Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/AGMpIJCWQTQMpM35oo01762B4xA.roa
File: AGMpIJCWQTQMpM35oo01762B4xA.roa (raw, json)
Hash identifier: 8JpppbkYvfwGm/SBdUxLeVNU0ppi8O0Sw8mDbVFleo0=
Subject key identifier: 00:63:29:20:90:96:41:34:0C:A4:CD:F9:A2:8D:35:EF:AD:81:E3:10
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 02D0D1
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/AGMpIJCWQTQMpM35oo01762B4xA.roa
Signing time: Tue 22 Feb 2022 11:36:11 +0000
ROA not before: Tue 22 Feb 2022 11:36:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 46.18.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184529 (0x2d0d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Feb 22 11:36:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00632920909641340ca4cdf9a28d35efad81e310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:12:88:4e:e0:6f:92:31:ec:75:d5:8d:0c:66:
6f:17:71:a8:9b:89:77:42:4e:b4:83:c5:83:42:8e:
f3:79:b3:30:6a:fe:3f:d5:a6:ff:fa:96:24:c6:32:
70:d8:8c:16:56:84:1d:79:02:df:d8:ce:b2:1b:2f:
99:2d:de:6b:3b:f3:35:13:0e:81:1a:69:28:06:16:
da:14:72:ef:02:a8:2f:a8:08:38:0c:a3:63:8c:9a:
96:9b:7e:b6:39:84:ba:2f:eb:2a:f4:ef:fe:e1:82:
4b:06:d6:40:27:a7:c3:63:bc:48:ea:c8:43:5d:a5:
0e:3b:73:60:92:d6:0f:6c:bb:ab:95:0d:49:8c:9b:
ce:95:93:01:2a:6c:ac:df:b4:96:e7:c5:51:52:55:
ed:cf:5c:2f:a6:b9:28:a1:81:ce:3b:6f:b3:96:34:
7d:6b:f0:99:34:82:28:97:b8:84:28:9d:6f:8e:11:
1a:e7:07:80:da:9c:6f:f7:8c:5a:71:ff:72:ba:c1:
83:c0:b5:06:7a:cc:92:dc:ee:62:ed:b3:7e:2a:72:
41:5a:eb:88:e8:dc:d5:a1:df:c9:f6:e0:bc:e0:18:
8a:c5:d2:52:12:03:28:31:ba:cc:b4:ce:9e:a9:03:
46:89:c8:ad:a1:2c:15:29:b5:00:ef:2f:21:c9:a4:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:63:29:20:90:96:41:34:0C:A4:CD:F9:A2:8D:35:EF:AD:81:E3:10
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/AGMpIJCWQTQMpM35oo01762B4xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5b:fd:2e:7f:49:ae:00:4f:2f:64:38:82:de:ac:f8:0c:dd:
6f:86:50:f8:19:3f:c0:00:b4:7c:cb:18:42:a6:a0:7c:20:e0:
03:cf:eb:ea:02:a1:aa:6e:4f:cb:5e:aa:dc:fb:2b:a4:ec:5f:
f1:55:f4:9f:d4:39:22:7e:f3:91:52:a4:42:25:88:c0:c6:81:
af:32:55:6e:02:13:8c:92:58:0d:c9:49:b4:2a:c6:7c:8b:12:
f3:e6:87:ed:cb:7b:49:bf:a7:26:4e:53:85:3d:5b:69:4b:b9:
07:b7:5e:41:bf:1b:d1:3d:40:50:8f:cf:0c:07:2c:55:c4:4e:
53:1d:0d:80:a3:b2:f6:1f:e2:a7:87:d1:49:28:53:91:b5:ef:
67:04:49:b7:b1:97:72:6d:ab:d2:80:c0:ec:1a:8c:46:2e:43:
85:76:41:7c:35:32:53:77:7a:e3:0e:f3:41:27:f7:d0:df:41:
0e:3f:55:50:ee:52:79:99:d9:75:5c:5b:85:68:d2:77:e5:8c:
22:cd:90:eb:2b:b3:46:96:d7:f4:4b:30:9a:bf:0c:f1:49:fd:
fa:e6:62:78:b6:70:d7:a5:4e:2e:df:d2:fc:9e:db:d6:8a:c2:
e5:c9:b7:3e:98:9f:da:0a:41:b5:33:30:52:cc:5e:8a:37:b9:
fb:d0:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-ams.rpki-client.org