Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230302e302f32332d3234203d3e203432333636.roa
File: 3139332e3134322e3230302e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: CMFqO9ZZSNp1ReSZu4g01a5cedxI9ROQ0qSnY73oo68=
Subject key identifier: 38:D7:95:00:A8:78:44:A3:0C:98:CB:3F:43:E5:E0:40:73:1B:35:DD
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 58F4188C98644BB05045706FDC286B4FE5E6E9DC
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230302e302f32332d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:22:01 +0000
ROA not before: Mon 17 Apr 2023 11:17:01 +0000
ROA not after: Mon 15 Apr 2024 11:22:01 +0000
asID: 42366
IP address blocks: 193.142.200.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f4:18:8c:98:64:4b:b0:50:45:70:6f:dc:28:6b:4f:e5:e6:e9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:17:01 2023 GMT
Not After : Apr 15 11:22:01 2024 GMT
Subject: CN=38D79500A87844A30C98CB3F43E5E040731B35DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:ac:0e:21:5a:89:44:6c:46:df:62:20:4c:
d9:e8:39:4c:18:b9:6d:d2:ce:4d:82:48:02:5e:12:
2b:9c:34:9d:b1:e8:fd:0f:cd:19:9d:d5:0e:43:e4:
ba:2f:6f:38:e3:6e:6d:72:6c:b5:e1:0d:cf:53:dd:
ef:d4:57:96:d8:19:ab:32:48:52:4e:7e:83:f8:15:
42:cd:89:ba:17:79:ed:56:b1:1f:11:12:dc:19:2c:
3c:16:2e:bb:01:c4:b1:85:67:f8:48:e7:04:d9:ba:
a6:28:fd:79:3d:73:51:68:d9:aa:1c:be:ed:35:68:
cf:20:4a:bb:91:a0:b2:7e:b9:81:0d:ea:7a:d0:58:
30:4a:47:59:1f:d2:b6:84:c9:fa:f9:ad:f2:11:2f:
84:ac:20:d2:bb:4b:4b:76:00:c8:f3:ca:51:98:72:
ee:b3:de:95:4e:3f:26:36:61:95:a4:12:63:47:73:
7d:52:83:90:0e:71:4e:d9:de:29:59:84:4f:69:48:
cb:5d:eb:76:4d:db:d2:d6:a2:0b:91:c8:ad:69:ab:
4e:cb:59:0f:4c:c0:42:1e:82:a5:52:a9:8f:f3:e6:
6d:bb:aa:f5:3a:0f:2b:93:6c:47:74:31:56:1f:0f:
77:eb:3a:a9:3e:cc:9a:65:33:33:c6:0e:92:e3:41:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D7:95:00:A8:78:44:A3:0C:98:CB:3F:43:E5:E0:40:73:1B:35:DD
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230302e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.200.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:36:c4:82:16:85:de:ec:ff:6e:49:60:fd:c1:db:c1:01:ed:
4e:6c:f2:66:98:59:27:0f:1a:ad:c5:cb:b4:0e:9e:2d:45:5a:
d8:57:6d:5b:2d:11:96:a7:fb:f2:74:fc:7f:92:1f:17:6d:72:
a3:84:de:ee:35:c6:d1:e7:11:fa:c8:2e:8b:52:f5:df:a7:3d:
83:8d:3c:44:35:67:92:79:bb:66:20:b1:3a:9c:03:40:e7:73:
08:ca:f3:69:c8:91:73:a3:3b:c4:e8:c4:17:d5:3b:61:58:d2:
81:5c:37:98:e2:fa:28:c2:13:db:3a:14:09:e5:e0:ac:57:ce:
2d:23:21:89:c3:6e:58:09:4b:51:18:c4:45:6a:12:be:f8:de:
06:78:b1:5d:92:7d:6d:f3:e6:71:b0:b4:11:2d:0f:cb:f9:ee:
53:05:b2:f8:77:46:9b:61:47:09:67:86:a5:21:44:57:64:b1:
e6:c6:58:22:98:f0:e8:54:43:b6:c0:b7:9e:21:0d:d6:3f:8d:
ad:e4:e4:4c:70:62:93:9f:7a:86:1d:4b:35:93:11:bb:30:d7:
8c:8d:5d:1b:d0:b6:dc:37:d6:92:81:cb:75:98:f6:53:56:d1:
fd:40:25:86:0f:be:20:60:09:78:9b:8a:7b:6b:55:47:c7:1a:
2a:43:90:7d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUWPQYjJhkS7BQRXBv3ChrT+Xm6dwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzA0MTcxMTE3MDFaFw0yNDA0MTUxMTIyMDFaMDMxMTAvBgNV
BAMTKDM4RDc5NTAwQTg3ODQ0QTMwQzk4Q0IzRjQzRTVFMDQwNzMxQjM1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6KwOIVqJRGxG32IgTNnoOUwY
uW3Szk2CSAJeEiucNJ2x6P0PzRmd1Q5D5Lovbzjjbm1ybLXhDc9T3e/UV5bYGasy
SFJOfoP4FULNiboXee1WsR8REtwZLDwWLrsBxLGFZ/hI5wTZuqYo/Xk9c1Fo2aoc
vu01aM8gSruRoLJ+uYEN6nrQWDBKR1kf0raEyfr5rfIRL4SsINK7S0t2AMjzylGY
cu6z3pVOPyY2YZWkEmNHc31Sg5AOcU7Z3ilZhE9pSMtd63ZN29LWoguRyK1pq07L
WQ9MwEIegqVSqY/z5m27qvU6DyuTbEd0MVYfD3frOqk+zJplMzPGDpLjQWdxAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUONeVAKh4RKMMmMs/Q+XgQHMbNd0wHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzEzOTMzMmUzMTM0MzIyZTMy
MzAzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzIzMzM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHBjsgwDQYJKoZIhvcNAQELBQADggEBAA82xIIWhd7s/25JYP3B28EB7U5s8maY
WScPGq3Fy7QOni1FWthXbVstEZan+/J0/H+SHxdtcqOE3u41xtHnEfrILotS9d+n
PYONPEQ1Z5J5u2YgsTqcA0DncwjK82nIkXOjO8ToxBfVO2FY0oFcN5ji+ijCE9s6
FAnl4KxXzi0jIYnDblgJS1EYxEVqEr743gZ4sV2SfW3z5nGwtBEtD8v57lMFsvh3
RpthRwlnhqUhRFdksebGWCKY8OhUQ7bAt54hDdY/ja3k5ExwYpOfeoYdSzWTEbsw
14yNXRvQttw31pKBy3WY9lNW0f1AJYYPviBgCXibintrVUfHGipDkH0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org