Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/37372e3234332e38362e302f32332d3234203d3e2030.roa
File: 37372e3234332e38362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: qGxohETFzfNrF5s4LGGQCHOOAQPtpIsp7rW/T8yMWYI=
Subject key identifier: 6E:4D:A0:56:B4:CD:E0:BC:6E:AA:21:D1:5F:97:4C:EA:B5:F3:82:DE
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 3D636C1CF1C1D5FDD0D2C8FE6700E06C7F65FC9A
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/37372e3234332e38362e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:12 +0000
ROA not before: Mon 27 Mar 2023 08:23:12 +0000
ROA not after: Mon 25 Mar 2024 08:28:12 +0000
asID: 0
IP address blocks: 77.243.86.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:63:6c:1c:f1:c1:d5:fd:d0:d2:c8:fe:67:00:e0:6c:7f:65:fc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:12 2023 GMT
Not After : Mar 25 08:28:12 2024 GMT
Subject: CN=6E4DA056B4CDE0BC6EAA21D15F974CEAB5F382DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:b8:8f:10:d0:30:6f:82:60:0e:97:bd:70:
3b:2c:cb:92:da:40:4d:43:73:94:26:e3:bb:47:89:
b3:26:4e:0e:65:14:e1:86:f8:7f:bb:44:de:2d:cc:
18:ab:01:5b:db:74:99:0f:44:91:72:60:d3:4a:2f:
1d:0d:69:07:e3:58:e1:26:2c:db:7c:6b:d4:fe:e5:
8f:b3:46:80:50:33:a9:1c:94:b0:3d:31:ee:7f:b6:
b8:8c:39:e1:e5:9e:97:b8:a0:a6:e6:cd:d5:c0:eb:
45:9e:e0:53:0b:3b:51:9b:de:66:df:9a:3f:31:91:
aa:27:b1:23:1e:86:3f:a3:cf:42:80:0d:ac:90:4c:
fe:60:51:a5:80:03:26:21:bc:e7:03:1b:7c:89:28:
d7:57:18:b5:c6:91:63:94:df:fc:08:7b:71:c5:d8:
a6:5b:25:f5:95:c6:c0:0d:c3:47:de:e5:9f:e1:17:
9a:a1:50:52:8d:1f:4c:dd:e7:2b:c5:7c:d3:c1:45:
1f:32:ee:8a:cf:0b:4f:d3:bf:85:ff:1e:ee:44:a1:
c4:4c:00:b7:4f:c2:46:31:53:99:37:16:da:b1:75:
89:02:49:4a:3d:b6:1d:28:73:dd:65:c2:bc:a5:a5:
54:9b:1a:7c:38:35:26:87:8f:d6:75:65:70:b2:ba:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4D:A0:56:B4:CD:E0:BC:6E:AA:21:D1:5F:97:4C:EA:B5:F3:82:DE
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/37372e3234332e38362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.86.0/23
Signature Algorithm: sha256WithRSAEncryption
98:36:09:af:bf:2e:53:27:00:ba:d9:a6:8c:92:8e:c3:c8:fb:
7c:50:f0:a6:43:4d:6a:d0:48:00:88:b4:7c:07:3a:2e:37:5a:
f2:37:ae:01:a8:42:d6:ae:85:01:ca:e2:58:4b:76:1e:09:bb:
7d:6f:80:b2:34:5a:9c:60:b6:3d:53:45:78:f0:7d:37:ec:44:
5c:a7:35:ac:58:54:b8:49:fa:9e:ac:24:ae:f0:fb:85:f7:f8:
7c:54:c0:ce:97:ed:9e:a3:0d:e9:d6:5b:25:4d:d3:52:f9:ac:
a3:84:6f:5c:af:3c:db:9e:27:2e:1b:b9:c1:af:ae:83:fd:cb:
25:0d:75:f0:78:1f:6b:3e:1d:06:fb:48:94:8a:29:50:bd:e0:
a7:8f:95:08:3e:fe:3a:33:b3:d7:cf:f8:11:c2:a6:3f:e1:ec:
c7:8d:1d:ea:29:d1:e2:9d:cb:49:b1:e4:eb:ac:97:df:32:aa:
5e:95:80:aa:40:c1:00:47:6a:60:d4:46:cb:48:fb:bb:11:5b:
a0:7e:2e:c1:c8:35:8e:64:f9:98:d6:fb:a1:63:ea:e8:ac:5d:
2e:ff:9c:b8:68:5e:6e:0d:52:89:6e:64:b5:c1:af:8b:08:ab:
01:6e:4a:32:1d:48:85:29:e9:9d:78:a1:82:72:59:f9:75:90:
8e:1c:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org