Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/ETtKEex1K42u8Jr1IsiyYAPTPro.roa
File: ETtKEex1K42u8Jr1IsiyYAPTPro.roa (raw, json)
Hash identifier: 16B6o6WYW0jdOkbt/ZpwPYhb27tsDugYT8MDiM3fnQU=
Subject key identifier: 11:3B:4A:11:EC:75:2B:8D:AE:F0:9A:F5:22:C8:B2:60:03:D3:3E:BA
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 37EFF16A
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/ETtKEex1K42u8Jr1IsiyYAPTPro.roa
Signing time: Sat 01 Jan 2022 11:58:44 +0000
ROA not before: Sat 01 Jan 2022 11:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51055
IP address blocks: 194.33.13.0/24 maxlen: 24
185.62.156.0/22 maxlen: 24
46.17.160.0/21 maxlen: 24
193.34.186.0/23 maxlen: 24
2a00:5f00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938471786 (0x37eff16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Jan 1 11:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=113b4a11ec752b8daef09af522c8b26003d33eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:b1:bd:67:16:6e:47:f7:da:37:8b:f4:89:
71:0f:cf:65:da:c8:a7:c5:ca:51:18:6e:9d:c1:02:
f4:e1:3e:38:69:04:7d:9d:5a:ee:cb:be:de:4f:55:
c0:5a:87:5d:f1:e7:d8:f0:df:3d:ea:08:94:a0:00:
b4:ee:b4:94:3f:69:01:51:e5:33:dd:30:09:95:bd:
ab:a2:c5:c2:ed:76:27:55:37:2f:02:77:b6:79:d5:
33:2f:f8:a4:f0:e3:c6:a7:99:87:73:20:2d:8f:5f:
ff:ae:b4:38:cb:6a:61:ea:dc:db:2b:85:4b:ff:77:
9e:ea:7e:84:d9:7b:37:36:7e:a4:e6:97:3a:84:7e:
b5:1b:64:3b:22:0e:b2:5a:9f:0b:5a:20:95:d1:c9:
8b:63:74:27:d8:c9:c3:e4:06:76:24:17:d7:41:e7:
34:1e:54:c1:0e:03:1d:7f:04:1d:c6:90:34:83:d5:
89:5c:d5:64:21:8d:70:a1:36:86:68:f6:01:43:a6:
e3:c1:91:78:ec:4e:cc:fc:30:ca:6c:7d:41:37:cb:
65:ec:d2:3f:54:c7:45:a3:8c:e4:46:1d:1c:e6:96:
60:e4:c3:01:17:73:77:03:b2:50:ca:72:a3:59:7c:
8b:83:39:3f:e1:a3:00:d9:d7:8e:0f:c6:15:f5:dd:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3B:4A:11:EC:75:2B:8D:AE:F0:9A:F5:22:C8:B2:60:03:D3:3E:BA
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/ETtKEex1K42u8Jr1IsiyYAPTPro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.160.0/21
185.62.156.0/22
193.34.186.0/23
194.33.13.0/24
IPv6:
2a00:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
a0:0d:ff:56:4c:32:74:a0:bd:c1:13:42:d7:42:6c:ad:33:58:
14:ea:a4:67:1e:71:73:7c:80:6b:15:c1:d8:82:13:00:57:33:
80:a8:c5:eb:e4:5d:ee:77:e4:67:7b:7b:30:e6:b3:e5:84:f2:
f2:47:47:b1:0a:ed:c5:3d:82:2c:3a:5c:9d:5e:b8:30:22:e4:
95:05:97:b6:ba:5b:d0:63:4f:23:14:d2:87:f9:e3:b9:37:12:
cd:e7:1d:69:a4:5c:42:19:ee:e1:d4:c9:e8:4c:7f:7a:37:18:
97:59:15:e8:78:a9:0c:bf:dd:b8:fc:93:52:ee:ce:9b:65:a1:
9f:67:ba:20:59:a8:dd:2f:1b:d9:b8:75:81:63:22:6e:ff:68:
ca:7e:e5:af:f3:b1:75:8e:a0:5a:0e:6a:ca:33:60:a3:35:44:
e1:11:17:e5:16:30:17:cc:eb:38:a7:7c:34:2b:b6:f0:b1:18:
fb:a3:23:92:a6:91:9f:d8:a1:2d:01:93:4a:bb:3e:3f:0e:86:
68:7f:1e:63:98:86:86:ef:1c:91:47:d7:22:f2:6f:5d:d2:89:
07:1a:66:2b:87:38:33:3f:1b:b0:df:f3:66:b9:50:62:04:50:
7b:95:5c:0c:ff:d1:fd:16:28:12:87:ea:48:d1:91:c1:f3:d5:
fa:ba:e5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:43 2023 by rpki-client on console.sobornost.net