Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138322e31392e302f32342d3234203d3e20383334.roa
File: 352e3138322e31392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2WnW8+cCHwFJ0T1Khqhdg3S+R24ClB5NCWCz+uUux18=
Subject key identifier: E2:2A:6E:FF:D4:DB:71:D7:66:66:0E:FD:44:6E:C9:AF:18:B4:A7:05
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 3E8CE572F0A9B80DAB988264D655A9288D2A9FE4
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138322e31392e302f32342d3234203d3e20383334.roa
Signing time: Thu 20 Apr 2023 08:38:21 +0000
ROA not before: Thu 20 Apr 2023 08:33:21 +0000
ROA not after: Thu 18 Apr 2024 08:38:21 +0000
asID: 834
IP address blocks: 5.182.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8c:e5:72:f0:a9:b8:0d:ab:98:82:64:d6:55:a9:28:8d:2a:9f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 20 08:33:21 2023 GMT
Not After : Apr 18 08:38:21 2024 GMT
Subject: CN=E22A6EFFD4DB71D766660EFD446EC9AF18B4A705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:93:d2:6f:54:10:01:3f:76:66:e2:0d:1c:
fd:13:42:05:5f:a1:3b:e8:e3:8a:06:e3:15:67:11:
27:ca:b1:9e:f1:40:8b:9b:49:bf:93:09:85:59:27:
6e:02:f1:da:5f:11:e3:ca:ad:4e:03:7b:bd:ba:81:
15:e9:9f:30:75:6f:60:f2:c2:30:c2:e3:88:14:60:
b2:78:f8:6e:c2:7b:4c:26:32:f9:23:d8:79:bf:2a:
f8:28:a3:5c:c8:e5:aa:2e:77:e7:f2:96:42:df:74:
3a:8b:96:0d:95:d7:2d:3e:17:f3:dc:fb:53:b6:ce:
9e:f5:89:96:a7:9b:b2:f4:8a:b7:5b:dd:53:c0:1a:
12:38:d6:62:2d:c8:0e:cb:ea:54:95:be:20:56:7e:
6e:9a:ba:b5:25:f4:48:58:07:82:9f:c9:ba:9c:09:
07:43:df:db:df:0d:a2:03:09:19:98:2b:42:64:a1:
33:bc:78:33:25:d3:7f:c2:f4:e8:79:03:68:83:40:
13:23:2d:64:c0:c3:dc:26:2d:16:2f:a5:9c:61:de:
61:c6:65:9e:fb:d2:52:37:f2:4d:c8:59:89:f3:1f:
51:58:d4:e4:10:88:b1:be:5a:12:0b:c3:4e:91:1c:
0f:2a:0a:13:67:d4:08:85:9f:3d:e3:2b:15:6a:83:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:6E:FF:D4:DB:71:D7:66:66:0E:FD:44:6E:C9:AF:18:B4:A7:05
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3138322e31392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6a:93:c9:d7:7c:63:1f:27:2d:95:22:4e:a9:f1:ff:ce:8f:
84:04:b1:fe:3c:1e:08:af:3a:4c:66:e8:87:50:08:b7:22:d5:
9a:17:e4:6b:fe:7f:50:4a:ea:47:ed:53:44:ae:7f:f9:10:1d:
8e:dd:18:ab:27:7d:cd:ce:6d:bf:0e:77:a3:c7:10:d9:04:3a:
02:ea:65:ce:f3:22:d3:b4:8b:f5:a8:be:6d:ab:8e:17:63:dc:
2c:39:f1:7a:c6:5a:2c:da:76:4a:e4:32:ed:fa:db:63:55:71:
56:6a:9c:8e:d2:9d:f6:70:cd:12:60:27:19:47:ad:7a:68:fc:
6c:3e:3f:f5:5c:42:ab:aa:75:a6:af:a4:b0:67:cd:ba:ea:81:
a0:c1:52:9c:9f:38:78:fc:f2:6e:e1:5e:c2:99:39:1d:b6:de:
f1:88:52:9a:cd:44:ce:b5:38:9e:5a:26:11:e8:22:05:d7:00:
e8:25:b9:7b:15:da:d6:0d:c7:71:8f:52:3b:4b:69:9f:e3:4e:
99:39:97:f0:61:55:92:c9:a1:33:bd:72:d8:23:10:aa:02:64:
0d:96:dc:63:7f:65:e2:3f:ab:f9:2a:ba:e4:1a:29:6d:29:52:
bb:d8:04:4a:23:d9:6a:60:77:fb:11:70:0d:ad:02:ed:a4:7f:
a3:6c:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org