Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/AmNnBau7rsdZE251V9pnS-JAxsg.roa
File: AmNnBau7rsdZE251V9pnS-JAxsg.roa (raw, json)
Hash identifier: aFFUE8elC7c+Cn+WoD37JkH68Dqmw01NhhyZHgObGBU=
Subject key identifier: 02:63:67:05:AB:BB:AE:C7:59:13:6E:75:57:DA:67:4B:E2:40:C6:C8
Certificate issuer: /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial: 0184EC6E938FDC89936701A4B84F6C49EEE5
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/AmNnBau7rsdZE251V9pnS-JAxsg.roa
Signing time: Wed 07 Dec 2022 11:53:00 +0000
ROA not before: Wed 07 Dec 2022 11:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44622
IP address blocks: 91.223.1.0/24 maxlen: 24
195.162.8.0/23 maxlen: 23
91.222.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:6e:93:8f:dc:89:93:67:01:a4:b8:4f:6c:49:ee:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Validity
Not Before: Dec 7 11:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02636705abbbaec759136e7557da674be240c6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:46:a1:00:1e:3a:47:0b:73:a9:3b:4c:b2:
7d:e4:d6:be:da:4d:ee:0d:b9:75:23:cf:15:8a:bf:
d5:1e:6f:88:fd:63:14:f6:7c:5a:96:99:1e:11:8e:
f2:c1:8e:1b:15:e6:df:4e:1a:38:b1:a7:fc:f3:64:
0a:d9:85:74:bd:17:83:28:35:f4:6a:4d:31:a7:e9:
9c:e6:78:86:f7:bf:46:40:e4:66:92:43:98:8e:5d:
c1:60:21:54:29:ab:c8:00:65:33:c6:a5:c3:b0:7e:
f9:91:cb:1e:c4:7c:ab:9f:91:a3:7f:91:ce:ea:92:
3d:c8:5b:e5:99:fe:5a:f8:19:df:94:5a:ed:a4:4d:
a3:e1:ee:f4:aa:e8:19:94:c8:7f:3d:03:03:45:03:
38:0a:75:fa:d4:91:8a:1b:57:55:df:6b:20:0a:d5:
f5:31:a2:b0:80:2a:71:53:39:13:07:04:fd:41:e9:
f1:b5:0c:dd:27:62:3e:63:5f:8e:fa:fa:17:69:df:
73:7c:86:ff:d9:a6:58:15:c2:8b:2a:dc:4e:5e:46:
fe:bc:8c:35:c6:c3:c0:6f:dd:92:85:ba:c7:59:04:
62:08:18:c9:f6:91:1d:a9:eb:2e:9f:15:ff:2d:1a:
ed:b8:31:1b:37:34:19:13:50:5c:cf:aa:78:58:61:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:63:67:05:AB:BB:AE:C7:59:13:6E:75:57:DA:67:4B:E2:40:C6:C8
X509v3 Authority Key Identifier:
keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/AmNnBau7rsdZE251V9pnS-JAxsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.208.0/22
91.223.1.0/24
195.162.8.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:02:5d:a2:b5:99:50:cf:da:70:fc:eb:87:df:a8:23:a3:6b:
69:74:75:9e:11:8b:a5:02:1a:6d:59:58:62:da:b9:a1:e0:a6:
08:48:c1:2e:f9:bd:dc:6c:fc:39:8c:5d:c8:db:bf:1a:9c:10:
4d:6d:02:52:34:2c:9b:85:92:a5:a1:d6:c5:46:9a:b2:8e:fa:
80:9d:b9:58:cc:e9:33:b0:ad:3c:e9:c4:84:68:ef:7a:f1:76:
fd:57:27:44:9d:02:f4:63:ac:dd:80:b3:3f:98:ee:ff:9a:be:
4a:f3:cc:59:3d:d9:71:5c:ba:f4:9c:3f:dc:15:38:82:2e:aa:
98:83:0b:fb:5c:75:a3:61:11:9b:46:b2:30:7b:d9:1d:8d:51:
6a:94:2b:c1:8b:9f:63:2b:d6:ee:45:44:cb:49:22:95:a5:29:
a0:d2:b5:13:b2:42:f0:de:dd:7d:2a:b1:bd:c3:93:59:cb:1c:
ee:4f:41:32:21:61:f6:c3:7c:26:d1:c9:ec:fb:2c:cf:fa:fc:
6a:5a:87:8c:a5:ae:e2:fd:66:89:7e:b6:81:a6:93:8b:74:74:
c6:df:84:ff:58:42:0b:75:dd:87:c1:2b:08:4d:49:76:23:4e:
cd:03:df:1e:0b:a7:59:ea:85:aa:21:d3:d4:01:5f:4a:14:42:
33:0f:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-ams.rpki-client.org