Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vWqj0xLWwsXVrHKj8ETQ628ON9g.roa
File: vWqj0xLWwsXVrHKj8ETQ628ON9g.roa (raw, json)
Hash identifier: QIeriFCUiYMIQ6QbtgVguc+3/ONJ+pCBLxN9fs3QSu0=
Subject key identifier: BD:6A:A3:D3:12:D6:C2:C5:D5:AC:72:A3:F0:44:D0:EB:6F:0E:37:D8
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0378EB90
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vWqj0xLWwsXVrHKj8ETQ628ON9g.roa
Signing time: Tue 25 Jan 2022 03:46:54 +0000
ROA not before: Tue 25 Jan 2022 03:46:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 46.37.99.0/24 maxlen: 24
46.37.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58256272 (0x378eb90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 25 03:46:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd6aa3d312d6c2c5d5ac72a3f044d0eb6f0e37d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:cb:f7:df:0f:ad:18:b3:a1:c0:c6:ed:36:
7f:c6:02:63:78:65:0f:51:2f:26:65:cf:fb:9c:83:
3c:cb:c9:06:65:64:1f:da:14:d9:9b:1e:02:8a:ab:
58:dc:b6:c6:d2:13:f9:24:06:c3:87:2d:b6:84:28:
89:f1:7d:40:36:c9:00:04:d8:53:dc:59:e9:cd:8f:
17:98:93:15:74:5a:7d:79:9c:a0:d7:51:5b:92:68:
19:a5:35:85:f6:6a:4f:40:64:6e:18:12:59:7f:0f:
00:85:5a:b2:31:4f:8a:0b:07:50:8c:1c:7e:31:4f:
fe:a3:db:c3:f3:a0:54:bd:47:4b:f3:6a:d7:a1:8a:
58:18:57:4a:02:35:b6:7a:43:38:b9:93:ad:30:e0:
57:f7:c5:5a:38:f4:14:10:56:a3:33:eb:ed:68:e1:
63:31:be:a3:8c:96:a6:c6:11:46:b5:ab:99:17:7e:
2b:1a:9b:2f:4e:3b:ce:2d:9e:d1:c9:1f:86:f5:bd:
9f:4a:0d:e5:81:0b:eb:44:5e:4e:93:00:29:96:68:
02:7e:a3:99:b7:5a:a2:92:86:53:50:ca:fd:27:d2:
e4:f2:5c:25:4a:74:7e:3f:a7:13:fc:0c:14:7c:a3:
6e:55:3f:08:af:4a:2f:29:25:e5:a1:b9:ae:b0:db:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:A3:D3:12:D6:C2:C5:D5:AC:72:A3:F0:44:D0:EB:6F:0E:37:D8
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vWqj0xLWwsXVrHKj8ETQ628ON9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:90:4c:c4:cd:44:5a:72:ec:be:2d:f8:77:67:01:b1:74:65:
fc:32:c3:b1:b4:39:57:5e:5e:7f:a7:7a:0a:66:21:e9:0e:f4:
3a:6f:23:2a:9a:02:04:33:75:b8:e0:e3:58:af:7c:92:4d:e6:
37:20:a1:86:e3:71:c2:b7:5c:e4:bd:22:bb:99:80:3e:3d:99:
b2:8c:0e:c8:64:e6:89:0e:df:8b:49:15:41:4b:fe:f3:c8:24:
91:99:8d:ea:5a:0d:88:33:1f:0d:8f:dc:a2:13:da:16:9d:8c:
e8:d4:8f:de:be:bf:5b:46:70:db:50:ad:70:cc:c0:fe:cc:11:
6b:e6:ff:6f:3d:a6:24:e4:44:03:1c:72:c5:6f:f5:91:36:76:
29:d0:07:e8:47:94:08:b3:1a:b3:eb:be:b8:08:08:7d:6a:bc:
73:3a:79:e6:79:32:c6:8c:fa:2b:ac:3a:d9:2b:7b:26:33:97:
08:89:b6:4a:ef:c2:c2:c6:70:49:5f:e1:59:40:00:6f:5b:b4:
b9:a0:77:7d:3f:be:60:f2:af:c1:cc:bc:07:e6:7d:83:80:32:
5c:67:07:87:e0:26:99:04:71:c0:07:46:09:f2:20:70:fe:a6:
e0:7a:97:c4:a9:f2:3e:ca:ce:c5:59:46:3f:51:35:fc:40:04:
8e:ad:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org