Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234332e35362e302f32332d3234203d3e2030.roa
File: 3138352e3234332e35362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: 0/+1MVO/ZLPS+9DXoNBnGChJwMcUQT5LnIFmz3pwkF4=
Subject key identifier: A4:DC:3B:09:F1:8C:E7:2F:B8:30:74:A1:E3:92:E9:24:C0:BF:26:88
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 0AFE5ED0BD9E73145B5889DD0F744F3004F58861
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234332e35362e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:43 +0000
ROA not before: Mon 27 Mar 2023 08:22:43 +0000
ROA not after: Mon 25 Mar 2024 08:27:43 +0000
asID: 0
IP address blocks: 185.243.56.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fe:5e:d0:bd:9e:73:14:5b:58:89:dd:0f:74:4f:30:04:f5:88:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Mar 27 08:22:43 2023 GMT
Not After : Mar 25 08:27:43 2024 GMT
Subject: CN=A4DC3B09F18CE72FB83074A1E392E924C0BF2688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:69:7f:c7:e2:f1:f4:ef:e4:7f:9f:11:3e:
47:2d:6f:ab:7b:e3:98:b8:20:c2:6d:6f:2e:14:a2:
3b:3a:e6:f1:16:59:96:53:85:0e:aa:18:3c:37:48:
a2:b8:f9:91:ea:15:ad:cc:69:b8:37:7a:1c:4f:60:
da:d9:fe:28:fe:df:e7:e6:65:73:02:52:7b:30:86:
7a:bf:b9:6a:15:25:ac:77:5b:19:8a:d2:6f:16:f2:
60:61:66:ce:b5:8c:fb:b8:08:c8:ef:e8:93:ad:75:
e9:54:a4:3e:56:fc:b1:c3:41:a2:bb:b5:42:79:e5:
dd:b6:03:fb:b3:b0:aa:61:81:81:96:9e:34:ab:9d:
12:0e:f3:e4:e0:8d:24:87:8f:9c:7c:57:6d:27:48:
20:15:39:30:04:2f:9d:ae:7e:6c:87:27:bf:4a:84:
0f:c3:9b:75:07:a9:c6:3e:3b:c1:44:1f:fe:0b:89:
25:d7:30:95:f6:06:0d:2a:17:17:1e:55:1d:52:5c:
25:3c:11:37:63:46:45:8a:16:eb:74:ca:3e:dc:48:
27:89:31:84:f8:a5:89:ca:7c:a0:ee:9c:14:66:cd:
4c:92:f3:2d:b0:2b:0b:23:88:38:14:03:df:f8:d4:
25:ac:ba:ea:92:f8:0b:c1:cd:6e:b8:74:a9:a9:04:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DC:3B:09:F1:8C:E7:2F:B8:30:74:A1:E3:92:E9:24:C0:BF:26:88
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3234332e35362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.56.0/23
Signature Algorithm: sha256WithRSAEncryption
45:3e:b3:22:8f:d0:87:71:3f:99:fa:a3:bc:d8:64:d8:dc:15:
ae:c8:4c:90:5d:95:ca:60:6c:cc:11:3c:45:2d:6e:d3:c5:90:
9d:ef:34:71:ee:0b:06:b6:8b:b6:7e:14:da:77:5e:48:af:5f:
18:7b:fb:eb:5b:3d:c7:33:dc:43:fa:4d:08:28:0f:f0:dc:1c:
a7:ed:cb:6f:1d:10:fb:11:4b:73:8d:b3:81:bd:b1:20:84:1a:
f9:42:28:bf:c9:4a:c0:24:70:7f:18:ab:1c:6e:5c:e8:3e:2d:
7d:85:b4:44:2b:e8:19:01:77:06:d4:6c:6f:36:18:17:b2:ff:
ad:bc:51:fc:ad:d7:6c:49:92:45:92:3a:dc:82:7c:e7:48:69:
81:48:ac:45:2b:96:b9:3d:44:f9:75:44:a3:5c:91:b5:e7:03:
fe:03:b5:d2:d3:bf:57:35:39:4c:c0:0b:7c:5a:24:16:00:90:
ea:37:18:d3:2d:d9:38:44:06:df:a1:a6:f6:22:5b:ae:d4:05:
11:b0:a4:f3:03:62:5b:e6:32:0d:ca:a9:9c:1a:09:dc:6c:e9:
93:81:07:98:de:87:bb:fc:3a:7a:92:45:69:fe:e4:30:3c:b3:
18:7a:f6:3a:ce:d0:56:f8:2e:bc:e4:0a:97:90:d9:2c:25:b8:
f9:fd:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org