Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3234302e3234342e302f32322d3234203d3e2030.roa
File: 3138352e3234302e3234342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: SvUGo5sz0a45QVmZxhw0J1aqsud1DhtnqhGDWtkJQac=
Subject key identifier: 72:94:CD:00:31:B7:8F:06:D0:4A:F3:3D:E8:6B:57:EE:A4:28:51:38
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 5D37EC86D6E9A8DDDE5AA50448FCEE371D079BE7
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3234302e3234342e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:15 +0000
ROA not before: Mon 27 Mar 2023 08:23:15 +0000
ROA not after: Mon 25 Mar 2024 08:28:15 +0000
asID: 0
IP address blocks: 185.240.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:37:ec:86:d6:e9:a8:dd:de:5a:a5:04:48:fc:ee:37:1d:07:9b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:15 2023 GMT
Not After : Mar 25 08:28:15 2024 GMT
Subject: CN=7294CD0031B78F06D04AF33DE86B57EEA4285138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:3d:dd:a2:b3:2b:6b:8c:5f:de:69:42:db:
83:b5:5b:21:ee:da:58:ac:78:9d:a0:9e:9c:02:05:
99:91:ea:26:d8:f2:9a:51:91:95:0e:9d:d5:5c:ea:
a7:c5:af:e7:54:ec:43:dd:6d:8a:48:e0:01:26:36:
1b:1b:01:8d:b5:fd:be:78:b1:ea:e5:e3:33:2f:34:
37:e9:5d:b5:51:3b:4d:a2:11:6b:bb:e5:7a:41:a9:
f5:19:54:71:89:13:a1:c8:40:5c:9c:52:f7:35:92:
b4:d7:31:78:0a:de:3e:b7:83:62:e2:81:11:8d:e0:
88:66:6a:d5:d3:e9:80:a7:6a:df:3f:30:41:25:aa:
0e:86:a6:02:1e:5d:06:ca:d8:ee:5a:03:22:9d:9a:
86:02:3f:8b:0a:14:59:6d:16:36:5c:d8:dc:e8:90:
4f:76:98:66:5f:43:6b:b2:b4:cf:54:8a:f4:1e:03:
0e:e3:38:c0:94:02:71:c7:9f:5b:56:57:fb:36:a1:
ce:03:ca:f6:db:b9:1b:53:e5:2d:fa:d8:e7:42:60:
06:c1:a0:16:93:e7:dc:c3:0a:86:80:e0:84:06:e7:
30:a8:69:1a:46:8d:2b:b0:2b:bd:bb:54:b0:46:7b:
9e:58:a5:17:d5:0e:4e:b4:af:a6:73:f3:c6:4e:95:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:CD:00:31:B7:8F:06:D0:4A:F3:3D:E8:6B:57:EE:A4:28:51:38
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e3234302e3234342e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:48:85:fc:7a:f7:35:ef:97:a3:e6:9d:b6:cb:99:a5:ef:b1:
3a:84:de:1f:88:bc:aa:fa:96:2b:c2:af:f9:8b:d0:81:07:fb:
48:a7:a9:44:2b:1c:e8:0e:9d:4a:5f:6b:2d:15:8a:9a:bf:e7:
6a:ba:19:48:a8:90:56:e0:c2:93:37:75:55:75:e6:7b:88:b2:
d1:22:82:bc:a3:1a:ac:92:dc:cb:47:3e:04:28:4c:e3:6e:2e:
0c:4c:ab:f1:70:dd:5a:4a:51:7c:50:84:76:dd:e4:58:c7:3a:
a6:e4:74:b3:a7:9e:76:b3:e3:e1:7a:dc:63:40:5a:b9:5d:77:
29:6a:09:9a:6d:39:e0:59:b5:a7:9e:8f:4b:3a:1e:43:9a:d6:
9d:a2:e2:df:61:ad:e2:c7:a6:80:57:85:90:c3:14:e5:19:7e:
76:01:36:1b:c1:3c:e8:06:4f:42:15:5a:94:09:60:36:d9:93:
1f:d5:30:f5:5d:88:bd:90:fb:b7:b4:d0:61:a7:a1:da:23:94:
a3:77:f6:e6:58:28:84:b0:ff:67:69:bd:7d:ad:28:d3:90:30:
37:6f:ef:34:98:f3:15:1e:05:70:86:a6:15:9f:a7:60:b3:4a:
f5:f7:f5:53:b9:06:ce:75:2c:b4:a6:93:94:c4:45:52:cd:b0:
07:34:c1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org