Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/amS8Cqxf-do-1B0EGH7hXtLzJUk.roa
File: amS8Cqxf-do-1B0EGH7hXtLzJUk.roa (raw, json)
Hash identifier: cG+nPmicPYEUcD+wMtC4K7Jgh6e3OtgYCtnsTTWPW6Y=
Subject key identifier: 6A:64:BC:0A:AC:5F:F9:DA:3E:D4:1D:04:18:7E:E1:5E:D2:F3:25:49
Certificate issuer: /CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
Certificate serial: 01842DB641ABDD10A65D950B998EEDB85FA8
Authority key identifier: 6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/amS8Cqxf-do-1B0EGH7hXtLzJUk.roa
Signing time: Mon 31 Oct 2022 11:03:49 +0000
ROA not before: Mon 31 Oct 2022 11:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12859
IP address blocks: 2.56.226.0/23 maxlen: 23
2.56.226.0/24 maxlen: 24
2.56.227.0/24 maxlen: 24
2a09:d240:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:b6:41:ab:dd:10:a6:5d:95:0b:99:8e:ed:b8:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
Validity
Not Before: Oct 31 11:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a64bc0aac5ff9da3ed41d04187ee15ed2f32549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:c0:85:72:5a:05:a4:0c:1b:76:cd:22:9e:
50:1b:4c:98:ff:cf:c2:61:fa:74:09:79:c9:ae:c4:
7c:80:22:95:63:e8:5e:ae:2e:3d:3a:29:2f:02:08:
93:d1:43:1f:65:64:a3:b9:16:00:ad:11:bb:15:c8:
c0:64:01:38:5f:bd:e6:77:66:45:e1:fc:b1:d7:6b:
bc:29:e2:8e:9b:7d:8e:0a:d5:ff:83:7b:1a:32:62:
6b:ca:f3:ac:1b:19:13:f4:6c:ef:2e:85:91:7a:87:
68:ec:20:60:f8:d0:cc:6b:bb:46:9f:a3:71:57:c0:
db:0e:79:ad:4e:c2:00:ac:e3:96:3b:53:ca:4c:33:
31:9c:59:6e:0e:cc:73:d1:ec:d9:e4:bb:f1:e0:2e:
95:b4:7b:32:15:5d:87:be:47:b6:cb:6d:ef:87:d0:
5c:86:72:63:9f:ed:ae:ad:bc:b0:61:67:44:96:4d:
d6:f0:cf:93:99:95:f4:b9:18:6d:48:a3:86:7b:e0:
3e:d5:50:80:15:9c:92:de:02:49:84:c3:90:97:f2:
f1:4f:36:73:0c:4f:3a:3c:10:f4:3d:9b:cc:f2:82:
50:8e:0d:cb:f1:d9:7e:22:81:88:5f:16:73:8b:89:
cc:b1:41:21:9a:12:1e:1d:0e:e5:8f:a2:0c:12:10:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:64:BC:0A:AC:5F:F9:DA:3E:D4:1D:04:18:7E:E1:5E:D2:F3:25:49
X509v3 Authority Key Identifier:
keyid:6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/amS8Cqxf-do-1B0EGH7hXtLzJUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.226.0/23
IPv6:
2a09:d240:1::/48
Signature Algorithm: sha256WithRSAEncryption
13:06:bd:c4:7b:38:ec:41:67:61:e3:b2:eb:c8:ba:6c:e3:d9:
87:24:0b:8d:9c:8e:8a:39:3c:4f:1a:56:2b:08:d6:0e:1b:c1:
6e:d0:8c:d4:f1:c6:d9:6d:e4:1b:72:25:6c:69:8e:44:07:3b:
0d:25:e1:5f:55:ac:b5:88:d0:52:7c:dc:5b:27:b9:3d:15:cd:
99:2f:3b:76:3a:28:e7:cf:f3:3f:c1:51:51:45:d6:44:9d:e5:
8e:90:e3:a0:94:ea:a9:be:d6:be:07:4c:a0:d5:2c:ff:8c:eb:
d4:fb:48:d5:9d:6b:2d:a3:5d:76:f7:23:5b:07:fa:2d:1f:bc:
8d:7c:15:c0:d7:66:74:a1:af:34:c5:0e:05:70:ce:00:7d:2e:
ee:a8:6a:8d:67:40:16:db:5b:87:4f:ba:9e:d5:05:33:8c:3b:
22:49:cf:58:3a:b8:e2:1e:aa:8d:52:72:ad:6a:7d:51:e6:49:
67:0f:a6:89:60:43:71:49:07:35:55:8e:28:39:40:cf:28:72:
9d:0c:5d:5c:4d:fc:18:cc:66:db:56:53:17:0d:d9:d2:51:f4:
c5:ec:d2:85:e1:95:c9:5b:f5:73:bd:fe:9c:5a:fc:86:b3:49:
b4:2a:9b:9a:84:01:85:d7:ac:c4:ee:b7:9b:67:bf:0c:1d:a2:
16:69:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:10 2024 by rpki-client on console-ams.rpki-client.org