Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rBjfZGWXOSTjZcc5LYidilLaxSE.roa
File: rBjfZGWXOSTjZcc5LYidilLaxSE.roa (raw, json)
Hash identifier: 7ALOBHXQDTUNiD1fFbPa4716ftwI+s/R3xsDVIWsw8g=
Subject key identifier: AC:18:DF:64:65:97:39:24:E3:65:C7:39:2D:88:9D:8A:52:DA:C5:21
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 047558F0
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rBjfZGWXOSTjZcc5LYidilLaxSE.roa
Signing time: Fri 15 Apr 2022 12:27:34 +0000
ROA not before: Fri 15 Apr 2022 12:27:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.97.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.104.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
46.37.110.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.107.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
46.37.117.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74799344 (0x47558f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 15 12:27:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac18df6465973924e365c7392d889d8a52dac521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:ad:62:54:f1:fa:ff:b3:14:6e:0c:d8:ba:
e7:93:81:26:67:79:dc:f7:a6:6d:0e:57:63:45:fb:
04:b5:a2:08:df:fd:db:19:c1:14:23:fc:74:d6:12:
65:ff:d5:73:ca:98:51:9d:a4:1f:f5:7f:86:80:a1:
3d:c3:19:48:41:79:35:e6:84:f7:65:34:c3:b9:30:
f7:6f:39:91:76:28:77:81:77:b8:22:a6:b5:ec:7a:
c2:72:5a:31:38:5e:59:99:c8:c5:4c:30:53:2c:7d:
84:30:4c:f5:fb:6c:3c:34:d5:d3:b9:73:1f:78:28:
56:cb:47:f1:6f:43:f1:78:5c:6f:47:57:78:13:12:
25:b9:60:54:41:98:f8:21:56:4e:06:b9:c3:1b:64:
56:9c:d5:a0:1f:fe:92:ad:17:60:39:0a:b7:d6:c4:
f3:ae:7e:b9:f1:10:12:2c:85:f1:63:b6:3a:98:28:
45:2e:bc:85:f1:86:f0:06:4a:7a:23:9b:ae:71:b7:
56:c6:25:ab:a3:64:d3:da:96:8d:a9:30:08:67:a7:
bb:f8:60:68:ab:b5:3b:ec:b6:cd:05:d9:98:c7:cf:
1a:b5:15:9c:f7:59:17:83:65:6d:5f:63:53:a2:06:
5d:81:7b:af:c7:34:bf:c7:d4:84:5d:6e:ba:17:c4:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:DF:64:65:97:39:24:E3:65:C7:39:2D:88:9D:8A:52:DA:C5:21
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rBjfZGWXOSTjZcc5LYidilLaxSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0/24
46.37.100.0/24
46.37.102.0/24
46.37.104.0/22
46.37.109.0-46.37.110.255
46.37.115.0-46.37.117.255
46.37.119.0/24
185.92.44.0/24
185.92.46.0/23
Signature Algorithm: sha256WithRSAEncryption
65:02:ff:52:18:20:10:d1:a7:7c:7c:9a:ad:2c:01:66:88:11:
f2:cf:d1:90:06:32:97:1b:2e:91:81:ec:03:53:9e:10:bf:ec:
66:3e:04:74:ee:3e:8b:06:f3:af:2e:c1:9d:10:60:83:c6:3f:
f0:d8:f0:04:16:6c:58:93:20:b1:c0:18:5e:d2:4d:1d:31:c8:
be:f8:f0:47:eb:de:33:53:c8:42:27:f1:9f:a3:00:4b:5d:8f:
a9:e0:42:cd:08:46:b0:0e:98:ce:29:27:4d:9b:a7:a0:55:0f:
b2:1b:d8:be:c4:d8:b8:2f:0d:de:47:43:5b:94:47:c7:52:d1:
cb:cb:9e:ef:79:0d:01:71:1f:f1:3b:60:7d:e8:7e:00:47:71:
b2:9b:c5:82:ee:bd:2f:22:65:14:10:fc:e2:dc:e8:a1:25:59:
7a:a8:e5:3e:3f:5d:bf:98:ea:f9:9c:72:ef:ec:49:98:ac:b3:
09:3c:cb:c4:f5:33:f1:97:88:14:5f:a9:9e:29:91:59:ee:d8:
6b:1f:d8:5d:d6:71:b0:5c:75:aa:43:30:de:c3:1e:de:45:44:
04:7a:63:bb:a6:48:01:7d:4c:29:cf:0e:84:57:7a:95:a3:8a:
30:22:fe:c1:f4:ed:3a:aa:8e:d9:11:ee:3a:63:9a:53:c7:ae:
be:1d:82:20
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIEBHVY8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2NmMDg4NDkxOGE1MDIzOWVmNzA1MThlZTlmYzA0ZjFhYWUxOTI5MB4XDTIyMDQx
NTEyMjczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWMxOGRmNjQ2NTk3
MzkyNGUzNjVjNzM5MmQ4ODlkOGE1MmRhYzUyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvurWJU8fr/sxRuDNi655OBJmd53PembQ5XY0X7BLWiCN/9
2xnBFCP8dNYSZf/Vc8qYUZ2kH/V/hoChPcMZSEF5NeaE92U0w7kw9285kXYod4F3
uCKmtex6wnJaMTheWZnIxUwwUyx9hDBM9ftsPDTV07lzH3goVstH8W9D8Xhcb0dX
eBMSJblgVEGY+CFWTga5wxtkVpzVoB/+kq0XYDkKt9bE865+ufEQEiyF8WO2Opgo
RS68hfGG8AZKeiObrnG3VsYlq6Nk09qWjakwCGenu/hgaKu1O+y2zQXZmMfPGrUV
nPdZF4NlbV9jU6IGXYF7r8c0v8fUhF1uuhfEzA8CAwEAAaOCAkkwggJFMB0GA1Ud
DgQWBBSsGN9kZZc5JONlxzktiJ2KUtrFITAfBgNVHSMEGDAWgBTTzwiEkYpQI573
BRjun8BPGq4ZKTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8x
L3JCamZaR1dYT1NUalpjYzVMWWlkaWxMYXhTRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
Y2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcyMC8xLzA4OEloSkdLVUNP
ZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBf
BggrBgEFBQcBBwEB/wRQME4wTAQCAAEwRgMEAC4lYQMEAC4lZAMEAC4lZgMEAi4l
aDAMAwQALiVtAwQALiVuMAwDBAAuJXMDBAEuJXQDBAAuJXcDBAC5XCwDBAG5XC4w
DQYJKoZIhvcNAQELBQADggEBAGUC/1IYIBDRp3x8mq0sAWaIEfLP0ZAGMpcbLpGB
7ANTnhC/7GY+BHTuPosG868uwZ0QYIPGP/DY8AQWbFiTILHAGF7STR0xyL748Efr
3jNTyEIn8Z+jAEtdj6ngQs0IRrAOmM4pJ02bp6BVD7Ib2L7E2LgvDd5HQ1uUR8dS
0cvLnu95DQFxH/E7YH3ofgBHcbKbxYLuvS8iZRQQ/OLc6KElWXqo5T4/Xb+Y6vmc
cu/sSZisswk8y8T1M/GXiBRfqZ4pkVnu2Gsf2F3WcbBcdapDMN7DHt5FRAR6Y7um
SAF9TCnPDoRXepWjijAi/sH07TqqjtkR7jpjmlPHrr4dgiA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org