Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ett13M7bj634Sfa_fmzlo-DQQJg.roa
File: ett13M7bj634Sfa_fmzlo-DQQJg.roa (raw, json)
Hash identifier: 8ffQuiGTHMW8x4iyIs2QzmqDnmi7193kK8osssfLsiY=
Subject key identifier: 7A:DB:75:DC:CE:DB:8F:AD:F8:49:F6:BF:7E:6C:E5:A3:E0:D0:40:98
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 0A9CEEC8
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ett13M7bj634Sfa_fmzlo-DQQJg.roa
Signing time: Wed 01 Jun 2022 09:09:20 +0000
ROA not before: Wed 01 Jun 2022 09:09:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197324
IP address blocks: 46.17.120.0/21 maxlen: 24
185.157.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178056904 (0xa9ceec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jun 1 09:09:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7adb75dccedb8fadf849f6bf7e6ce5a3e0d04098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:ce:b7:f2:9e:8c:2d:d0:9e:60:ee:d9:d6:
51:9f:e1:9d:2d:6e:53:1a:af:dd:cc:1a:1e:b9:68:
4a:f4:e3:e6:72:36:b9:73:f5:bc:06:50:ff:5e:73:
80:75:49:d2:4f:75:0f:e2:1b:b7:14:d1:4a:db:7e:
1a:98:90:7b:cd:26:e1:c1:a6:6a:a2:08:5a:41:0c:
19:69:47:41:0e:08:54:57:dd:83:29:9b:a8:69:57:
5e:cb:d9:7d:9b:61:07:ed:73:21:1a:22:65:3f:ac:
ef:34:67:e0:96:fe:74:d0:6e:43:16:00:c8:4c:26:
c6:dc:7e:33:3c:9f:64:e1:68:b4:f5:0b:8f:45:3f:
7b:ca:76:80:a1:f5:9f:c3:b3:85:2b:32:6e:9d:1b:
52:0b:ab:c1:58:43:36:7e:11:70:ba:3a:8d:af:23:
e6:70:49:28:5d:07:24:b6:32:f6:56:75:9e:eb:21:
7f:c0:7a:26:ae:9b:ee:6b:78:e7:d8:79:a2:61:58:
f8:7b:a7:f4:93:a6:e5:52:f6:bd:5d:9a:74:c3:65:
a2:3f:34:db:27:27:ab:56:96:21:a4:1d:54:94:c5:
4b:51:dc:c3:4f:81:f0:94:73:77:80:12:af:e1:75:
a6:f7:4a:b1:20:8d:58:04:e2:35:08:cd:93:61:e1:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DB:75:DC:CE:DB:8F:AD:F8:49:F6:BF:7E:6C:E5:A3:E0:D0:40:98
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/ett13M7bj634Sfa_fmzlo-DQQJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.120.0/21
185.157.104.0/22
Signature Algorithm: sha256WithRSAEncryption
66:05:67:28:8a:cb:dc:5a:27:9a:1b:55:aa:7e:3b:a6:e2:47:
71:90:8a:28:3e:84:c4:04:7f:8d:b5:11:aa:b2:9f:e9:c8:32:
00:1c:12:01:12:b4:6f:dc:52:09:80:fa:cd:17:a2:79:cc:81:
26:de:c2:e9:21:a9:f0:c4:59:81:c7:03:67:3b:4c:2c:64:1b:
ca:02:17:4c:bc:8f:3e:92:43:25:00:28:f1:fd:83:4f:72:56:
23:ac:36:c9:6a:31:e1:4f:1a:1b:f0:91:4a:39:d5:6e:49:8a:
84:a9:99:5c:7f:21:d6:5a:0d:1b:b4:45:ac:72:cf:48:5f:5d:
d4:8a:09:2e:f8:f4:19:30:21:95:33:7a:fc:20:fb:c4:de:3b:
03:7a:55:a4:08:81:27:bc:37:59:61:fd:86:b1:92:ed:00:68:
5c:be:d4:ef:88:7b:9a:80:82:f3:3e:11:92:6f:ef:e1:4c:71:
e7:8d:42:54:2d:01:d5:23:3c:f0:ba:ad:15:af:b0:da:29:d0:
94:cb:d0:6d:8d:0a:5f:f5:81:df:b2:53:ea:9f:cd:21:f6:d5:
0e:ce:34:e7:24:0c:80:d7:2a:18:45:cb:38:d5:0c:af:c1:b3:
ea:f2:f1:d9:44:58:bb:4d:54:2c:7a:91:64:c5:61:d3:de:e0:
44:ca:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:02 2024 by rpki-client on console-ams.rpki-client.org