Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/iMgtWrL4g0d5DOm-CUzfDuJIBOY.roa
File: iMgtWrL4g0d5DOm-CUzfDuJIBOY.roa (raw, json)
Hash identifier: 2OtME/I13qLoHb10JvgFYzmNogwGNsCkz81XLtc3yP8=
Subject key identifier: 88:C8:2D:5A:B2:F8:83:47:79:0C:E9:BE:09:4C:DF:0E:E2:48:04:E6
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01839732BC2480032B5C55FE0F9052C8F3C1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/iMgtWrL4g0d5DOm-CUzfDuJIBOY.roa
Signing time: Sun 02 Oct 2022 05:37:08 +0000
ROA not before: Sun 02 Oct 2022 05:37:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 46.37.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:97:32:bc:24:80:03:2b:5c:55:fe:0f:90:52:c8:f3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 2 05:37:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88c82d5ab2f88347790ce9be094cdf0ee24804e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:64:75:b5:f9:00:32:12:d8:6d:8d:97:3b:
77:e7:b7:7f:9e:5e:ad:4d:ab:06:70:da:fb:79:59:
09:73:6b:f0:0e:79:2c:27:1b:e4:b3:07:94:93:88:
2f:60:0c:c9:99:e9:6f:7e:2c:f8:a6:fd:64:8b:49:
fa:84:3e:b9:a1:db:73:90:05:af:97:bd:ba:2e:ae:
7f:c5:8d:10:74:6e:64:ff:e5:29:f9:16:56:1c:5c:
0c:27:93:20:f5:8a:5c:88:d1:de:08:88:91:67:95:
22:84:2b:8f:2d:77:44:9f:11:8f:e8:03:6f:a7:8c:
b1:3e:73:30:0a:3e:0c:11:be:db:33:14:80:fc:ca:
26:21:4d:10:ae:d5:cd:a0:59:8a:42:55:f8:9b:11:
43:6f:0b:7d:4a:64:7f:b1:96:62:e9:08:b1:7d:6b:
e4:82:58:b2:a9:dc:8e:bd:52:6a:f0:10:8e:d0:d3:
43:e0:6d:b1:83:c8:11:38:f5:44:c9:06:d7:94:a9:
27:ca:c8:31:9b:19:17:d2:0a:1e:d1:dc:1d:0c:d5:
1e:cc:1e:ba:b4:75:9b:11:38:08:98:2d:6b:e3:29:
5b:40:9a:e5:26:3d:0a:05:b0:3c:68:0f:43:e5:3a:
64:ea:10:50:5f:80:c2:c2:76:b6:9e:7a:ef:7d:79:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C8:2D:5A:B2:F8:83:47:79:0C:E9:BE:09:4C:DF:0E:E2:48:04:E6
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/iMgtWrL4g0d5DOm-CUzfDuJIBOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.103.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7a:7c:70:ce:0c:43:48:9f:99:d0:01:49:b1:83:33:bd:05:
c4:ce:63:94:f2:ce:22:c3:45:32:67:bb:d4:b9:27:ab:b0:3a:
c0:3a:4e:ce:84:c9:0c:ed:3d:c4:8f:c2:21:4e:c5:c5:32:4b:
4d:b7:0c:08:90:a8:e9:0c:7d:de:66:0f:6c:b2:ea:3c:b1:fc:
f4:a2:0f:f3:0a:6e:48:93:b2:67:59:d3:7e:41:3a:d5:d1:82:
a2:eb:98:29:3e:8c:d9:af:e0:15:f1:e2:fd:44:be:83:fa:d0:
0a:7a:d9:46:9c:2c:42:43:76:06:7d:db:86:7b:51:4f:b4:e9:
f5:42:e3:a2:61:4a:64:9b:9e:61:79:fa:a2:e5:83:be:12:ff:
64:69:aa:b6:42:5f:1d:cf:85:43:f7:43:29:0e:52:2d:47:89:
2a:c3:5a:98:36:db:33:78:f1:97:d2:a6:cd:fb:c4:2a:c0:38:
00:8e:57:e5:f3:43:79:4c:30:37:02:2f:27:65:55:e3:36:16:
ba:3b:06:a3:01:e2:bf:3a:fb:ca:1d:7b:6e:96:96:e0:42:0d:
7d:48:9e:43:56:a8:88:8b:2b:e9:25:c4:cd:e3:8a:38:59:c4:
b5:f8:7f:ac:72:c3:06:38:13:07:81:51:bc:32:d7:9c:57:f4:
25:1d:4c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:35 2023 by rpki-client on console-ams.rpki-client.org