Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MDR9UQFttwEiGNrVnHTXdRhQIBk.roa
File: MDR9UQFttwEiGNrVnHTXdRhQIBk.roa (raw, json)
Hash identifier: b9rXshUMNEFFgv70io0sy+O+OQglhl0EJRRVBWIwnk4=
Subject key identifier: 30:34:7D:51:01:6D:B7:01:22:18:DA:D5:9C:74:D7:75:18:50:20:19
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A9616EC
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MDR9UQFttwEiGNrVnHTXdRhQIBk.roa
Signing time: Sat 01 Jan 2022 16:07:22 +0000
ROA not before: Sat 01 Jan 2022 16:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210212
IP address blocks: 151.237.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177608428 (0xa9616ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30347d51016db7012218dad59c74d77518502019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:2b:02:94:bf:b6:96:67:64:12:db:d5:fa:
3e:3c:26:b6:ba:1d:e9:25:61:2b:ce:7a:bc:f6:b0:
23:a5:2f:fb:c8:07:e0:ef:eb:4c:c9:ce:85:99:44:
75:8d:bf:f3:1e:e5:d1:a9:44:8f:78:b7:06:6b:5f:
2c:49:61:7b:97:33:09:7f:b2:2a:d5:db:7b:39:49:
58:48:f3:78:e1:5a:00:a2:7d:63:3e:02:a2:ab:62:
70:f9:33:72:dc:93:79:d9:c7:4b:63:65:59:02:be:
c6:de:e5:66:ef:25:1b:56:ee:7d:87:c1:7d:2c:7b:
1a:81:70:55:76:01:2c:63:cb:bb:36:6b:b0:b4:14:
7a:fb:ff:98:72:d5:11:1b:98:bb:ea:ae:40:c1:d2:
a7:27:60:a2:3c:5f:ff:c5:c0:a5:df:1b:8b:3a:aa:
1a:ab:ac:12:e2:93:ae:03:fe:5a:25:e6:eb:2c:36:
78:5d:73:92:ea:18:a0:7e:9b:0a:0e:e7:b0:69:41:
89:e5:ee:b3:75:59:b4:a8:a0:fc:93:89:8c:f8:9c:
67:46:5c:91:51:7b:e9:02:79:54:99:a3:0b:13:2f:
f6:23:d9:ac:fb:53:e7:6b:34:9a:d5:96:a6:28:d6:
f5:bb:d6:9e:e0:c7:52:3d:9d:4f:1d:78:d2:7d:40:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:34:7D:51:01:6D:B7:01:22:18:DA:D5:9C:74:D7:75:18:50:20:19
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/MDR9UQFttwEiGNrVnHTXdRhQIBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.27.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:70:62:9e:d3:87:f6:74:42:0e:c4:f6:5f:d1:c2:6c:34:f9:
7c:3a:2b:07:3a:53:80:fe:e1:30:e2:a0:b8:9b:f3:db:23:6b:
a2:24:9b:39:76:81:c3:46:a7:b0:c0:a6:6e:0d:e3:f8:b4:45:
06:69:c0:11:e6:00:88:bb:e8:c1:b6:51:c1:5c:d9:85:7b:47:
7e:93:7e:a9:bb:14:4f:87:6e:28:18:80:d5:6f:82:79:1c:9e:
1b:43:82:bd:db:f5:05:6f:33:cd:ab:94:46:a9:bf:4a:3d:c5:
6c:fb:90:8d:fb:8c:54:37:b1:e4:89:11:76:10:43:48:e7:27:
17:47:22:f9:ef:e8:d5:27:d5:1f:6d:f4:f3:b5:73:f6:63:08:
a7:e0:34:8b:0a:30:c1:a2:24:2a:74:b5:93:0c:dc:27:e6:7a:
14:db:a0:40:78:9d:ed:fa:24:38:ae:3c:64:fd:b2:34:50:aa:
8a:14:fa:6b:d0:e2:41:c0:25:ba:6d:fd:8b:09:05:b7:24:56:
70:00:47:ff:01:c1:6a:d3:88:4d:57:fd:8a:c2:5e:16:bf:93:
5b:de:72:e4:b5:c8:29:1f:01:5e:d4:5c:5b:f6:76:d7:7b:c4:
89:e4:60:ee:cb:87:b3:de:27:d1:5f:08:69:f7:65:37:bf:06:
56:f4:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org