Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3230332e31342e302f32342d3234203d3e2030.roa
File: 3139332e3230332e31342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: /myL4Q584KOU3sUqww7GPQ9aZ5ULju9o3XoTk6a2qLI=
Subject key identifier: 68:D7:E8:A0:A0:8A:20:45:A2:4A:BA:F2:4A:CE:66:34:67:F7:BC:2A
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 5598FC14D53E1F9562C39F83D3347217A8CB5FB7
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3230332e31342e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:16 +0000
ROA not before: Mon 27 Mar 2023 08:23:16 +0000
ROA not after: Mon 25 Mar 2024 08:28:16 +0000
asID: 0
IP address blocks: 193.203.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:98:fc:14:d5:3e:1f:95:62:c3:9f:83:d3:34:72:17:a8:cb:5f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:16 2023 GMT
Not After : Mar 25 08:28:16 2024 GMT
Subject: CN=68D7E8A0A08A2045A24ABAF24ACE663467F7BC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:dc:e7:e1:75:0b:3b:f0:ae:b3:3f:92:dd:
ad:e0:1c:77:82:31:10:7c:01:a5:80:2a:db:f3:85:
06:83:43:db:59:3a:ff:e2:ef:e5:ad:11:59:8d:56:
62:a3:14:82:18:d3:94:c7:8f:a1:58:bb:c2:31:ec:
e2:79:35:8c:c9:d0:a1:e6:7d:22:68:d8:0d:57:eb:
6b:95:c2:d4:f5:0e:73:9f:a1:76:1b:ab:f3:18:c9:
57:22:c5:17:6c:a1:01:9f:4d:ea:74:fa:49:48:cc:
5f:23:3d:1d:49:25:d6:74:66:30:70:cc:14:57:9a:
85:cb:0e:ae:74:ba:28:c3:92:53:09:d4:d2:d6:03:
75:48:a8:ff:a1:0a:a5:ed:c5:d4:12:dd:81:83:0e:
dc:df:5d:0a:3a:5d:1c:af:f2:08:b6:4b:7b:54:be:
5e:93:ca:0c:89:dd:a1:44:2a:af:46:d7:b0:f2:48:
0b:c2:96:54:44:29:d8:05:71:96:5c:c0:14:3f:08:
aa:3d:e6:06:91:d0:4a:cc:5f:e7:a8:fc:27:d6:ba:
86:3b:cc:b7:29:8c:f3:9c:fb:1b:43:3b:fa:ee:69:
0f:1d:90:7c:4f:ef:08:f5:1e:be:a8:cb:3b:43:82:
c5:09:2c:1e:b9:b9:2d:a5:e9:0a:65:c5:db:75:6c:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:E8:A0:A0:8A:20:45:A2:4A:BA:F2:4A:CE:66:34:67:F7:BC:2A
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3230332e31342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.14.0/24
Signature Algorithm: sha256WithRSAEncryption
34:86:c8:3a:2e:8b:b8:55:c9:85:6f:f5:b1:8d:43:c9:9b:36:
14:82:8d:0c:f8:39:61:6e:12:78:b3:ef:29:9b:ea:08:6c:1b:
2c:ac:61:8f:4d:f5:da:e9:50:08:07:cc:b7:da:f9:66:af:59:
9e:b9:87:fc:04:ac:50:0b:c4:ae:1e:28:35:49:cc:c6:cd:de:
39:38:e7:54:5d:8e:6a:09:5a:ce:bc:28:0b:2a:68:34:b9:6f:
11:eb:d5:c7:f5:99:bf:e1:4f:d6:92:d2:18:eb:1b:b9:e2:58:
f5:45:c6:7d:8d:4c:09:88:2e:b2:a2:55:d1:97:7e:43:56:26:
a7:88:52:2b:88:86:0b:d5:ed:56:da:52:8c:04:1d:f4:b3:ec:
5d:7f:c7:64:12:e8:c2:a8:1e:c7:15:c2:f6:a3:3f:c6:00:18:
69:49:ae:77:8b:66:e4:0b:dc:0f:fe:87:c9:03:e9:0b:f6:d4:
3f:f2:e7:d9:a6:71:99:7c:e9:db:0c:47:4b:6c:10:7e:80:fb:
d7:9e:37:16:21:11:d6:54:76:87:6a:e6:14:07:f0:25:66:61:
53:32:91:ef:cc:dc:4e:88:f8:aa:e0:05:02:a2:21:df:4a:a4:
35:44:08:69:e9:de:18:42:46:ef:c8:34:af:86:25:64:4d:05:
0f:1a:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org