Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/MLJRc5w3xOoQdyCM--wQfT0e6cI.roa
File: MLJRc5w3xOoQdyCM--wQfT0e6cI.roa (raw, json)
Hash identifier: kEzME1zJlTpvFlrTlGwU33dSebDVCHs5gHrN0wDVaUo=
Subject key identifier: 30:B2:51:73:9C:37:C4:EA:10:77:20:8C:FB:EC:10:7D:3D:1E:E9:C2
Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial: 03814B9C
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/MLJRc5w3xOoQdyCM--wQfT0e6cI.roa
Signing time: Sat 01 Jan 2022 09:04:33 +0000
ROA not before: Sat 01 Jan 2022 09:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29030
IP address blocks: 185.217.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58805148 (0x3814b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Validity
Not Before: Jan 1 09:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30b251739c37c4ea1077208cfbec107d3d1ee9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:f5:9f:c2:e2:31:47:cc:1f:2a:75:ce:14:
66:e1:65:63:b1:e7:00:85:c3:8e:c3:84:7e:64:62:
bc:61:b2:11:87:60:9f:8f:9e:0b:51:de:61:bf:bc:
58:5c:ea:ee:a9:dc:f5:99:26:87:54:7a:b8:33:33:
c0:4a:d1:34:3b:48:4d:e0:8e:ef:47:85:20:28:02:
e8:0c:6a:51:c7:2f:14:37:07:73:55:fb:7c:1e:44:
5c:a0:c4:b0:26:3d:cf:51:a4:47:98:6d:d4:c1:ae:
15:d6:13:60:e8:30:af:f5:4d:3c:45:fe:c3:2d:7e:
3b:a6:c1:0c:3e:66:be:d2:62:61:71:f4:3e:80:b9:
a4:1b:7b:38:ac:95:b8:19:ed:7b:1c:90:7f:17:8e:
49:26:04:c5:36:01:e5:be:fe:4c:a2:c3:af:12:da:
ee:f2:2f:02:8f:b7:c2:1d:8a:ae:a4:df:44:a3:09:
b3:a2:3b:ec:8f:47:25:49:c1:f3:b3:27:bd:4f:ba:
d9:4f:33:6a:b9:e2:79:23:0d:07:13:dc:16:bb:08:
51:a8:3f:a5:7f:32:42:93:57:ea:50:92:9c:4f:00:
9f:51:db:62:23:d1:7e:13:5a:9a:5e:19:82:5c:10:
b2:fa:4f:4b:0c:bc:b1:92:93:41:99:d5:25:0c:57:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:51:73:9C:37:C4:EA:10:77:20:8C:FB:EC:10:7D:3D:1E:E9:C2
X509v3 Authority Key Identifier:
keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/MLJRc5w3xOoQdyCM--wQfT0e6cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.38.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b8:46:b1:72:af:da:44:14:6b:6c:df:ce:39:59:44:5f:82:
a9:4c:f5:6d:84:27:36:b6:5b:c9:eb:70:67:1b:12:8c:1c:e6:
db:92:f0:a9:c3:ce:06:bd:b3:c1:a9:b9:9c:44:5a:08:d2:a0:
99:72:76:d9:34:b1:31:45:30:c4:f7:3b:38:e1:90:1b:6a:5b:
66:4b:ce:3a:57:10:83:1f:a5:06:ea:52:5b:c6:04:0e:34:ca:
6e:07:d7:c6:ee:ad:c5:21:06:a8:92:fe:19:12:72:7a:82:de:
68:68:86:a5:a6:7e:96:70:6c:4c:0e:10:9a:6a:ac:9d:a6:96:
af:20:b5:64:f6:f9:82:3c:c6:fc:20:2e:0d:72:e3:b2:ec:8d:
42:7f:7b:b4:5c:dd:e9:a5:ee:f6:be:e5:3d:63:92:7d:6b:58:
3d:c3:4e:7e:3a:b0:ec:b3:e1:a0:6d:c3:db:08:2a:e0:d9:e7:
0f:92:a7:df:b9:15:ab:3d:c8:83:16:37:d4:e7:a1:f4:2c:af:
84:13:2c:15:b8:e6:29:8c:83:b7:e7:6e:2d:1c:50:12:61:4d:
37:7d:a4:67:95:4d:08:43:27:3f:be:bd:6e:77:b8:4e:72:07:
5a:b9:04:04:66:0f:0f:0e:d1:cf:84:f9:11:85:8e:11:ec:cd:
13:ba:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:23 2023 by rpki-client on console-ams.rpki-client.org