Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MRcYeJ20h5eb_fUmvOvpIDGkDYc.roa
File: MRcYeJ20h5eb_fUmvOvpIDGkDYc.roa (raw, json)
Hash identifier: yP2xSypq0Epv8d1zPlYVuQ0nEksyH3i2w2M4+CQLuDk=
Subject key identifier: 31:17:18:78:9D:B4:87:97:9B:FD:F5:26:BC:EB:E9:20:31:A4:0D:87
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B6A5644
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MRcYeJ20h5eb_fUmvOvpIDGkDYc.roa
Signing time: Sat 01 Jan 2022 08:58:45 +0000
ROA not before: Sat 01 Jan 2022 08:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 65550
IP address blocks: 81.8.35.0/24 maxlen: 24
81.8.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191518276 (0xb6a5644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=311718789db487979bfdf526bcebe92031a40d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c1:42:55:68:9c:01:02:b1:3e:93:d7:04:c7:
75:32:4d:32:e0:42:a1:ab:9f:30:35:eb:0c:09:11:
1a:92:9a:02:98:40:04:30:23:d4:86:85:be:31:93:
db:25:21:28:e4:fd:9c:e2:02:6e:80:59:69:1c:eb:
0e:7f:93:47:53:f2:80:79:57:65:8f:99:75:c1:72:
33:d7:cd:b1:6f:e4:9b:e0:66:34:27:2c:9c:22:65:
aa:36:14:14:cd:a1:ae:b5:df:0a:c5:cc:bb:ac:56:
4b:8a:a5:a4:10:4e:07:f0:a9:90:aa:b6:48:4e:49:
67:00:f9:be:29:0f:50:89:94:4a:46:a3:29:00:bd:
26:ae:7f:2a:c9:7e:27:4d:a1:71:2f:62:bb:4f:98:
6e:0d:07:30:49:72:ba:a4:97:30:6f:79:8a:25:76:
9e:a5:42:f2:7b:3d:32:d8:78:db:ae:71:4e:02:57:
43:eb:ab:19:21:7e:cc:a3:ab:46:56:ff:41:11:95:
c9:4e:b0:54:b5:a6:c5:63:ce:40:f4:a2:8a:d1:4b:
81:3c:25:c2:4a:25:6e:9a:57:3f:f8:dc:ce:54:76:
2f:23:f6:9e:3e:c8:b9:30:ad:f1:5b:13:bc:f1:8c:
ed:e5:e3:f5:2c:a4:bd:96:98:7e:83:ec:81:4f:de:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:17:18:78:9D:B4:87:97:9B:FD:F5:26:BC:EB:E9:20:31:A4:0D:87
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MRcYeJ20h5eb_fUmvOvpIDGkDYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.8.34.0/23
Signature Algorithm: sha256WithRSAEncryption
74:17:47:71:dd:11:6a:88:26:9b:b2:0c:9d:de:bf:37:b1:fb:
e1:10:4f:27:b4:ec:7d:88:e1:91:5c:3b:1c:99:d6:93:ca:66:
53:b5:0d:35:38:cb:43:eb:09:50:5c:c0:51:e5:66:2d:d0:48:
62:be:c6:90:ea:55:ae:41:b7:70:92:45:d4:2e:68:8e:c2:03:
48:7c:6b:10:2b:7d:b5:2a:4b:0b:51:a3:1d:c0:49:5b:02:58:
b6:8e:79:39:8f:54:3b:1f:d4:c8:f4:53:3c:78:78:9d:55:f1:
d3:e8:2a:0e:75:3d:72:f6:8a:8f:a4:8e:5a:7a:64:24:24:7b:
42:d1:55:3c:bb:aa:87:ab:dd:b9:ec:3b:b5:c8:4f:9f:63:14:
2d:97:39:2a:65:c9:d2:e1:45:e1:ad:f8:c6:65:d2:ac:f9:78:
23:8d:c7:a9:35:f7:57:df:18:7e:ae:4b:0d:73:18:72:f0:c0:
5e:fe:36:09:7e:fd:8d:16:3b:1e:da:8e:01:1e:ef:61:08:f9:
09:03:66:22:c6:81:73:84:98:92:72:0f:34:2f:39:b4:8d:f0:
6a:88:c0:68:24:5d:08:de:30:ca:6e:2e:4c:cd:72:d5:28:60:
8c:d1:4c:39:59:06:32:e3:73:f5:10:6f:b5:2e:f7:cd:a7:4e:
da:ca:dd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org