Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/c1eSQMxw1pwMG3Rszb1LitN7wwM.roa
File: c1eSQMxw1pwMG3Rszb1LitN7wwM.roa (raw, json)
Hash identifier: kXX1KwtM6JPCfy4dXKn4qzet4hiI07m6voXT2yklY6Q=
Subject key identifier: 73:57:92:40:CC:70:D6:9C:0C:1B:74:6C:CD:BD:4B:8A:D3:7B:C3:03
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 0184D29A90118854FABBC76FF794D5E402C4
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/c1eSQMxw1pwMG3Rszb1LitN7wwM.roa
Signing time: Fri 02 Dec 2022 11:30:55 +0000
ROA not before: Fri 02 Dec 2022 11:30:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20694
IP address blocks: 185.45.110.0/23 maxlen: 23
46.30.24.0/21 maxlen: 21
2a02:22f0:12::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:9a:90:11:88:54:fa:bb:c7:6f:f7:94:d5:e4:02:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Dec 2 11:30:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73579240cc70d69c0c1b746ccdbd4b8ad37bc303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:0d:98:b0:cc:16:9d:c3:90:49:dc:50:00:
d6:1b:b8:6f:66:fa:2e:9d:4d:74:b2:7f:4f:25:f1:
51:4c:a2:83:f6:3f:fb:c3:6e:30:d3:6b:9c:19:1a:
b8:ba:10:dd:88:6c:87:5b:2f:14:8a:3b:11:9d:3d:
5e:fe:7f:84:3b:fb:d7:70:d4:8e:d3:f8:10:a9:60:
0b:16:4e:ad:22:41:93:11:38:34:a9:4a:ea:27:cd:
ce:5b:b0:ae:6d:f4:5a:c7:57:d4:55:22:5c:bd:e6:
ea:6e:96:24:2c:81:64:99:9d:fa:26:6d:36:01:bb:
43:be:7f:b3:f6:bd:88:f7:a4:f7:2a:54:a1:12:c3:
29:4b:dd:ad:b1:f9:4c:60:f3:cb:e3:ed:4b:ac:af:
a0:09:87:c1:1f:03:1a:72:3a:09:46:b9:7f:69:58:
e8:56:76:39:bf:51:49:7e:a5:1b:43:48:fa:3b:66:
40:c4:e6:c9:d3:cc:a8:c8:b6:e8:c8:bc:db:63:5f:
94:a0:cf:58:f9:63:dc:1c:5b:de:e5:17:c3:7e:74:
b2:c8:ab:74:21:90:a3:43:04:4f:3c:cd:5e:aa:ac:
57:cb:cb:ca:0b:d4:c4:01:83:e9:36:de:ca:e3:c6:
a4:7a:c2:6e:1f:aa:e2:9b:b8:50:c8:61:4d:7c:3e:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:57:92:40:CC:70:D6:9C:0C:1B:74:6C:CD:BD:4B:8A:D3:7B:C3:03
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/c1eSQMxw1pwMG3Rszb1LitN7wwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.24.0/21
185.45.110.0/23
IPv6:
2a02:22f0:12::/48
Signature Algorithm: sha256WithRSAEncryption
56:48:4d:82:a2:60:42:2a:0a:01:f0:5c:7d:6b:f2:a0:34:eb:
d5:9a:d4:c2:b6:49:ea:91:9c:b7:6f:4a:24:e0:a0:73:93:d8:
0c:fa:5d:f9:7f:46:99:f9:94:15:ae:21:78:a3:13:de:22:20:
08:3b:6b:90:ad:a2:17:34:8f:90:d7:8e:f1:83:b5:d0:e0:95:
da:cc:32:5f:e4:ed:9f:c3:74:47:e3:c4:3d:6e:13:ac:5b:93:
16:4c:c3:3c:b5:ff:3c:aa:74:4c:05:e3:ff:0e:fe:12:0a:25:
87:da:7e:26:87:30:54:b6:37:9c:a2:c1:4e:e9:46:01:1c:7c:
25:94:56:7c:4c:e5:e3:ef:10:90:78:4b:a1:f0:4b:b1:cc:45:
a3:55:b9:90:8c:e3:13:45:70:f6:22:5d:f8:d0:01:9b:6d:22:
f6:5a:ea:2f:f2:01:89:e3:46:d5:0b:16:9f:9f:bd:b4:a6:0e:
23:2e:09:08:cb:19:12:4e:28:54:a3:2d:10:9b:e1:7d:25:bc:
69:79:d3:c1:94:ce:79:38:2a:7a:12:ef:12:c2:94:39:ce:97:
69:19:c6:c4:be:03:2c:21:17:da:3e:f3:7a:ac:c3:c4:ee:ef:
3c:ff:30:cd:98:e2:77:84:d8:4c:46:7c:ba:31:cf:d4:4c:92:
d5:93:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:46 2024 by rpki-client on console-ams.rpki-client.org