Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3134382e302f32332d3234203d3e20323131343332.roa
File: 352e3138302e3134382e302f32332d3234203d3e20323131343332.roa (raw, json)
Hash identifier: Oy0ZEcvCIaq1x0Sok0YftKkxfV/gd1nguQPNVH7HYU0=
Subject key identifier: 0F:14:4C:C5:AC:60:F4:DB:53:92:3B:C2:32:BE:55:B9:31:3E:58:E5
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 6A3B34EB7F09EC38A2B86291AB247C5A42FB1A85
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3134382e302f32332d3234203d3e20323131343332.roa
Signing time: Tue 11 Apr 2023 13:57:39 +0000
ROA not before: Tue 11 Apr 2023 13:52:39 +0000
ROA not after: Tue 09 Apr 2024 13:57:39 +0000
asID: 211432
IP address blocks: 5.180.148.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3b:34:eb:7f:09:ec:38:a2:b8:62:91:ab:24:7c:5a:42:fb:1a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 11 13:52:39 2023 GMT
Not After : Apr 9 13:57:39 2024 GMT
Subject: CN=0F144CC5AC60F4DB53923BC232BE55B9313E58E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:7e:f1:d3:d3:c6:87:11:85:c4:75:1e:9b:
26:12:19:b7:54:57:39:4e:c7:cd:8d:b2:3d:8c:46:
a4:7c:99:64:1b:df:05:91:34:9f:69:6d:30:09:7a:
46:6e:91:05:a1:b1:4c:1c:ec:a2:1e:f2:f0:81:ad:
68:ef:e6:73:e4:1e:63:c5:8d:0b:d0:7c:ea:22:c3:
05:3a:9b:48:50:2b:62:f1:ef:69:9c:2e:57:74:0d:
b5:25:fe:90:20:44:9e:f4:24:0e:fb:66:1b:13:ea:
64:a7:14:10:d8:d9:e4:ae:d0:e2:df:71:85:7f:b2:
85:70:94:77:a7:cf:da:60:44:83:42:65:3c:19:40:
8c:4e:3f:da:58:82:2e:55:1f:ec:5b:df:f8:ff:31:
0c:71:1e:d5:21:db:33:cc:52:dc:5f:87:65:9d:ee:
f3:3c:85:37:e7:4c:7c:8f:b1:63:9e:5c:e6:73:4f:
cc:bd:a0:49:f2:c4:7b:78:21:34:0c:da:62:59:26:
13:9d:f6:be:56:88:42:cd:9a:c0:d9:b7:0d:34:fb:
a3:e5:c2:6f:fb:ee:67:fd:f5:49:80:5a:dc:af:02:
b8:27:1b:e8:79:83:ed:0f:2e:7e:0d:3e:1b:71:4f:
31:85:32:90:f5:e9:9c:63:c9:63:48:61:09:3f:71:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:14:4C:C5:AC:60:F4:DB:53:92:3B:C2:32:BE:55:B9:31:3E:58:E5
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138302e3134382e302f32332d3234203d3e20323131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.148.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:f3:74:f1:17:bd:4e:b5:ee:3c:9d:a2:51:5b:93:c7:d6:91:
7b:aa:96:a7:db:07:40:36:08:bb:ff:c7:57:dc:6b:6c:ba:6f:
bc:18:a1:98:f4:06:7e:12:f2:79:9c:94:9f:be:19:0c:b3:d9:
88:ca:67:ad:86:3e:f5:ae:72:8e:b1:32:51:8e:56:f4:a6:33:
3e:6d:a2:13:23:29:03:79:0f:32:f0:ee:b0:19:30:e2:6b:6a:
b9:38:7e:b3:2d:9e:9c:89:ea:7f:29:cc:16:90:b5:c0:a8:bf:
27:a4:a5:14:14:fa:dd:3d:11:9e:eb:2b:27:11:b8:54:2b:01:
af:e5:53:58:9e:d8:d2:6d:68:fe:d6:71:72:7d:9b:80:f1:3b:
b6:e0:eb:8a:71:3f:4f:60:d7:f6:27:c9:5a:68:f7:44:df:72:
80:2c:13:4f:60:8a:b8:52:0c:20:c3:fc:d5:77:cf:71:93:7b:
df:7a:f5:a7:e5:13:9e:62:41:70:1e:5b:7a:9d:f8:73:2c:1a:
4f:67:a5:5f:47:42:bf:7a:02:1d:de:5b:95:43:5b:49:a7:76:
dc:94:2f:f0:bd:eb:bd:ac:35:6d:4d:62:06:9a:f0:e5:bf:ea:
4e:d9:41:3d:fe:54:a1:93:40:d9:95:f4:94:3b:05:2f:35:df:
67:e6:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org