Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/_AWSdgp5_u5RBYiVCZJ2xpZcG0g.roa
File: _AWSdgp5_u5RBYiVCZJ2xpZcG0g.roa (raw, json)
Hash identifier: ooyHTmwdRH43UWdWNsF37GlXiP3TWUZqPa4OztppfsM=
Subject key identifier: FC:05:92:76:0A:79:FE:EE:51:05:88:95:09:92:76:C6:96:5C:1B:48
Certificate issuer: /CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
Certificate serial: 02D74490
Authority key identifier: 4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/_AWSdgp5_u5RBYiVCZJ2xpZcG0g.roa
Signing time: Sat 01 Jan 2022 05:01:39 +0000
ROA not before: Sat 01 Jan 2022 05:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 185.55.57.0/24 maxlen: 24
185.55.58.0/24 maxlen: 24
185.55.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47662224 (0x2d74490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
Validity
Not Before: Jan 1 05:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc0592760a79feee51058895099276c6965c1b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:7b:66:8b:6d:ec:23:43:7a:99:a3:24:c0:
76:71:57:7f:15:87:fd:ea:53:5d:f6:7e:13:a5:cc:
d9:70:fd:3e:17:64:47:fe:1e:45:9c:bf:85:f9:c1:
2e:c5:1f:55:94:01:e0:1a:d4:e3:e7:96:39:78:30:
e0:9b:db:cd:82:7e:7e:18:75:7b:6e:a9:13:de:75:
0d:46:07:5e:e0:a3:f6:ca:13:d7:74:68:a5:52:68:
3d:d6:06:75:5f:56:75:e7:e6:98:da:81:f0:02:20:
09:51:31:55:cf:b1:4c:7f:b7:11:08:4e:6f:75:74:
8a:f1:5b:17:d6:37:4d:15:d8:91:dd:ae:35:bf:e2:
2c:2c:97:15:1a:25:9e:f2:5a:b3:eb:0a:05:aa:f4:
49:c3:a0:d0:1e:d3:88:47:51:e7:22:b4:20:f2:45:
bc:d5:43:d9:51:f9:b2:20:07:9e:3f:3e:51:1a:33:
5a:41:72:85:38:ac:f6:5d:7d:c5:0a:37:a7:8f:14:
0e:a7:44:b4:8e:f8:8c:8e:cd:7a:b2:ec:f7:fd:f9:
0c:2b:73:4b:c3:e4:9c:e9:9c:1e:68:76:24:b7:42:
75:48:28:f0:e2:75:36:f3:15:82:3c:58:55:8e:e4:
6c:16:a2:9c:40:da:03:47:4b:33:56:56:3b:9e:3f:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:92:76:0A:79:FE:EE:51:05:88:95:09:92:76:C6:96:5C:1B:48
X509v3 Authority Key Identifier:
keyid:4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/_AWSdgp5_u5RBYiVCZJ2xpZcG0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.57.0-185.55.59.255
Signature Algorithm: sha256WithRSAEncryption
aa:c3:a3:e5:60:e1:f4:8e:46:a7:db:b9:56:e9:e8:00:8f:a0:
16:1b:08:97:42:14:18:c9:61:2d:34:a2:4a:08:e5:f0:13:ee:
ca:78:87:65:9f:a9:2c:53:55:0f:4c:e0:54:9e:4f:98:ed:44:
66:fa:05:46:bd:e7:3e:cc:b0:cb:ef:5b:12:69:4c:9b:3f:5a:
3e:93:be:82:f6:28:3b:86:3d:44:1b:1e:16:5e:68:d2:2d:ed:
76:2b:97:c9:00:37:e9:22:89:0c:a2:86:fa:e4:7b:24:cb:e1:
08:bd:9e:47:ca:3c:7e:c9:b8:e4:5f:32:84:7d:20:0c:fc:f3:
1c:69:f3:06:26:de:fb:72:73:ce:2b:7d:f7:38:4c:28:29:85:
25:b7:1d:66:c8:ed:6f:9e:e2:e8:dc:07:5e:07:8b:1e:24:89:
57:84:c9:89:50:4c:f0:2b:69:0a:f5:ab:1d:df:48:ab:b6:2c:
62:3f:19:3c:a1:1a:04:67:31:60:11:20:13:06:e9:5c:10:89:
33:2c:a8:d0:73:cb:30:31:f8:6e:ea:84:10:61:e7:df:e8:5f:
7d:41:39:04:d0:e9:4a:d5:93:d6:86:51:88:8c:66:ca:6f:ac:
fb:5a:9f:c0:99:50:71:3a:98:70:79:3a:60:e3:f0:8f:ac:f3:
80:d1:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:59 2023 by rpki-client on console-ams.rpki-client.org