Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/ETBL_EZmQYOvDcT8oQwfdS888Io.roa
File: ETBL_EZmQYOvDcT8oQwfdS888Io.roa (raw, json)
Hash identifier: BSu3cQYKq66hhSzJobjrbwmXuHXj+URSF5Y/BMnPnAg=
Subject key identifier: 11:30:4B:FC:46:66:41:83:AF:0D:C4:FC:A1:0C:1F:75:2F:3C:F0:8A
Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial: 12A75DF9
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/ETBL_EZmQYOvDcT8oQwfdS888Io.roa
Signing time: Sat 01 Jan 2022 09:55:12 +0000
ROA not before: Sat 01 Jan 2022 09:55:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202932
IP address blocks: 185.47.227.0/24 maxlen: 24
185.150.68.0/22 maxlen: 22
2a07:6e80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312958457 (0x12a75df9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Validity
Not Before: Jan 1 09:55:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11304bfc46664183af0dc4fca10c1f752f3cf08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:19:81:0a:aa:16:f2:ad:d2:a9:44:e4:b8:b9:
10:26:d7:b7:a9:4e:fe:49:a9:ce:e1:e1:f2:c6:83:
e5:c0:18:9d:25:01:51:6c:8c:82:44:fb:9d:85:d0:
6d:3d:f5:db:ff:df:1f:e2:48:42:68:21:7f:af:a4:
0a:c0:2c:02:f4:ca:9b:29:bb:2b:25:32:bd:78:9d:
d4:52:2a:ba:5e:67:9b:77:af:46:5f:eb:4a:2c:6a:
b6:a3:9d:f5:a2:d5:98:53:f8:e8:a8:55:9f:44:4e:
ed:36:f3:0d:b8:0e:77:e0:9f:e2:cd:8e:fb:82:82:
51:c7:cf:8b:8f:70:4b:28:ec:f6:90:b4:90:bb:13:
52:60:74:8c:75:d0:55:76:24:a7:44:0c:07:95:b4:
96:da:e2:56:f4:6b:96:ea:ac:0b:14:54:16:53:a6:
e1:65:d4:e1:56:af:9e:c7:88:45:3e:9e:5d:d3:9f:
9f:c9:e2:8d:54:fe:67:de:c8:45:11:86:c9:bf:93:
49:e4:62:e6:6d:07:8b:b2:5b:12:fd:a4:0b:ad:65:
e0:e9:84:ef:a4:94:ea:46:3b:6c:69:41:80:ad:31:
11:25:10:f1:d5:94:80:6e:78:ad:b1:27:a8:bc:8d:
ea:d6:94:ce:3f:f9:ad:71:75:1a:87:e3:dd:fa:05:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:30:4B:FC:46:66:41:83:AF:0D:C4:FC:A1:0C:1F:75:2F:3C:F0:8A
X509v3 Authority Key Identifier:
keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/ETBL_EZmQYOvDcT8oQwfdS888Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.227.0/24
185.150.68.0/22
IPv6:
2a07:6e80::/29
Signature Algorithm: sha256WithRSAEncryption
30:7a:3b:76:1b:95:df:ff:88:e8:76:6d:e4:91:14:73:9f:2f:
02:eb:a5:f7:bf:4a:3d:fe:e9:af:95:81:8d:c3:8e:4e:b5:1d:
eb:2b:c9:4c:19:18:61:d9:bb:2b:6c:a6:2a:2a:60:00:60:da:
24:20:2e:82:e8:75:d9:bd:9f:55:5a:43:4a:6e:ec:63:e9:ab:
7d:64:07:18:af:95:a6:a6:6b:f5:a6:7d:72:9b:ba:d4:ea:06:
80:ca:49:71:51:6b:c8:90:d6:6f:b2:6a:07:47:7e:65:0a:ea:
ef:a0:21:ea:4c:38:ac:5a:6d:33:12:76:98:5b:77:4f:b6:08:
10:82:14:e9:cb:61:ea:ee:19:cf:28:88:5c:4b:ec:d4:47:d9:
46:cb:ef:bc:f9:b4:a3:c7:e0:63:71:78:88:b5:ee:a8:26:37:
4f:75:0f:ba:ab:b4:bf:ca:59:b3:7f:03:e1:88:d9:51:a6:1b:
23:fb:a6:22:09:23:bc:96:af:cd:1d:a5:fa:5a:44:4b:38:3c:
52:32:d1:48:aa:ef:8c:63:74:18:47:cd:28:9e:8b:c7:a7:b0:
54:95:2e:ad:ef:19:a9:ef:81:b7:d2:54:6e:78:87:8e:06:8b:
c1:59:2f:66:d9:ed:0a:3b:a7:4d:bd:06:11:1d:99:19:26:76:
8a:62:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:02 2023 by rpki-client on console-fra.rpki-client.org