Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33342e3233352e302f32342d3234203d3e2030.roa
File: 3139342e33342e3233352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: z/rFRvBBtMHbWuY8D0I2O2wKooIYF5dRbQzAvARchyA=
Subject key identifier: FF:76:AE:4D:26:62:2D:80:E3:A9:6D:2B:CC:CE:86:FD:F3:8C:50:85
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 70F3034996FB21822E76F92219509570ED553BD1
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33342e3233352e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:05 +0000
ROA not before: Mon 27 Mar 2023 08:23:05 +0000
ROA not after: Mon 25 Mar 2024 08:28:05 +0000
asID: 0
IP address blocks: 194.34.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f3:03:49:96:fb:21:82:2e:76:f9:22:19:50:95:70:ed:55:3b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:05 2023 GMT
Not After : Mar 25 08:28:05 2024 GMT
Subject: CN=FF76AE4D26622D80E3A96D2BCCCE86FDF38C5085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:5a:3e:a6:fa:1b:a1:f3:50:81:5a:5b:d6:
39:e0:48:04:f6:3b:c1:9c:61:07:ea:a1:14:bb:d2:
42:51:ae:8f:5f:03:8c:91:05:75:50:f1:18:51:c0:
d1:b3:a7:5b:5c:2e:ff:2d:1e:54:c0:ce:e5:a7:fa:
4a:37:59:17:10:92:de:31:11:d4:7f:6e:10:51:20:
6c:6c:c6:4b:f2:a6:13:83:af:6a:3b:0f:1f:cc:e0:
c3:58:f3:13:83:a4:07:ac:6f:f9:f0:75:7e:6d:d9:
01:46:10:c7:b8:69:f0:87:6f:c6:ca:69:32:a5:9f:
8e:5d:f3:9d:c7:63:48:a9:37:81:ea:d3:b5:71:8a:
dd:84:d1:b8:06:c5:e6:ba:55:96:67:4c:28:87:bb:
20:22:3e:63:24:aa:dd:02:2c:0b:64:55:89:05:e3:
59:a9:03:bb:3c:92:8f:78:a5:a3:20:aa:63:6e:d8:
fd:67:33:7a:85:94:1b:8c:07:67:2c:ca:64:47:f6:
99:39:78:9e:f4:66:fa:b5:6c:39:dd:a6:5c:4f:b5:
aa:ed:68:74:97:d1:55:07:30:6a:d3:d9:f7:d9:7c:
d4:91:9f:b6:c9:9a:d4:48:53:29:01:b2:49:c0:97:
cf:b0:79:d9:43:58:60:d9:ff:6f:ce:37:3f:b4:54:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:AE:4D:26:62:2D:80:E3:A9:6D:2B:CC:CE:86:FD:F3:8C:50:85
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33342e3233352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.235.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3f:0b:5c:b3:a4:97:d1:1a:8f:0d:70:4a:61:bf:cb:0c:59:
5c:f2:d9:77:fd:e2:bb:ee:51:19:ce:fb:c5:01:bf:b0:ad:91:
e6:3e:fe:f8:34:28:55:d9:94:be:4c:0f:11:ce:eb:0f:04:0b:
98:7a:02:7e:fe:f0:fd:b3:ff:88:1d:f0:24:c1:f3:88:e4:a4:
84:c1:c0:f1:e7:90:79:5d:1f:79:39:ad:2e:91:74:ab:49:5f:
f3:24:84:90:59:59:a3:11:cd:66:b6:32:7f:2e:aa:f5:5f:51:
30:bf:e6:06:8b:ee:1c:f6:67:06:62:4d:aa:e1:82:7d:55:82:
4d:3c:11:0b:48:e3:3b:49:d2:db:b2:3f:1a:9f:74:af:51:10:
69:3f:4c:cc:ec:be:3b:61:d7:1e:ef:a5:79:fd:18:18:4d:43:
17:44:bb:bb:01:34:d3:34:05:27:23:b7:1a:1f:d2:43:4e:bd:
34:4f:13:49:eb:60:45:7a:fa:25:af:31:30:1e:94:fa:02:6e:
1f:b1:1a:f1:d3:f7:3d:8b:d9:5a:f0:76:e9:7f:23:6f:ff:2d:
89:b9:83:10:19:a6:a1:c5:c0:13:89:ca:d0:20:69:76:2c:8d:
ad:86:3d:90:ee:87:3c:92:a7:ed:05:6b:d8:2a:50:58:da:92:
45:84:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org