Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/imhmtCoQa4270mXPV_B_9boO5xA.roa
File: imhmtCoQa4270mXPV_B_9boO5xA.roa (raw, json)
Hash identifier: sFxUAKlAH1OM+pRI4MVFCFGCG6r80YwbcS0x3IbKGWE=
Subject key identifier: 8A:68:66:B4:2A:10:6B:8D:BB:D2:65:CF:57:F0:7F:F5:BA:0E:E7:10
Certificate issuer: /CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
Certificate serial: 016A18C0
Authority key identifier: 03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/imhmtCoQa4270mXPV_B_9boO5xA.roa
Signing time: Sat 01 Jan 2022 04:57:22 +0000
ROA not before: Sat 01 Jan 2022 04:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207429
IP address blocks: 213.232.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23730368 (0x16a18c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03452c9dbfc9e4193c7e55e0d2016568d9465285
Validity
Not Before: Jan 1 04:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a6866b42a106b8dbbd265cf57f07ff5ba0ee710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:ce:aa:bd:5d:6a:87:eb:47:88:a5:3a:fa:
0d:0f:c4:ec:8e:fa:51:a7:c9:0a:86:99:ad:14:6b:
ec:4f:1b:27:18:5d:d0:b4:4b:83:07:17:74:b8:3e:
25:2a:ed:9f:a7:8c:3b:e6:4e:3d:1c:d4:e5:0e:c0:
00:3b:71:e1:47:7d:83:1b:ea:9d:a6:7e:42:62:83:
ec:d0:bd:93:c4:f3:15:d1:64:5e:3b:65:65:fb:d3:
90:e5:0d:ae:6a:72:6f:49:22:52:d2:e2:0f:f1:c2:
bc:01:ac:62:8b:58:fc:a8:bd:70:ca:93:9a:11:0e:
e7:01:a0:c4:e4:95:23:66:2f:ea:d8:47:6d:a8:6a:
13:50:64:63:3b:7c:37:1c:78:01:1b:4a:36:ce:28:
ce:d0:e2:b0:aa:66:75:e3:88:84:fb:48:59:62:a6:
9f:c8:8e:13:da:6f:be:f9:29:39:53:5a:a9:86:42:
ad:c9:2b:02:49:5d:d4:05:be:92:1d:5e:c0:1b:3d:
b9:d8:da:31:10:3c:52:a7:96:a1:27:98:5d:2e:f7:
76:75:a8:38:1a:4b:db:7f:4c:18:1e:73:72:69:b7:
c2:88:18:19:f1:5e:47:3d:ce:55:60:a3:f8:97:26:
43:eb:4e:ff:d5:55:8a:87:66:24:7e:f5:49:61:10:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:68:66:B4:2A:10:6B:8D:BB:D2:65:CF:57:F0:7F:F5:BA:0E:E7:10
X509v3 Authority Key Identifier:
keyid:03:45:2C:9D:BF:C9:E4:19:3C:7E:55:E0:D2:01:65:68:D9:46:52:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0Usnb_J5Bk8flXg0gFlaNlGUoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/imhmtCoQa4270mXPV_B_9boO5xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5fddcb-632d-439e-aa69-d3ee98fc2776/1/A0Usnb_J5Bk8flXg0gFlaNlGUoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.252.0/24
Signature Algorithm: sha256WithRSAEncryption
33:41:40:3c:78:02:7e:bd:ea:fd:e9:cf:7b:d8:e2:03:93:76:
e2:30:01:20:f6:62:3b:4f:e7:51:5f:c4:64:f7:41:4a:16:e0:
5a:a1:82:82:b3:85:4e:aa:b2:5d:3f:c3:5a:6a:20:34:16:16:
5e:f4:9f:53:57:04:0d:8b:79:a3:81:2d:42:12:19:c0:d6:39:
94:2f:da:a0:15:84:03:f9:dd:8d:37:76:9b:06:bd:20:f5:c3:
ba:13:5c:65:c7:29:ab:73:27:20:0a:e1:e4:25:5d:ad:49:2f:
37:5f:ca:11:2b:d6:e0:42:e4:69:10:74:10:db:e2:e4:b9:8e:
62:ef:4a:fe:cc:3f:5e:da:99:9d:9a:a2:e8:38:0b:2f:17:f4:
fc:44:ad:1e:89:ca:38:df:ad:dc:48:a7:2a:a3:f0:3f:43:e7:
a8:a1:12:18:22:6d:e6:4f:4e:b2:f8:3a:b7:04:06:04:a5:02:
7b:75:0e:f7:b5:42:e2:ba:ac:ee:45:70:a7:fb:13:b7:f4:48:
67:f7:ee:6b:74:1e:9f:25:17:31:d2:7d:b4:9e:b3:f3:bf:a9:
eb:16:fa:da:31:29:43:c8:49:8b:62:7a:5c:a9:f6:b8:93:98:
fa:0d:26:ba:ca:63:d8:0b:8b:80:5d:0e:d5:99:53:70:ed:6b:
06:aa:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:47 2023 by rpki-client on console-ams.rpki-client.org