Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AMR0uQCss9IXwyGnaCX4xYyluQM.roa
File: AMR0uQCss9IXwyGnaCX4xYyluQM.roa (raw, json)
Hash identifier: UnoUPGDaKLlSUjrgupkGF/sU7CWrt0Qna7XhcNQZ4zU=
Subject key identifier: 00:C4:74:B9:00:AC:B3:D2:17:C3:21:A7:68:25:F8:C5:8C:A5:B9:03
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 0184F90BA446D974392B0DEF3671EF533DDC
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AMR0uQCss9IXwyGnaCX4xYyluQM.roa
Signing time: Fri 09 Dec 2022 22:40:00 +0000
ROA not before: Fri 09 Dec 2022 22:40:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21734
IP address blocks: 195.122.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f9:0b:a4:46:d9:74:39:2b:0d:ef:36:71:ef:53:3d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Dec 9 22:40:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00c474b900acb3d217c321a76825f8c58ca5b903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:dd:56:19:c7:46:2e:0e:b4:b7:fa:9b:d8:
79:c1:df:02:8d:74:a8:69:35:de:b0:69:b8:55:be:
1f:ed:0e:f3:74:ad:ea:7b:6d:d5:a9:c6:21:62:f1:
ac:d6:22:41:eb:4d:2f:2d:4e:b7:cf:df:c5:54:d5:
48:ee:8a:08:be:61:52:ca:95:59:1a:18:62:4f:ff:
3d:06:ea:7c:4b:5f:c2:7a:82:97:56:62:95:60:33:
e4:41:0a:19:8f:04:49:86:50:e8:c5:4c:ac:0d:c2:
b8:57:92:b3:62:29:06:a5:65:36:f5:7c:4f:c4:9b:
7f:5d:2e:ca:39:49:5c:a2:b7:82:e9:9a:c6:e8:3e:
aa:d1:ff:56:eb:67:f6:18:ba:1f:c8:fc:11:b3:b5:
15:a7:38:f5:fe:75:1d:a1:bc:91:31:ef:1d:49:b6:
2f:66:e2:3d:d8:f4:66:ca:aa:41:f5:91:80:40:19:
16:3b:51:c7:a9:17:79:dd:8a:33:36:c7:34:3a:53:
7e:3d:ef:13:3a:35:a2:4b:0b:f7:12:db:91:35:35:
fa:a1:34:28:38:4c:0f:6a:dc:4c:85:fa:66:46:52:
51:9a:cb:63:c1:1b:84:a5:92:96:c5:8b:6a:65:c4:
4c:e8:95:6d:5d:cf:8f:f2:22:0a:12:89:78:4a:c3:
37:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C4:74:B9:00:AC:B3:D2:17:C3:21:A7:68:25:F8:C5:8C:A5:B9:03
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AMR0uQCss9IXwyGnaCX4xYyluQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
74:3e:31:9c:2b:1a:4a:d6:54:2e:5c:1c:77:6a:1b:02:20:a7:
08:c2:4c:20:c8:40:77:22:6a:5f:82:d2:dd:cd:01:06:1d:1d:
ca:c0:57:c6:6d:44:1d:64:b6:1d:4d:58:9b:b9:69:62:6d:15:
36:65:6d:ed:42:22:2d:83:b8:03:7c:41:2e:9e:6f:3f:74:aa:
97:9f:48:10:0d:7f:7d:72:8b:11:14:af:bb:eb:c5:c0:67:1c:
5f:cc:46:35:da:65:e9:66:fc:2f:9c:07:26:b9:b6:34:b7:5f:
0f:a7:8f:15:a4:cf:b9:bb:92:02:d4:70:28:98:7b:8a:09:27:
c0:e6:45:3c:f5:7c:9c:4e:c6:ce:90:2d:78:09:83:67:5d:08:
0c:c6:79:63:0a:0c:7f:e0:cb:11:4f:47:09:e1:4b:eb:01:ee:
82:66:f0:90:13:97:28:3f:ee:d1:13:d8:9b:5b:32:07:fe:d0:
49:a3:73:f8:93:1b:61:f0:b7:79:1f:7d:e6:03:30:07:de:8b:
53:67:a6:03:7e:8b:bb:d9:c0:e5:82:3e:f4:7c:07:e9:b2:d4:
33:b2:26:fc:8e:d8:e0:cb:b2:fb:ea:9e:2c:25:05:89:78:54:
83:02:6a:a3:42:15:01:4d:55:fa:83:3e:90:f3:87:fa:50:48:
51:6b:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org