97:
6d:36:48:93:60:fd:25:19:c4:51:d6:ba:0c:70:de:
2e:d0:62:e6:ee:13:83:6c:6a:1a:ff:e7:48:81:bc:
a5:63:1c:15:53:53:7d:ed:58:1c:63:5f:08:9e:c0:
32:e6:ac:c7:c6:3b:d5:aa:20:c1:2f:f8:b9:bf:c9:
84:61:c7:06:cd:ff:bb:d1:b6:fb:60:e2:89:28:aa:
a9:39:8d:01:4e:61:e4:f6:ce:37:e0:c6:b3:26:6f:
22:06:2e:c7:30:14:9e:15:94:7d:30:8e:6a:cc:14:
3d:08:af:45:ae:c1:60:68:bf:93:5d:37:a4:bd:68:
cb:67:82:0a:5d:e3:30:fa:ca:27:58:40:2e:8b:92:
5a:76:12:95:d4:79:17:88:ed:53:6e:29:aa:e4:f4:
39:a1:65:c1:94:c8:85:26:3f:bf:ce:f2:5d:c6:b6:
4a:cc:84:a8:64:69:2c:d1:89:2c:47:38:8c:aa:a5:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FF:B4:B3:20:A4:66:75:5D:82:5B:83:86:48:51:01:93:78:37:52
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/pf-0syCkZnVdgluDhkhRAZN4N1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
46.37.114.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:d6:6a:08:8a:a2:be:d7:28:c3:88:45:2f:61:6f:84:38:8a:
5c:17:3b:95:24:bf:73:8e:e7:81:0c:4d:b5:f1:c7:92:fa:59:
5b:83:9a:2e:11:16:7b:bc:0d:c8:57:3a:16:73:9d:68:c5:f4:
1b:64:3f:c4:d2:65:d0:5d:c8:d4:cb:ab:cd:fe:f7:eb:3a:f9:
4d:2d:cf:3b:b6:59:d9:59:04:fb:e1:a9:d6:f1:f0:2c:33:ed:
d0:fd:af:47:ea:fc:1e:6d:e7:f1:7d:99:e2:12:e4:3e:18:a5:
17:1e:5d:b3:2a:af:7f:db:78:0e:1c:c2:e4:5e:c1:c2:c1:b4:
00:03:e6:32:d2:98:50:47:09:86:7b:c5:24:2c:15:25:dd:e1:
f2:4d:60:25:fc:02:b6:6f:e4:6f:92:52:93:3d:42:08:6d:54:
44:86:33:85:ff:67:1f:24:8c:89:f4:fd:f6:85:85:0d:06:a3:
0b:d8:b7:35:f0:dd:3c:6d:8f:fe:13:15:f9:37:9f:b4:eb:7b:
09:dd:32:af:22:65:be:ca:6e:35:d5:10:99:47:f6:40:aa:84:
3f:8e:a3:8d:fb:35:eb:6d:41:25:7b:24:af:3c:2f:05:38:41:
e5:8a:df:59:c1:5b:f9:da:23:eb:34:e9:45:ef:91:61:1a:19:
bd:31:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org