Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/ETyXxAsgVghsi848-76f6Zxfo64.roa
File: ETyXxAsgVghsi848-76f6Zxfo64.roa (raw, json)
Hash identifier: Ioipj6G/e48s4JybeSe1SfBumStNczh2ul99AsA8vE4=
Subject key identifier: 11:3C:97:C4:0B:20:56:08:6C:8B:CE:3C:FB:BE:9F:E9:9C:5F:A3:AE
Certificate issuer: /CN=faa067162e2209dc6c216ba6cfcd8be6d7386179
Certificate serial: 01839E1792C02CBA51A309999CD3EA560F9D
Authority key identifier: FA:A0:67:16:2E:22:09:DC:6C:21:6B:A6:CF:CD:8B:E6:D7:38:61:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qBnFi4iCdxsIWumz82L5tc4YXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/ETyXxAsgVghsi848-76f6Zxfo64.roa
Signing time: Mon 03 Oct 2022 13:44:48 +0000
ROA not before: Mon 03 Oct 2022 13:44:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12859
IP address blocks: 185.214.148.0/22 maxlen: 22
46.182.182.0/23 maxlen: 23
46.182.180.0/23 maxlen: 23
2a04:e1c0:1::/48 maxlen: 48
2a0b:9cc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:17:92:c0:2c:ba:51:a3:09:99:9c:d3:ea:56:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa067162e2209dc6c216ba6cfcd8be6d7386179
Validity
Not Before: Oct 3 13:44:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=113c97c40b2056086c8bce3cfbbe9fe99c5fa3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:29:47:8a:85:2c:31:42:8f:ce:00:73:d5:
b6:95:c7:22:94:78:e8:36:84:81:6a:34:01:8a:ca:
29:82:e0:39:87:e6:9b:b6:1a:3f:3d:a6:13:72:d8:
2f:99:32:ee:c6:18:bc:25:a9:6c:9d:d3:8e:3c:62:
03:bf:9d:29:4c:72:06:22:24:0b:81:11:97:43:f5:
1b:8e:99:37:e1:93:68:eb:f2:f1:04:c5:da:6d:3b:
c1:ff:6f:d0:23:b2:6c:80:52:0d:cd:51:9e:49:d3:
84:26:af:8b:66:88:67:d3:b8:ee:a4:ad:e8:d8:12:
57:12:a2:74:b8:b3:22:1d:21:4a:34:cd:31:e3:e2:
5d:07:3a:a4:c8:3e:61:34:58:a0:e7:7d:b8:11:c6:
5e:44:65:b5:ca:24:b6:67:d5:c4:03:8e:c5:b2:39:
ed:70:0a:be:d9:9e:3d:1e:7c:f6:f8:d0:82:69:e3:
54:2d:1c:f4:ff:c7:2b:5c:6c:a6:e4:40:cf:ce:54:
30:39:0a:e0:25:1d:74:eb:94:9f:e8:d7:24:3d:59:
3e:80:96:4e:1d:76:8a:60:e4:96:1c:ed:88:e8:ae:
cf:45:f4:ac:d4:37:d9:11:55:71:b0:01:e2:e2:85:
d5:1c:0d:ba:b9:55:dd:0e:1f:fa:ef:1d:cb:86:c3:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3C:97:C4:0B:20:56:08:6C:8B:CE:3C:FB:BE:9F:E9:9C:5F:A3:AE
X509v3 Authority Key Identifier:
keyid:FA:A0:67:16:2E:22:09:DC:6C:21:6B:A6:CF:CD:8B:E6:D7:38:61:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qBnFi4iCdxsIWumz82L5tc4YXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/ETyXxAsgVghsi848-76f6Zxfo64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/1-qBnFi4iCdxsIWumz82L5tc4YXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.180.0/22
185.214.148.0/22
IPv6:
2a04:e1c0:1::/48
2a0b:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
72:23:b4:98:ad:ee:b5:22:1d:05:8d:d6:79:11:86:73:23:ad:
dd:fc:a3:09:bc:e0:78:cf:36:ff:bc:e6:49:69:0b:26:bf:2f:
49:0e:23:f0:33:f4:05:10:01:ff:2a:37:7f:f7:8f:57:97:98:
68:f9:43:09:aa:78:0c:cf:e9:e5:f3:29:7d:56:7b:53:a8:c1:
d4:4a:7c:8e:22:8c:53:a0:d5:62:49:c1:96:f3:cc:d6:4f:c6:
a5:5c:30:61:7e:98:67:68:39:d1:f1:7c:d9:b0:03:07:ec:d9:
02:f7:b0:1e:c9:a9:4e:ba:cf:bf:53:4c:31:a3:72:27:50:b4:
ee:53:f8:bb:d4:78:b1:49:78:c3:0e:4d:dd:b9:6a:50:d4:31:
60:d6:dc:df:08:b2:44:fe:80:09:69:14:e9:80:27:8d:af:39:
2b:03:7c:6a:1e:a5:e0:bb:5a:0f:eb:56:13:de:54:76:31:a6:
c5:12:f4:76:d3:a7:62:ce:fd:20:a0:a2:fe:32:01:9f:85:9a:
58:35:6a:8a:57:ae:39:e9:26:02:7e:66:34:82:2f:d6:33:1d:
0e:ce:3b:0e:0d:eb:2e:30:bc:85:dd:07:4f:16:bb:cc:d1:a8:
80:81:e9:dd:3b:ea:b3:0e:61:d4:d3:26:ab:d9:01:1c:8a:bd:
ce:2d:41:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:40 2023 by rpki-client on console-ams.rpki-client.org