Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AwMYqi--VKZxJM68L7-ds3kgmcg.roa
File: AwMYqi--VKZxJM68L7-ds3kgmcg.roa (raw, json)
Hash identifier: vz2apzF9r0rRK3tmABv7Xug0i5s1uY4jHRzdmchfnc8=
Subject key identifier: 03:03:18:AA:2F:BE:54:A6:71:24:CE:BC:2F:BF:9D:B3:79:20:99:C8
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0183A505D30DFBE5ECCDDF52222C2255FCCD
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AwMYqi--VKZxJM68L7-ds3kgmcg.roa
Signing time: Tue 04 Oct 2022 22:02:45 +0000
ROA not before: Tue 04 Oct 2022 22:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 46.37.103.0/24 maxlen: 24
46.37.124.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a5:05:d3:0d:fb:e5:ec:cd:df:52:22:2c:22:55:fc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 4 22:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=030318aa2fbe54a67124cebc2fbf9db3792099c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:a3:32:0b:96:4e:6d:b0:13:54:29:fd:e2:
47:3e:2b:e8:bc:2c:f9:29:ac:88:a1:87:b2:2a:71:
ff:f3:69:6e:bd:13:ca:a1:47:d6:db:11:dc:17:59:
21:47:d2:7b:d8:15:a3:c0:3c:0d:38:fd:a4:6f:b6:
0c:2b:0f:06:ad:b3:f2:5a:f0:aa:23:58:ff:48:fc:
ba:26:49:c6:5c:9d:2c:d1:fc:a2:3b:d7:bf:c1:c2:
1f:26:2a:ff:04:63:8a:34:46:0f:fb:bc:ca:8f:74:
66:63:92:c9:82:c0:f7:ff:8d:2b:ea:f7:74:67:3b:
ee:59:34:3f:e4:c9:3f:71:fa:85:39:1f:06:85:4c:
46:4c:43:d9:0c:18:b0:f1:4e:0e:53:e7:f2:40:36:
5c:ff:6a:d7:26:08:fa:cc:43:22:4f:bc:2b:ee:58:
a6:e5:ee:e5:63:13:fa:a7:e3:16:2c:a3:09:3c:39:
13:84:4d:e5:46:fe:6a:d5:05:72:04:7f:7d:4c:ee:
27:88:78:83:fc:33:ad:2c:84:56:df:d6:1e:2c:b5:
2d:c4:71:db:a2:62:23:16:c4:b0:4d:53:bb:98:a5:
04:b2:cf:09:92:da:ae:b1:37:be:98:91:87:65:79:
38:0e:1b:30:37:f0:22:79:11:5b:d0:9d:9e:03:9e:
7b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:03:18:AA:2F:BE:54:A6:71:24:CE:BC:2F:BF:9D:B3:79:20:99:C8
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AwMYqi--VKZxJM68L7-ds3kgmcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.103.0/24
46.37.123.0-46.37.124.255
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:b2:b1:ed:dd:03:64:9c:20:9e:77:48:1a:84:1e:ae:ef:b5:
c2:dc:6e:c5:c8:c2:ae:7a:3c:1f:4b:82:ce:88:d8:10:1a:49:
cf:67:f9:33:e4:c0:f0:9a:53:e1:8d:af:18:22:94:0a:82:0d:
54:88:2a:1b:93:58:8b:ea:f7:1e:0e:f8:a0:35:72:43:dd:09:
32:9c:13:52:4f:2f:07:61:bc:e1:06:1e:a1:49:18:02:5e:cd:
8a:0e:14:fe:af:67:02:75:87:63:9a:0a:b2:67:f1:b4:54:05:
27:52:41:26:4c:ed:a1:e5:48:a7:08:ad:9b:b0:31:09:41:0c:
d0:fc:27:f6:45:3a:f1:ec:99:85:ac:b2:f0:75:1f:23:be:1e:
2f:ae:43:e0:c3:89:a7:c3:43:1e:c4:62:ac:0b:ed:c5:ef:08:
71:ef:c5:fb:5b:18:4f:89:3b:8c:b3:4a:08:36:a4:ac:f9:c1:
52:31:f5:53:1f:17:e5:23:fb:1a:4f:b2:82:e4:81:d4:ec:0f:
d9:88:60:6f:c6:b3:a8:9c:27:65:e7:6d:91:f4:03:77:f0:0e:
8f:1b:89:0f:3a:b2:a6:1c:c4:a3:61:cb:a6:ef:33:3c:97:79:
2d:b8:80:23:2d:bd:bb:e7:76:e7:1f:32:e1:3a:cd:09:aa:5d:
ea:a0:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org