Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Iscr9LCGV6JeG4zIrpfityKjoKw.roa
File: Iscr9LCGV6JeG4zIrpfityKjoKw.roa (raw, json)
Hash identifier: RQMxFuErStOFPoY614YcSKtw02tRq6sbrN3DyfFNEzc=
Subject key identifier: 22:C7:2B:F4:B0:86:57:A2:5E:1B:8C:C8:AE:97:E2:B7:22:A3:A0:AC
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0183A86632D887773CD046B3A166D23EF477
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Iscr9LCGV6JeG4zIrpfityKjoKw.roa
Signing time: Wed 05 Oct 2022 13:46:53 +0000
ROA not before: Wed 05 Oct 2022 13:46:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 46.37.125.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:66:32:d8:87:77:3c:d0:46:b3:a1:66:d2:3e:f4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 5 13:46:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22c72bf4b08657a25e1b8cc8ae97e2b722a3a0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:87:b7:d7:63:0f:44:92:cf:6b:a0:b7:6c:
f5:ed:49:32:ac:84:e2:08:b3:b3:d5:d9:d9:c7:29:
a8:e7:a7:7d:94:6d:b2:90:44:ce:c1:af:17:17:c6:
5a:7d:06:22:f7:7e:c1:33:19:b1:aa:13:d0:9a:ef:
07:e4:d0:a1:f4:37:70:0f:f7:03:d5:bb:3e:db:63:
ac:10:ab:ed:42:1d:a3:ec:7c:0d:b1:1d:55:31:fb:
7f:ee:00:02:5e:0d:19:6e:a0:16:c7:c0:b3:fa:a1:
5d:0b:5a:36:b3:45:9a:77:6d:3a:35:b0:cf:54:e4:
53:b5:b9:ba:22:1f:ad:b0:c5:f6:5d:0d:25:e6:d6:
16:49:b2:e3:e7:dd:75:1e:de:23:4c:7c:ce:17:09:
a2:a8:b5:15:94:18:54:be:db:28:6c:43:15:59:18:
93:bf:f9:82:2c:95:50:d9:c0:59:ec:8a:2d:cc:b4:
01:78:a2:74:70:68:e7:5e:fa:96:65:77:32:31:a3:
b2:f1:c4:9a:ca:64:5f:20:68:93:24:0d:73:f4:6a:
aa:dc:a0:a0:c7:8a:c4:8d:30:54:45:18:da:cf:89:
65:28:06:2e:98:23:2a:44:c2:b9:4b:9a:c5:73:57:
ab:02:8b:bb:c5:11:ae:58:1b:c6:9e:30:43:42:ee:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C7:2B:F4:B0:86:57:A2:5E:1B:8C:C8:AE:97:E2:B7:22:A3:A0:AC
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Iscr9LCGV6JeG4zIrpfityKjoKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.125.0-46.37.126.255
Signature Algorithm: sha256WithRSAEncryption
38:96:60:9c:1d:92:eb:c8:f0:81:4d:f9:93:72:92:d8:2c:e3:
43:d0:82:89:d0:23:74:c5:bc:aa:d5:9b:0e:6f:70:2d:a4:25:
3d:c6:67:0c:35:63:bc:16:6f:c6:7e:2b:0a:27:44:f5:b0:94:
70:12:fc:db:23:5b:ba:03:d4:5a:97:df:95:0c:45:f1:76:bc:
28:6a:0d:a3:63:e7:4f:c4:27:9a:7e:c4:09:60:8d:27:82:38:
7c:81:b5:00:18:bb:ea:50:52:88:81:41:19:ee:f3:70:91:fa:
12:d1:57:a9:5d:24:29:10:b7:d9:30:5d:b7:e1:06:56:01:08:
29:fc:00:a5:4b:76:cc:77:67:d3:ff:dc:f2:43:ef:f2:07:44:
e5:9a:9c:dd:80:55:44:97:3f:62:ef:1b:1e:bf:72:98:4a:97:
41:ee:fc:d9:91:9d:3d:8b:44:05:7e:1f:f3:af:7e:be:ed:87:
8f:e1:d1:e4:b7:e0:27:41:60:e0:e3:76:c8:9e:81:c5:e5:bb:
58:ec:55:a0:49:a7:3e:e6:d1:8d:1f:4f:fa:a3:a1:03:32:90:
57:8e:44:c4:34:f6:09:e6:ea:3d:98:c1:43:1f:54:f0:55:81:
ac:0d:8f:fb:b7:a3:0d:71:5a:43:e5:84:8f:f4:0c:18:74:fc:
57:0e:45:a3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYOoZjLYh3c80EazoWbSPvR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjIxMDA1MTM0NjUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmM3MmJmNGIwODY1N2EyNWUxYjhjYzhhZTk3ZTJiNzIyYTNhMGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+CHt9djD0SSz2ugt2z17UkyrITi
CLOz1dnZxymo56d9lG2ykETOwa8XF8ZafQYi937BMxmxqhPQmu8H5NCh9DdwD/cD
1bs+22OsEKvtQh2j7HwNsR1VMft/7gACXg0ZbqAWx8Cz+qFdC1o2s0Wad206NbDP
VORTtbm6Ih+tsMX2XQ0l5tYWSbLj5911Ht4jTHzOFwmiqLUVlBhUvtsobEMVWRiT
v/mCLJVQ2cBZ7IotzLQBeKJ0cGjnXvqWZXcyMaOy8cSaymRfIGiTJA1z9Gqq3KCg
x4rEjTBURRjaz4llKAYumCMqRMK5S5rFc1erAou7xRGuWBvGnjBDQu65NQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCLHK/SwhleiXhuMyK6X4rcio6CsMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvSXNjcjlMQ0dWNkplRzR6SXJwZml0eUtqb0t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAuJX0D
BAAuJX4wDQYJKoZIhvcNAQELBQADggEBADiWYJwdkuvI8IFN+ZNyktgs40PQgonQ
I3TFvKrVmw5vcC2kJT3GZww1Y7wWb8Z+KwonRPWwlHAS/NsjW7oD1FqX35UMRfF2
vChqDaNj50/EJ5p+xAlgjSeCOHyBtQAYu+pQUoiBQRnu83CR+hLRV6ldJCkQt9kw
XbfhBlYBCCn8AKVLdsx3Z9P/3PJD7/IHROWanN2AVUSXP2LvGx6/cphKl0Hu/NmR
nT2LRAV+H/Ovfr7th4/h0eS34CdBYODjdsiegcXlu1jsVaBJpz7m0Y0fT/qjoQMy
kFeORMQ09gnm6j2YwUMfVPBVgawNj/u3ow1xWkPlhI/0DBh0/FcORaM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org