Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231362e3233312e302f32342d3234203d3e2030.roa
File: 3138352e3231362e3233312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: nQSnuYvG1W3+ouIAkl7D8cPS4M6LvjRll4jUHKCTmhA=
Subject key identifier: E0:61:FE:C6:F3:8C:42:43:7B:DB:7E:92:E4:F3:23:55:76:E3:EE:2C
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 3BF618CF27CB23DD8DC76E1BC6BC186B0A370978
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231362e3233312e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:39 +0000
ROA not before: Mon 27 Mar 2023 08:22:39 +0000
ROA not after: Mon 25 Mar 2024 08:27:39 +0000
asID: 0
IP address blocks: 185.216.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f6:18:cf:27:cb:23:dd:8d:c7:6e:1b:c6:bc:18:6b:0a:37:09:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Mar 27 08:22:39 2023 GMT
Not After : Mar 25 08:27:39 2024 GMT
Subject: CN=E061FEC6F38C42437BDB7E92E4F3235576E3EE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:b4:a9:f3:5e:95:99:9f:fa:4f:24:b0:be:
b2:a5:35:c5:96:ec:8f:9e:8a:69:9f:e1:75:71:67:
86:d5:2d:33:48:5e:39:47:2a:86:ef:02:1e:a2:08:
a1:c3:6a:25:c4:26:3c:da:86:0b:07:fc:c6:38:2a:
72:79:ea:5b:f8:8b:84:59:7e:56:72:95:48:d8:8d:
9d:b1:a7:9e:2f:42:dc:af:a4:76:f5:7e:de:16:1f:
aa:57:74:f1:c5:88:7f:d5:ba:38:62:cf:fa:f0:68:
31:3f:1b:48:80:5d:62:09:1d:2d:25:c7:7a:fc:6d:
06:6a:2d:89:3a:51:66:ed:11:02:db:d9:ab:20:31:
92:82:38:a2:bc:46:2d:b2:50:40:8a:5d:b7:6b:1c:
22:fe:0c:55:55:67:aa:aa:34:11:4b:31:4f:76:b0:
2f:63:ce:3e:60:99:22:12:df:d2:d5:b4:27:76:67:
41:6a:a5:04:e9:25:29:dc:6d:49:e1:13:cf:4a:84:
45:f2:bf:5e:25:bb:0d:fd:0a:49:53:7c:df:3b:cd:
13:04:37:47:75:84:af:4c:6c:6e:ba:7b:22:8b:a1:
3d:63:1e:e7:b7:bc:4b:86:bf:67:37:81:40:84:3a:
9a:c7:34:ca:7d:77:02:35:12:2e:13:fe:14:4d:5c:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:61:FE:C6:F3:8C:42:43:7B:DB:7E:92:E4:F3:23:55:76:E3:EE:2C
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231362e3233312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.231.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b6:47:eb:25:bb:05:23:bb:b9:e1:14:9d:f9:8d:a2:79:e1:
da:9e:79:d3:a6:9f:75:a2:8b:ff:82:a1:55:2e:99:32:d2:92:
a5:42:9f:4b:49:92:18:e8:3b:58:79:60:30:1c:6e:05:1e:e2:
23:c9:93:9c:c6:4d:da:59:46:4d:80:8f:88:44:97:fa:21:e9:
82:94:31:29:ff:b1:49:54:7d:80:68:17:4b:63:52:70:0f:12:
76:f6:31:25:7b:b3:71:b3:ea:4c:10:af:af:fa:8e:ac:a2:a8:
80:fe:18:9a:62:20:b4:bd:81:e2:16:8f:e3:59:dd:bd:8a:30:
46:f4:00:68:76:a5:23:c5:1b:df:ea:fe:3d:a1:f6:90:fa:b6:
5a:ad:6c:99:25:48:69:8b:aa:45:01:d1:ec:b0:73:80:1a:d5:
27:65:b9:55:c9:2a:69:c6:25:b0:04:df:34:7d:16:52:33:79:
9c:13:4e:9e:f5:e0:55:85:8e:1e:8f:5d:4a:41:5f:6c:a1:c2:
97:d0:bb:55:64:4c:f1:f4:40:6a:6c:f4:4a:97:dd:d2:b3:f7:
8a:0d:66:cf:f1:9a:ca:36:fd:65:11:92:f9:36:36:b7:d3:a9:
2d:0b:ef:8d:92:9a:fd:bd:30:01:6f:31:e9:28:5e:05:45:94:
84:22:fe:1c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUO/YYzyfLI92Nx24bxrwYawo3CXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjk3YmNmYWMyN2JiYWYxOWRlMWQzMWU1MzYyOTcyNmMx
ZTRjYWFhMjAeFw0yMzAzMjcwODIyMzlaFw0yNDAzMjUwODI3MzlaMDMxMTAvBgNV
BAMTKEUwNjFGRUM2RjM4QzQyNDM3QkRCN0U5MkU0RjMyMzU1NzZFM0VFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxM7Sp816VmZ/6TySwvrKlNcWW
7I+eimmf4XVxZ4bVLTNIXjlHKobvAh6iCKHDaiXEJjzahgsH/MY4KnJ56lv4i4RZ
flZylUjYjZ2xp54vQtyvpHb1ft4WH6pXdPHFiH/Vujhiz/rwaDE/G0iAXWIJHS0l
x3r8bQZqLYk6UWbtEQLb2asgMZKCOKK8Ri2yUECKXbdrHCL+DFVVZ6qqNBFLMU92
sC9jzj5gmSIS39LVtCd2Z0FqpQTpJSncbUnhE89KhEXyv14luw39CklTfN87zRME
N0d1hK9MbG66eyKLoT1jHue3vEuGv2c3gUCEOprHNMp9dwI1Ei4T/hRNXFwrAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU4GH+xvOMQkN7236S5PMjVXbj7iwwHwYDVR0j
BBgwFoAUuXvPrCe7rxneHTHlNilybB5MqqIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzMvQjk3QkNGQUMyN0JCQUYxOURFMUQzMUU1MzYyOTcyNkMxRTRDQUFBMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3VYdlByQ2U3cnhuZUhUSGxOaWx5YkI1
TXFxSS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzMvMzEzODM1MmUzMjMxMzYyZTMy
MzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudjnMA0G
CSqGSIb3DQEBCwUAA4IBAQAStkfrJbsFI7u54RSd+Y2ieeHannnTpp91oov/gqFV
Lpky0pKlQp9LSZIY6DtYeWAwHG4FHuIjyZOcxk3aWUZNgI+IRJf6IemClDEp/7FJ
VH2AaBdLY1JwDxJ29jEle7Nxs+pMEK+v+o6soqiA/hiaYiC0vYHiFo/jWd29ijBG
9ABodqUjxRvf6v49ofaQ+rZarWyZJUhpi6pFAdHssHOAGtUnZblVySppxiWwBN80
fRZSM3mcE06e9eBVhY4ej11KQV9socKX0LtVZEzx9EBqbPRKl93Ss/eKDWbP8ZrK
Nv1lEZL5Nja306ktC++Nkpr9vTABbzHpKF4FRZSEIv4c
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org