Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wd2w6NrR0E1XjK9d4pFqOd7_lQo.roa
File: wd2w6NrR0E1XjK9d4pFqOd7_lQo.roa (raw, json)
Hash identifier: JmDr5r8mIPndCX0BDsM/Na3gc5/piSKPOU2eeJHIMFQ=
Subject key identifier: C1:DD:B0:E8:DA:D1:D0:4D:57:8C:AF:5D:E2:91:6A:39:DE:FF:95:0A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 052166CF
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wd2w6NrR0E1XjK9d4pFqOd7_lQo.roa
Signing time: Sat 25 Jun 2022 08:08:15 +0000
ROA not before: Sat 25 Jun 2022 08:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.108.0/24 maxlen: 24
46.37.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86075087 (0x52166cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 25 08:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1ddb0e8dad1d04d578caf5de2916a39deff950a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:fc:e5:b4:46:bd:fd:d2:e5:c7:eb:14:d4:
c4:c6:0a:68:86:7b:9d:4b:85:dd:15:de:0a:c9:bb:
b1:85:f0:17:d3:f8:e2:57:0e:29:c3:ac:b8:ac:14:
4e:a2:40:d9:8d:cc:9b:c7:4e:ed:12:62:e0:1a:b1:
ed:b0:ab:b2:5e:85:f6:87:94:2d:a7:de:59:6b:9c:
81:8b:9a:87:79:e9:28:4d:f8:5a:69:18:ec:d9:4b:
f2:67:58:86:0f:49:06:7d:c2:13:a3:7f:ba:34:a6:
e1:62:42:ca:3f:5c:d7:3f:bc:ba:49:7f:51:c6:d1:
b3:b6:48:74:74:11:19:85:4e:3a:cd:da:18:19:ab:
8c:97:2c:fe:2c:9c:3a:37:fd:62:46:37:74:22:12:
e5:95:53:f3:4c:97:81:31:e8:6f:01:b3:c4:f1:41:
84:ff:04:a2:9c:c5:83:2e:22:2f:eb:0a:b6:2b:d7:
3c:14:1f:04:02:77:9d:45:ab:ce:12:3c:df:fb:99:
b4:3e:9a:68:54:1e:16:7b:18:8f:37:f0:f5:c2:f1:
6a:69:85:2b:a3:23:1d:6a:18:2c:28:07:bf:b5:c8:
8f:08:f9:e4:c0:4e:8d:0b:bb:51:72:f1:34:17:1c:
14:be:c7:74:7a:68:f1:16:93:a4:04:21:95:13:8f:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:B0:E8:DA:D1:D0:4D:57:8C:AF:5D:E2:91:6A:39:DE:FF:95:0A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wd2w6NrR0E1XjK9d4pFqOd7_lQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.101.0/24
46.37.108.0/24
46.37.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:73:58:b3:21:01:1e:33:87:fd:89:13:cf:7d:f0:71:de:bd:
43:6f:cc:97:8a:d1:49:42:8f:2a:47:a4:75:61:c8:d6:eb:f9:
54:21:57:43:d5:5d:0d:9a:84:22:f3:15:78:6a:2f:6d:5f:31:
24:41:24:8b:67:70:2e:6f:90:23:50:c9:71:53:67:0b:35:97:
bc:96:19:5f:84:34:4d:7f:90:a7:02:02:d1:57:44:f4:93:10:
33:88:8f:2b:4a:70:5b:c8:e1:ef:09:aa:16:f3:d8:e0:c8:23:
fe:a6:04:e6:52:76:5c:15:99:ed:31:b3:0c:bf:62:10:35:32:
2e:87:79:cb:3d:53:d9:81:d0:3f:d8:22:18:92:8d:ab:e0:be:
29:8a:7e:59:c6:ce:ba:aa:c2:4e:36:a9:20:79:c7:d1:9a:de:
70:ce:8b:4f:eb:97:88:c5:5d:42:f0:94:7c:da:5b:e7:95:ea:
54:e2:82:20:3f:7e:58:b3:8c:d8:7c:52:5d:f8:fa:ad:2d:1d:
7f:07:a7:75:d5:9f:41:84:ab:45:85:fd:8c:d2:26:e7:27:d8:
7e:00:9d:5e:a0:a0:b0:0e:93:67:bd:a9:15:65:5b:99:41:d7:
a8:8c:b2:2c:11:0a:61:cb:9b:f6:88:56:91:9c:e7:70:66:9d:
eb:bf:9f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org