Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/v0YhrU1d8ddeqxNX_NcyQuv-0ac.roa
File: v0YhrU1d8ddeqxNX_NcyQuv-0ac.roa (raw, json)
Hash identifier: 2laMaOwNYYFteEDeeNsG3qPltk8GPPH/HoJKfKYByrI=
Subject key identifier: BF:46:21:AD:4D:5D:F1:D7:5E:AB:13:57:FC:D7:32:42:EB:FE:D1:A7
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0182DF82D454FAD462F585FA3978CF73FF05
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/v0YhrU1d8ddeqxNX_NcyQuv-0ac.roa
Signing time: Sat 27 Aug 2022 13:34:29 +0000
ROA not before: Sat 27 Aug 2022 13:34:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 46.37.109.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:df:82:d4:54:fa:d4:62:f5:85:fa:39:78:cf:73:ff:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 27 13:34:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf4621ad4d5df1d75eab1357fcd73242ebfed1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:6e:d9:ed:46:a9:73:85:98:f0:80:3d:64:
d1:17:c3:3c:62:ad:a1:57:73:f2:50:dc:fa:f3:01:
d6:69:7d:ab:d8:8c:54:f4:eb:e6:a7:b6:f9:88:1d:
6c:a8:05:8e:00:0e:7f:6a:56:b9:0e:77:c0:cd:b0:
0a:43:35:92:81:e7:99:43:5e:8c:28:c7:14:80:81:
13:7c:8c:b0:74:25:99:1c:88:45:6c:2b:76:99:8c:
db:0c:65:32:eb:80:93:a5:aa:d2:d7:69:c5:45:ab:
ec:7c:77:7e:18:02:05:99:a0:95:75:23:22:95:15:
4f:75:d7:57:4e:79:f3:c3:d4:af:22:ee:01:ea:ba:
9a:8e:87:fd:89:46:1c:6e:2c:70:a5:d3:4e:9a:5f:
75:74:54:10:c5:79:57:b8:c1:7a:77:4b:ed:6c:63:
2d:4e:93:fd:32:67:ef:72:d8:a3:37:f7:d8:19:74:
0c:05:6a:6f:45:19:1b:84:7a:c6:b1:51:f5:6d:c1:
e2:1e:52:da:54:bd:c2:f2:99:81:b8:a0:b2:ab:d3:
1a:00:a2:a6:95:38:55:c8:12:26:a0:1e:78:b2:2a:
78:e1:ad:96:ec:e6:4c:28:7e:54:a6:a4:25:50:33:
d4:37:65:d8:07:db:5b:a0:8d:c5:43:82:23:7a:15:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:46:21:AD:4D:5D:F1:D7:5E:AB:13:57:FC:D7:32:42:EB:FE:D1:A7
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/v0YhrU1d8ddeqxNX_NcyQuv-0ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.109.0/24
46.37.114.0/24
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2e:24:88:96:b7:de:c8:83:54:83:d5:5e:89:48:67:f9:04:
ab:f3:8e:20:70:f3:58:97:66:2b:47:da:c3:65:95:66:09:f7:
60:9c:82:67:30:14:d2:97:dd:37:23:1f:37:4d:db:94:21:e1:
5d:08:e7:0c:76:70:54:64:2a:1e:e4:38:56:da:7e:93:cc:26:
d6:50:ef:77:13:9f:82:e6:e8:58:23:33:94:41:50:4e:d9:f5:
b5:8e:8a:6a:32:d7:19:bb:37:8e:e4:3f:90:16:26:d3:0d:44:
9b:12:22:73:f8:42:a8:29:81:81:26:ea:47:fa:fa:48:35:4d:
9b:e5:e0:a2:f0:44:dd:1a:77:1b:a3:72:21:31:4b:f8:7e:77:
ca:18:21:96:2e:47:e7:84:11:c2:58:b6:e5:60:4a:9c:70:36:
d5:5e:a0:49:40:30:38:f0:13:99:b4:2e:d3:bf:ef:7b:6b:40:
5e:60:12:20:aa:02:b7:42:7f:71:89:f6:19:8a:27:66:96:35:
dd:81:5b:5c:30:40:89:62:a9:05:b9:9d:5d:1b:2f:4b:74:85:
82:86:f8:6d:df:37:14:1d:2d:0e:78:e1:c1:89:10:aa:f9:e9:
4d:a1:1b:1c:25:ef:96:03:d1:ee:4a:97:aa:c9:24:e7:bf:f2:
d4:5b:c6:22
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYLfgtRU+tRi9YX6OXjPc/8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjIwODI3MTMzNDI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjQ2MjFhZDRkNWRmMWQ3NWVhYjEzNTdmY2Q3MzI0MmViZmVkMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSVu2e1GqXOFmPCAPWTRF8M8Yq2h
V3PyUNz68wHWaX2r2IxU9Ovmp7b5iB1sqAWOAA5/ala5DnfAzbAKQzWSgeeZQ16M
KMcUgIETfIywdCWZHIhFbCt2mYzbDGUy64CTparS12nFRavsfHd+GAIFmaCVdSMi
lRVPdddXTnnzw9SvIu4B6rqajof9iUYcbixwpdNOml91dFQQxXlXuMF6d0vtbGMt
TpP9MmfvctijN/fYGXQMBWpvRRkbhHrGsVH1bcHiHlLaVL3C8pmBuKCyq9MaAKKm
lThVyBImoB54sip44a2W7OZMKH5UpqQlUDPUN2XYB9tboI3FQ4IjehWFDQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL9GIa1NXfHXXqsTV/zXMkLr/tGnMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvdjBZaHJVMWQ4ZGRlcXhOWF9OY3lRdXYtMGFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiVtAwQA
LiVyAwQALiV0MA0GCSqGSIb3DQEBCwUAA4IBAQBZLiSIlrfeyINUg9VeiUhn+QSr
844gcPNYl2YrR9rDZZVmCfdgnIJnMBTSl903Ix83TduUIeFdCOcMdnBUZCoe5DhW
2n6TzCbWUO93E5+C5uhYIzOUQVBO2fW1jopqMtcZuzeO5D+QFibTDUSbEiJz+EKo
KYGBJupH+vpINU2b5eCi8ETdGncbo3IhMUv4fnfKGCGWLkfnhBHCWLblYEqccDbV
XqBJQDA48BOZtC7Tv+97a0BeYBIgqgK3Qn9xifYZiidmljXdgVtcMECJYqkFuZ1d
Gy9LdIWChvht3zcUHS0OeOHBiRCq+elNoRscJe+WA9HuSpeqySTnv/LUW8Yi
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org