Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/MLU7__kkTkSHc7oJEOoRpb01wzo.roa
File: MLU7__kkTkSHc7oJEOoRpb01wzo.roa (raw, json)
Hash identifier: 3bBbHHC11z2OoeNDxTsB4eUMDLpk/AjTQZCniuCndKg=
Subject key identifier: 30:B5:3B:FF:F9:24:4E:44:87:73:BA:09:10:EA:11:A5:BD:35:C3:3A
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 023553F2
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/MLU7__kkTkSHc7oJEOoRpb01wzo.roa
Signing time: Sat 01 Jan 2022 10:03:21 +0000
ROA not before: Sat 01 Jan 2022 10:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 193.37.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37049330 (0x23553f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jan 1 10:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30b53bfff9244e448773ba0910ea11a5bd35c33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:f1:42:20:a7:2d:de:e2:40:63:35:ee:ab:
72:54:31:85:db:db:21:e7:64:77:d0:41:e0:5c:0a:
72:ff:3e:35:d7:1a:30:55:53:ef:2f:05:14:25:7a:
fc:5d:2c:f3:b4:f4:27:80:f1:c1:5c:33:41:ba:b9:
1f:cf:41:15:df:5d:1a:cf:e4:a6:ec:eb:44:49:3b:
7b:8e:0d:5e:ab:b8:37:49:a1:80:94:45:ad:76:5d:
66:2d:9b:36:3c:1a:ff:e4:27:aa:c9:4d:7f:66:22:
8a:06:01:1a:93:32:80:87:4f:0d:d1:9a:70:03:0b:
1e:32:b6:fd:ee:21:c8:aa:c0:35:a6:1f:25:f7:1e:
f2:f7:40:6f:76:a1:89:c7:5a:0a:73:25:d6:e8:ca:
c6:a5:a3:02:43:2c:35:d5:aa:08:22:05:d3:a3:c5:
0c:02:55:d2:5e:3b:12:d8:6f:c6:6f:31:32:d9:9c:
79:73:d9:67:54:bd:78:2c:d7:1c:3f:39:16:50:40:
e7:1c:26:3d:1f:00:7e:4b:a5:1d:c8:55:10:85:e6:
6c:12:4a:fb:64:57:61:8a:46:00:87:77:69:0f:9b:
83:c7:b3:3d:43:fc:c1:50:25:cf:98:be:b9:ad:11:
94:ad:37:2b:db:c7:f4:d3:82:6f:a5:8f:8f:63:d4:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B5:3B:FF:F9:24:4E:44:87:73:BA:09:10:EA:11:A5:BD:35:C3:3A
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/MLU7__kkTkSHc7oJEOoRpb01wzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.250.0/24
Signature Algorithm: sha256WithRSAEncryption
88:0e:67:2d:fe:7a:bb:1b:34:4b:db:f9:4a:f5:3e:79:f2:df:
45:c8:a8:e9:41:12:94:6f:51:32:45:cc:07:13:49:fa:38:ed:
e5:0b:59:71:e1:fe:07:d9:17:7d:6b:cb:c0:f7:db:bb:40:3c:
3a:3c:dd:a4:c9:52:fc:e6:d0:89:21:20:21:7f:51:57:b2:14:
0d:9b:49:8a:cc:e3:55:e9:d4:1a:cb:a1:9e:a5:4c:0a:80:8a:
ee:bc:c9:3d:85:b0:89:3e:51:37:ef:dc:69:1f:2d:e2:e0:a3:
a7:63:5d:9b:3c:74:9b:55:a5:3d:9c:41:e6:d1:7b:94:e2:1c:
88:43:32:99:42:7e:fb:d9:b6:37:0e:f5:f5:b7:35:f0:f3:60:
9e:95:07:79:d0:44:f7:89:c6:e5:e6:f4:22:25:98:58:b3:10:
37:5b:c8:5a:46:29:78:99:13:04:e7:71:f4:5b:a6:a4:9c:91:
76:59:fc:08:7d:4e:c3:e8:3e:51:8d:ce:10:a4:30:8a:25:cb:
6a:ef:be:9c:e8:19:59:a3:98:ba:e0:a7:3e:a1:d8:78:33:de:
01:67:97:94:1a:d4:ab:83:c6:5b:e5:fc:83:4b:20:7e:1e:71:
38:97:52:44:52:84:db:4f:32:86:02:1e:34:28:a0:6d:74:ac:
46:ff:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:39 2024 by rpki-client on console-fra.rpki-client.org