Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/u9FcopNGbTW3JaUF-8xqs7o9tWw.roa
File: u9FcopNGbTW3JaUF-8xqs7o9tWw.roa (raw, json)
Hash identifier: akTgkAbzJXWrH0Oy+CIUH8ctQHT5S884wwk3V6bTH9Y=
Subject key identifier: BB:D1:5C:A2:93:46:6D:35:B7:25:A5:05:FB:CC:6A:B3:BA:3D:B5:6C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0348FB91
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/u9FcopNGbTW3JaUF-8xqs7o9tWw.roa
Signing time: Fri 07 Jan 2022 05:34:47 +0000
ROA not before: Fri 07 Jan 2022 05:34:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.97.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55114641 (0x348fb91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 7 05:34:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbd15ca293466d35b725a505fbcc6ab3ba3db56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:aa:1f:1e:4c:16:c4:6b:39:56:f4:04:51:
b0:ee:ab:84:16:9e:7a:77:23:bc:ef:05:93:d0:38:
c7:f3:53:a7:7c:b5:b0:65:1d:bb:91:ff:7a:e2:ff:
97:e3:2a:e4:6a:66:29:d3:45:f2:f4:21:b9:2b:21:
5a:b4:66:27:69:1c:7b:20:0e:51:5b:45:fe:e0:24:
85:78:fc:fa:af:11:81:8b:05:3a:f5:36:4b:15:3e:
85:77:5a:1a:3a:11:34:be:03:43:6c:de:62:4b:43:
3a:4e:3f:ce:33:40:0d:df:4f:33:a8:1a:ac:2b:fa:
46:7a:4a:59:4e:e0:87:e7:50:6c:33:b3:73:1b:e7:
7a:fe:0c:36:62:87:c9:c9:f2:6e:e0:53:56:d9:5b:
19:8f:07:4b:c8:3a:ad:98:9f:bb:77:2d:e9:59:b1:
f5:fd:26:6e:73:6b:0b:3f:22:ff:9d:5f:ef:ad:16:
6a:a4:42:73:46:cd:2a:13:a3:b1:24:fd:d1:c7:ae:
f7:cd:c1:9b:82:81:06:64:d0:3d:6b:ab:03:9d:60:
d5:aa:bc:4a:9c:b8:e8:e0:8c:12:02:a7:9a:00:74:
f9:45:de:5d:15:be:28:5c:55:d4:25:51:3b:7e:c1:
48:72:a3:07:3c:21:18:0a:12:67:2c:12:2a:9f:83:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:5C:A2:93:46:6D:35:B7:25:A5:05:FB:CC:6A:B3:BA:3D:B5:6C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/u9FcopNGbTW3JaUF-8xqs7o9tWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0-46.37.98.255
46.37.114.0/24
46.37.119.0/24
185.92.44.0/24
Signature Algorithm: sha256WithRSAEncryption
50:4b:3a:a2:07:6d:63:21:b8:36:ed:1d:7c:41:b2:cb:69:5d:
5d:74:80:b4:4e:ba:a4:da:c6:76:84:67:8c:6a:c5:a2:e9:f6:
5b:d0:6b:93:f1:0b:4f:c5:76:91:db:2c:ee:94:27:4c:2f:19:
2f:0a:cc:fe:f9:9a:d8:e0:36:6d:d2:0c:a5:b2:2c:8d:a7:a2:
f2:27:93:5c:64:b6:8e:7e:9f:41:54:fa:18:ca:b4:22:1a:6a:
87:dc:49:54:50:d8:dd:d4:df:a7:d9:21:89:73:97:d6:b3:25:
3c:42:7c:32:7d:33:12:8d:88:f8:2b:b2:68:be:33:41:7c:e3:
b1:f1:b6:90:9a:a6:de:a3:60:4e:0e:00:9b:8f:34:2a:5c:0b:
d1:ac:ce:26:b8:c0:ba:9b:13:00:95:37:ce:3a:1b:68:fe:6c:
61:94:84:95:7d:14:f7:98:05:18:73:69:0e:8c:eb:83:f6:14:
9b:52:99:26:ac:9d:7d:2b:78:f5:63:4a:f3:0a:88:b2:da:60:
81:e5:52:0a:e1:99:12:b9:13:a3:3c:3d:59:ad:84:23:5d:f9:
89:05:c5:b8:42:df:99:40:56:d1:40:b1:8e:39:65:49:f0:a9:
26:93:e0:b4:82:b2:e2:97:42:bb:0b:09:ff:55:13:bd:76:86:
69:5e:2d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org