Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/Mru4H49JCP3NvxzFFe5MF6qAlWM.roa
File: Mru4H49JCP3NvxzFFe5MF6qAlWM.roa (raw, json)
Hash identifier: nrKf89XLIByvpQi0XkCdBUu5cNVls6NSttvXRgp3OCo=
Subject key identifier: 32:BB:B8:1F:8F:49:08:FD:CD:BF:1C:C5:15:EE:4C:17:AA:80:95:63
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 01139C
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/Mru4H49JCP3NvxzFFe5MF6qAlWM.roa
Signing time: Tue 10 May 2022 13:49:29 +0000
ROA not before: Tue 10 May 2022 13:49:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 193.41.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70556 (0x1139c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: May 10 13:49:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32bbb81f8f4908fdcdbf1cc515ee4c17aa809563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:55:02:5a:e1:19:ee:4f:9e:1a:b6:c9:53:
e9:3b:6e:88:38:36:fb:dd:b4:34:e6:24:36:17:b7:
b1:10:67:eb:7a:61:c0:77:76:51:87:35:a3:ea:dd:
08:77:f2:74:69:2c:ba:55:7c:17:75:53:2a:fd:e7:
c5:33:b1:44:5b:2f:72:65:e3:89:bf:40:42:be:af:
1e:40:60:14:67:54:a1:22:4c:d8:3f:a1:cd:8a:3b:
6f:14:f2:93:29:b7:50:81:a8:34:cd:1c:25:52:6a:
15:dc:bc:e2:a8:ec:de:0a:b9:ae:82:8d:b7:a8:ed:
ca:04:eb:e3:f0:61:ee:fe:ca:c4:46:ee:9c:d3:09:
73:ef:ab:69:c7:48:68:4e:12:8a:52:5c:d8:ac:5d:
03:00:f5:4f:5c:6b:c4:71:96:8d:56:2a:a8:f4:1b:
4f:33:e6:9e:d0:c3:67:5b:61:6c:86:e6:ab:aa:5a:
63:ac:01:13:be:87:f3:c6:75:2a:8a:23:fb:9a:1f:
bc:6c:5c:c1:25:33:ce:a7:19:a7:04:45:29:d0:a7:
36:6d:70:8e:d0:9e:c0:cb:f3:11:d2:f9:da:8e:4c:
07:44:01:86:31:fb:75:fd:d9:e4:4d:16:37:c3:7e:
62:cf:f2:19:32:85:a0:42:e9:5b:0f:17:a6:04:7e:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BB:B8:1F:8F:49:08:FD:CD:BF:1C:C5:15:EE:4C:17:AA:80:95:63
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/Mru4H49JCP3NvxzFFe5MF6qAlWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3d:f3:62:8c:fc:d9:09:b2:3f:2d:63:5e:85:af:4b:6c:53:
a0:be:1c:60:6f:37:68:33:bb:70:ff:76:0a:ce:99:ff:d9:40:
ba:30:cc:a2:00:75:5e:11:45:46:f3:1c:e0:0e:12:76:70:17:
2c:fb:84:67:cb:91:e5:56:74:79:cc:64:75:4f:f9:70:09:05:
98:4e:aa:f5:a9:de:a3:62:64:aa:39:05:5e:17:94:72:4c:be:
9a:61:14:e8:3b:1d:d6:73:b3:64:cd:41:8d:fa:0f:fb:ad:b5:
b6:22:a7:a7:19:34:36:3c:31:07:8f:9b:e5:00:ee:36:43:30:
41:a2:88:22:53:31:a4:0b:aa:74:7b:ad:51:f1:5e:d4:4e:46:
82:fb:fe:d8:df:47:c6:87:63:30:5e:86:b1:b3:75:e1:e8:ed:
3a:cc:4b:a6:13:0e:83:58:fc:58:1a:96:d2:3a:11:31:26:2a:
c0:fd:73:7f:21:a2:d5:7a:2d:02:e7:46:85:97:d1:c8:2c:20:
75:4c:86:4e:df:e3:f6:95:a4:17:d5:6a:74:4b:90:ab:80:57:
e5:9a:d0:dd:8b:ca:b7:79:50:f1:03:cf:c7:79:e0:b9:99:4a:
d0:13:34:0a:86:3c:9a:5f:5e:3c:7f:89:12:87:b3:2a:8d:0d:
66:aa:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:30 2025 by rpki-client