Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/MKLNsZIfsXZ4DKc9V4GqL75URlo.roa
File: MKLNsZIfsXZ4DKc9V4GqL75URlo.roa (raw, json)
Hash identifier: PFNoLhKZuf6LaboMKwOok4zwTsz7rImc5FGw4Safog8=
Subject key identifier: 30:A2:CD:B1:92:1F:B1:76:78:0C:A7:3D:57:81:AA:2F:BE:54:46:5A
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018413297843D03A72849A3658DDAAF94E98
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/MKLNsZIfsXZ4DKc9V4GqL75URlo.roa
Signing time: Wed 26 Oct 2022 07:19:55 +0000
ROA not before: Wed 26 Oct 2022 07:19:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 93.190.11.0/24 maxlen: 24
93.190.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:29:78:43:d0:3a:72:84:9a:36:58:dd:aa:f9:4e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 26 07:19:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30a2cdb1921fb176780ca73d5781aa2fbe54465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:fb:01:5a:7b:45:aa:d9:9a:6c:c6:6d:d2:
9b:12:23:11:05:05:d1:2a:82:ef:47:c8:8a:24:bb:
88:bd:dd:0d:6f:e8:b2:ad:c1:f1:43:68:32:9f:54:
6e:7f:5f:1b:71:5f:84:a0:3f:80:84:a4:41:9b:30:
f7:62:9e:0b:c9:c6:82:53:65:ef:78:01:e8:2c:9c:
e8:08:c6:89:9e:17:22:a3:08:74:4b:6b:6e:95:86:
9e:3c:f5:7e:85:93:02:a6:3f:ac:c5:6c:07:e6:f9:
c1:d0:22:bd:d7:7b:4e:7b:76:28:05:11:5b:09:a1:
90:be:a3:0e:fe:67:c4:4c:fe:1d:19:25:c7:0a:4c:
e5:f0:71:1f:4e:00:56:5d:31:97:06:bb:1f:88:73:
cb:fb:b0:11:67:fc:7d:b7:96:78:21:23:d3:e9:9b:
b3:a5:2d:26:41:c3:01:7a:d1:ad:9e:8b:21:8d:97:
9a:71:a4:19:f9:e4:44:20:5a:71:56:31:1f:53:45:
68:6f:f2:a6:9f:b1:0d:d1:6c:cd:48:cb:3b:e9:11:
22:13:29:e9:a4:13:9e:6b:61:3b:b1:0e:c2:4b:22:
eb:3d:89:d0:cd:85:4a:df:3d:61:41:7c:9c:7f:63:
f3:ff:6b:fc:dc:0a:12:7d:81:0d:6c:8a:eb:d7:70:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:CD:B1:92:1F:B1:76:78:0C:A7:3D:57:81:AA:2F:BE:54:46:5A
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/MKLNsZIfsXZ4DKc9V4GqL75URlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.9.0/24
93.190.11.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:b7:82:73:2e:04:68:19:4a:6b:ff:39:55:31:2a:9c:3d:31:
db:d2:58:1c:74:62:1c:72:66:56:07:4b:60:c2:9d:27:2d:bf:
d5:81:7f:d4:e0:49:3b:85:3a:9f:37:58:95:c3:3f:7b:2a:1c:
ed:cf:08:77:a2:43:75:ae:05:d9:f5:99:61:a8:89:9e:c3:2d:
41:f3:f8:d2:9c:c6:ae:73:ef:e8:7a:62:d6:e6:43:67:8d:47:
e0:5a:d0:c5:6b:02:c0:b8:eb:fe:d7:b7:c6:b3:d0:d6:cd:0c:
45:c2:a6:58:19:d1:65:d7:03:a3:9b:1e:e4:cd:9d:b0:f4:88:
64:fb:33:73:54:56:96:66:48:d5:21:e5:90:50:e7:1e:f3:fd:
c3:1a:6c:e9:92:1f:5d:eb:c4:37:05:aa:38:ca:5b:d0:77:3f:
7b:c2:6c:d6:eb:f7:c5:d3:7c:47:26:8b:cf:3a:18:16:c3:46:
8d:62:85:4d:72:a3:a9:0b:39:9e:6e:a7:19:0d:63:7b:03:d5:
88:cf:e3:6f:5e:24:fe:6b:fd:92:f4:10:78:a7:9c:05:8e:4d:
8a:a8:2f:b1:e7:8f:1d:87:c0:22:4d:86:10:9e:d0:67:05:94:
fd:82:54:22:36:96:96:fb:75:06:56:79:b8:73:74:a3:f4:a2:
06:ab:eb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org