Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa
File: 34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier: zZErNWGHR7epirhye22s3ONkdzy4IqnzV96ZZhFIqAc=
Subject key identifier: 61:15:F7:2A:EB:94:2A:BB:EE:E1:75:8A:19:01:A5:6C:41:88:FC:88
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 35F45EA57FDE2AFBD71E0BBC9F529B09C2EF586A
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa
Signing time: Mon 27 Mar 2023 08:28:07 +0000
ROA not before: Mon 27 Mar 2023 08:23:07 +0000
ROA not after: Mon 25 Mar 2024 08:28:07 +0000
asID: 211830
IP address blocks: 45.137.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f4:5e:a5:7f:de:2a:fb:d7:1e:0b:bc:9f:52:9b:09:c2:ef:58:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:07 2023 GMT
Not After : Mar 25 08:28:07 2024 GMT
Subject: CN=6115F72AEB942ABBEEE1758A1901A56C4188FC88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:1f:46:9f:21:63:62:24:3b:c0:5b:66:ef:
05:c5:27:92:9b:83:03:62:d9:11:2f:06:eb:8a:a1:
99:2d:16:97:1e:67:c0:c7:5c:b9:8f:f9:59:ee:19:
20:9c:2d:77:67:10:a7:24:69:1d:a3:4c:ca:92:c0:
5e:9e:ab:e8:f5:00:be:f7:71:43:49:b6:0d:48:ed:
f5:b2:25:2a:07:a7:56:73:cb:6c:9b:c4:19:1f:33:
fe:f6:a8:b9:02:42:a7:43:64:2c:21:6a:f1:e5:6a:
26:c0:f0:c7:d2:bd:58:62:fe:11:f2:f7:fd:fc:a1:
21:66:a9:c7:5f:81:cc:33:56:6d:b1:04:57:a6:0b:
0b:e9:1d:ff:ab:5c:91:ab:6d:ef:3b:80:c2:29:ce:
8b:35:12:3c:db:9a:18:9b:73:d5:75:4b:47:c2:53:
1a:b7:34:8c:af:4b:39:bc:f1:ea:14:11:da:b6:a6:
91:2a:c7:34:4a:2f:40:f6:d0:7b:dd:50:a9:39:4e:
ac:e8:9a:16:2d:6f:f8:f0:70:3a:a2:46:ba:27:83:
ac:98:c6:6f:0f:40:c6:2f:77:29:b2:ce:e7:67:e6:
86:2a:64:d0:61:b7:c5:8d:10:29:66:ae:dc:cd:63:
77:1f:e6:ae:ba:e5:8a:28:e9:07:32:7f:e5:43:42:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:F7:2A:EB:94:2A:BB:EE:E1:75:8A:19:01:A5:6C:41:88:FC:88
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.193.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fe:25:d6:37:2e:ba:85:2a:eb:28:01:ab:4d:c3:07:36:67:
a3:a8:64:1b:6f:b6:4c:13:6d:cc:40:ec:3d:10:57:77:67:97:
82:0b:4b:ba:f8:73:62:5d:87:bd:48:f7:22:a0:0f:dc:b5:3b:
8f:dd:6c:c6:71:70:61:cb:a1:79:2a:23:70:2b:26:f5:8a:7e:
02:d7:a6:9a:1e:8b:0e:7d:a1:ba:9e:4c:d3:5f:f7:93:ee:f0:
86:d8:7e:0d:10:c8:ea:d9:6e:4b:7a:aa:22:ee:8f:92:01:66:
b5:c3:b1:bb:cd:9f:4f:20:36:76:fc:93:d8:34:4c:77:c7:cc:
ba:95:ef:5d:1d:cf:bb:3c:80:52:d2:64:80:ea:8b:93:22:3c:
4b:5e:06:ae:4b:35:b6:b7:74:fd:f0:63:8c:9e:d6:17:38:51:
db:46:d3:b9:41:91:71:d4:5b:78:94:20:0f:74:70:12:67:fe:
56:36:56:b0:e5:53:78:75:f4:6d:c3:cd:83:13:60:89:8a:dc:
d1:d2:63:c9:d6:b6:fe:b0:95:ab:45:83:10:3e:7c:0f:4c:e8:
bd:aa:3c:19:3a:ff:6e:0e:cd:6b:5c:1c:f4:ae:1c:e5:da:21:
8a:d0:0d:0c:13:b8:d2:a4:96:10:f2:48:3a:75:84:d3:cf:ad:
3d:d2:a9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org