Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133342e3232372e302f32342d3234203d3e203139343337.roa
File: 34352e3133342e3232372e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: P+QbSg4vKgT9qtdJvyKT85JKAdZWullERMsKb29Div0=
Subject key identifier: D3:B9:AA:CE:5F:B5:B7:68:27:1F:BE:C2:8A:4A:53:DF:A3:FA:5C:5C
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4D13F8DF02237D246F61B0242F7567E3C80A8565
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133342e3232372e302f32342d3234203d3e203139343337.roa
Signing time: Mon 27 Mar 2023 08:28:13 +0000
ROA not before: Mon 27 Mar 2023 08:23:13 +0000
ROA not after: Mon 25 Mar 2024 08:28:13 +0000
asID: 19437
IP address blocks: 45.134.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:13:f8:df:02:23:7d:24:6f:61:b0:24:2f:75:67:e3:c8:0a:85:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:13 2023 GMT
Not After : Mar 25 08:28:13 2024 GMT
Subject: CN=D3B9AACE5FB5B768271FBEC28A4A53DFA3FA5C5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:ea:31:f7:94:72:f8:fe:48:98:f8:72:e4:
67:60:43:1c:de:69:1c:22:99:6b:1f:fa:61:0f:2e:
8d:98:48:e7:8d:19:9d:2e:c8:e3:cb:b1:bd:06:42:
7b:55:c9:6b:39:ff:2b:53:54:52:ea:ed:6b:83:4d:
97:bc:d3:71:a0:f2:e3:e9:fc:3f:7e:b0:ea:39:fe:
91:ba:ec:8b:25:50:3f:66:03:ca:1f:03:76:93:c3:
30:a4:42:34:a7:23:62:90:f9:63:25:fd:8e:61:76:
dd:e3:f9:79:a3:33:32:f7:4a:39:30:14:e2:8a:79:
01:bc:7c:12:ab:68:7f:76:06:41:97:63:33:a5:88:
eb:72:72:1e:18:9b:f3:83:41:d8:64:19:72:7b:25:
45:ad:6e:34:69:47:d6:df:17:94:cc:86:8e:3d:10:
7c:cd:a1:28:46:a9:5f:0d:b9:1e:5b:55:87:72:c0:
e5:b3:b1:5d:e1:83:29:68:a4:e0:07:8f:da:73:c6:
1f:6f:e3:12:58:67:28:87:64:df:79:25:25:f9:f4:
ee:a3:5f:41:52:b7:ff:1a:cf:47:3b:66:5d:ef:b8:
ae:82:68:07:80:0b:5c:30:66:f1:de:a1:23:c3:14:
38:91:a8:1c:6e:02:83:b8:87:e7:ef:49:e8:19:fd:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B9:AA:CE:5F:B5:B7:68:27:1F:BE:C2:8A:4A:53:DF:A3:FA:5C:5C
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133342e3232372e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:80:93:3e:2f:ad:d1:ab:fb:47:f8:54:73:e1:1e:4e:dc:77:
a7:c8:96:af:02:f5:67:1d:0c:3f:f4:f5:bf:25:92:c6:a7:ba:
90:9c:9a:1b:02:41:6f:4a:c0:36:c8:44:bf:b8:24:da:a9:09:
61:44:02:b9:4f:c5:2a:6d:2f:05:a1:f8:8f:27:1e:ac:c0:bf:
41:0f:04:2a:85:52:d8:fe:ab:b1:0f:55:fa:65:6b:54:b9:f9:
3c:04:4f:2b:6e:96:ec:26:eb:ab:ca:3a:6f:97:a4:62:9f:f5:
0c:56:84:a6:06:c9:f7:0c:65:e6:f5:ee:0f:ce:f8:96:77:df:
b5:c3:12:ee:1d:d9:88:1b:22:fa:c1:a4:16:2e:c2:bc:76:53:
21:dd:9a:37:e6:13:d9:82:f6:8b:d2:a9:59:66:70:cf:2e:6e:
bb:1b:d7:e1:3e:a5:f9:cc:0c:77:b9:fa:b8:23:ce:d3:fe:ce:
0b:57:1e:03:0b:46:c3:12:08:7f:a3:29:91:b7:6d:54:ce:9c:
5b:4e:07:49:d6:3d:f8:cc:c9:06:20:f6:fd:09:9e:99:38:27:
1d:f7:ce:8d:b9:21:7e:80:0c:48:74:61:2b:bf:29:14:aa:59:
44:23:bb:8e:d2:e6:60:4d:01:3a:41:39:b9:28:81:ee:fd:83:
a9:e5:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org