Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/KdIoHin9QXskQhGSju7wXqHX8Fk.roa
File: KdIoHin9QXskQhGSju7wXqHX8Fk.roa (raw, json)
Hash identifier: qCC5wylx61t1lzKozJTkjmz586UAuZEOHKIfAS7JpC8=
Subject key identifier: 29:D2:28:1E:29:FD:41:7B:24:42:11:92:8E:EE:F0:5E:A1:D7:F0:59
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 018506DBEA93E9599F529BC2ABEE5D887D18
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/KdIoHin9QXskQhGSju7wXqHX8Fk.roa
Signing time: Mon 12 Dec 2022 15:02:33 +0000
ROA not before: Mon 12 Dec 2022 15:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57734
IP address blocks: 37.49.234.0/23 maxlen: 24
37.49.234.0/24 maxlen: 24
2a00:a4c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:db:ea:93:e9:59:9f:52:9b:c2:ab:ee:5d:88:7d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Dec 12 15:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29d2281e29fd417b244211928eeef05ea1d7f059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:56:d6:4b:23:45:c6:48:9b:53:cd:b5:c7:
5d:be:d3:a7:e5:3e:e3:ee:80:ca:be:fa:e7:36:3d:
36:e2:4b:47:b7:76:9f:f9:b4:84:6e:73:9a:f8:25:
bb:db:eb:f2:27:2f:6b:da:51:29:1e:c6:56:63:50:
3b:42:48:f5:29:00:79:74:03:c7:e7:ef:71:e2:e9:
68:33:92:45:da:5f:0c:ea:31:ea:a1:cf:73:12:69:
2d:53:82:51:2e:4d:4d:02:59:05:1d:8a:4f:98:3d:
7c:ff:16:5a:36:eb:1b:92:a3:98:e4:f4:e7:a8:4e:
f0:5f:15:ad:f6:9b:71:96:79:02:96:d4:b1:3f:ad:
24:92:82:ee:d9:23:89:c9:6b:4d:2a:f7:61:43:4a:
70:17:85:fb:bf:87:77:32:e1:47:a3:fe:7e:55:4c:
fd:27:85:f6:fa:31:52:05:cb:fc:12:d9:a2:e0:b5:
f0:07:3d:c7:58:42:5e:6c:cb:4d:eb:3e:ad:61:ce:
6f:1c:c3:97:6d:50:23:b0:d0:3a:b6:b5:0f:e8:01:
db:c2:ab:39:0a:40:16:c3:9f:ab:af:28:18:48:3d:
3b:0d:6c:ca:ae:63:1c:d9:b2:35:67:5c:ec:ec:14:
bc:71:a7:30:38:47:df:ea:66:cf:ed:a3:46:0e:39:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D2:28:1E:29:FD:41:7B:24:42:11:92:8E:EE:F0:5E:A1:D7:F0:59
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/KdIoHin9QXskQhGSju7wXqHX8Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.234.0/23
IPv6:
2a00:a4c0::/32
Signature Algorithm: sha256WithRSAEncryption
9a:ae:ac:c1:c3:6d:54:b1:e3:bc:03:00:9a:d0:0a:3c:59:0d:
bc:e3:08:52:97:9d:f5:80:4e:85:fe:a8:a2:89:d9:d6:45:87:
f6:5c:0d:7b:bf:4b:47:fd:7a:aa:59:c4:98:89:14:37:f8:cf:
e4:31:fa:ed:03:f9:ee:6e:12:b5:60:68:f4:bc:c5:ca:bc:41:
83:6d:45:80:e4:3f:e7:fd:76:18:99:68:b2:22:86:29:24:37:
1a:5e:fe:55:c9:83:06:7b:f0:ca:c9:09:9b:9e:44:72:eb:44:
1d:b9:9d:83:46:34:2c:a7:6f:c5:9d:27:3b:77:94:d0:5b:d4:
c9:0e:24:56:18:86:f3:66:34:88:05:ce:7f:07:88:7c:c2:db:
d0:a1:a7:4a:31:ed:8b:df:47:96:bf:ca:2a:ac:05:07:11:11:
c5:87:75:41:7d:0e:51:4a:8a:e8:94:e5:05:f3:dd:2a:d7:04:
06:ab:14:c7:bf:5f:fc:6d:11:5b:7f:af:22:c2:a6:d1:93:fa:
df:93:b8:13:95:bc:db:05:f3:de:5e:88:e1:ff:4b:bd:da:c4:
55:11:c3:0d:1a:9b:52:dd:fa:1a:a8:1e:78:ad:c1:77:59:15:
1b:b6:95:4a:fd:ac:26:22:3d:6a:47:a5:57:3d:bc:0d:eb:d6:
45:0d:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:37 2024 by rpki-client on console-fra.rpki-client.org