Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/AmLeOcaELfseHnLaCqibgZXZgbA.roa
File: AmLeOcaELfseHnLaCqibgZXZgbA.roa (raw, json)
Hash identifier: VpWYTgWUkVzCXHHcrrjujB3koDt37VfyHJ4qMcbf8E8=
Subject key identifier: 02:62:DE:39:C6:84:2D:FB:1E:1E:72:DA:0A:A8:9B:81:95:D9:81:B0
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 11E4841A
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/AmLeOcaELfseHnLaCqibgZXZgbA.roa
Signing time: Fri 25 Feb 2022 11:51:54 +0000
ROA not before: Fri 25 Feb 2022 11:51:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210512
IP address blocks: 194.5.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300188698 (0x11e4841a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Feb 25 11:51:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0262de39c6842dfb1e1e72da0aa89b8195d981b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:d0:33:d4:95:d2:ca:12:4a:0a:7b:06:bd:
37:02:ec:1d:37:55:47:ca:64:a0:21:65:78:43:ea:
ef:48:5f:f2:52:6c:51:4b:44:ef:a7:c9:07:96:f4:
1b:e9:3a:4e:f3:6a:89:a6:d0:aa:9a:c1:18:a1:2d:
b6:be:64:b7:66:95:b3:d2:b8:17:69:43:59:79:5b:
52:96:3d:0b:36:46:28:10:f8:bb:3d:14:74:3b:d5:
94:3f:c5:02:60:4a:4c:c9:eb:8c:3f:4e:9a:52:cd:
da:7a:3b:f5:c3:03:75:48:a8:13:47:c5:38:a3:15:
53:d1:2c:6a:b1:3b:e0:b4:e4:90:3d:03:b4:b8:9d:
46:50:af:e0:3b:7d:9e:f7:52:57:98:f9:6d:3d:0e:
c5:8f:34:ea:01:77:26:b7:cd:05:e2:f4:5c:b7:87:
d4:73:68:f0:e1:06:9a:57:72:04:c9:cc:23:ef:cb:
10:af:2d:fe:2d:7e:51:96:9f:06:df:e3:33:46:3d:
7d:e6:25:97:c0:d5:24:03:e6:91:a7:a8:c5:f3:88:
ae:81:b1:59:d7:06:1a:a5:5c:dd:e9:b4:e1:e2:6d:
07:62:e6:8f:ed:cd:83:5f:f9:66:43:b5:a8:ec:be:
b0:7d:9b:87:7d:d2:7b:f7:c1:2b:d2:0a:6b:fa:4e:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:62:DE:39:C6:84:2D:FB:1E:1E:72:DA:0A:A8:9B:81:95:D9:81:B0
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/AmLeOcaELfseHnLaCqibgZXZgbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:77:50:55:8a:02:b7:95:72:48:b5:77:90:48:d2:ea:16:72:
3c:fd:d6:f5:f6:86:5e:61:d1:39:4d:b2:a7:c1:64:62:55:66:
aa:de:f6:41:23:bc:c4:c2:eb:5e:f2:5b:9d:6a:0c:4e:00:00:
43:20:17:ea:c9:fc:03:17:a7:71:c3:d5:7e:18:8c:72:6a:66:
59:1f:ee:c0:b5:be:25:2e:de:9f:3e:7c:c3:7f:65:9f:09:df:
47:78:9c:2e:24:0c:84:60:d6:37:55:e9:3c:13:1e:1e:59:ca:
45:a9:30:f7:91:fe:9a:c5:f6:ca:3d:80:52:d6:d7:9f:d0:00:
e9:f9:99:5e:3e:34:a9:87:ef:f1:b0:0e:6a:54:57:8a:16:7e:
10:27:b6:47:59:54:d3:4e:e0:c9:84:8a:e9:8f:59:70:db:9f:
14:72:49:57:b6:99:df:5e:68:a4:91:eb:f8:ed:15:62:5e:2e:
bf:f3:f2:1b:77:4e:15:59:7d:e7:cf:74:19:9e:f2:3b:01:2b:
37:05:34:4e:92:b0:48:d7:1e:55:8d:41:f5:ac:aa:a6:7c:d2:
bd:c5:40:80:7a:7c:45:d0:01:31:2f:93:ca:9a:f9:25:f5:c9:
b2:9c:39:45:e1:ea:70:e4:32:29:f6:6f:9a:ed:d0:cd:a2:81:
a0:07:e6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org