Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3134342e302f32312d3234203d3e203632323430.roa
File: 3134302e3135302e3134342e302f32312d3234203d3e203632323430.roa (raw, json)
Hash identifier: fJ4fvV8YJg/ODCyi9a2iBaRcwN8UK+qbDp95IMAWUs8=
Subject key identifier: 09:B0:71:39:A5:D7:99:8D:F8:96:D4:94:96:56:59:63:E9:BF:CF:1F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 39641C470C95680A6B357604E76035CB8269B55B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3134342e302f32312d3234203d3e203632323430.roa
Signing time: Thu 09 Mar 2023 10:08:25 +0000
ROA not before: Thu 09 Mar 2023 10:03:25 +0000
ROA not after: Thu 07 Mar 2024 10:08:25 +0000
asID: 62240
IP address blocks: 140.150.144.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:64:1c:47:0c:95:68:0a:6b:35:76:04:e7:60:35:cb:82:69:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 9 10:03:25 2023 GMT
Not After : Mar 7 10:08:25 2024 GMT
Subject: CN=09B07139A5D7998DF896D49496565963E9BFCF1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:b4:b2:3f:5e:df:1a:38:5d:c3:a4:15:60:
09:9a:5d:6b:76:60:c2:f4:d7:73:b8:d6:a0:81:d5:
d4:83:10:2d:80:0c:89:a4:93:f6:d6:d2:5e:43:ea:
95:a8:22:d9:88:f8:cb:80:4a:6e:9d:a8:58:2c:3f:
0e:ef:fb:2d:dd:b2:3a:52:a6:73:fd:fc:a1:22:4b:
33:f1:a7:41:c3:8b:8e:82:7e:2c:ef:dc:af:cf:2a:
03:1b:96:37:75:6b:e5:09:40:06:e0:d7:78:2c:d3:
d8:c8:0a:f0:03:ee:cc:a5:1c:7a:07:45:7c:af:a5:
b2:9b:85:cb:bd:50:75:bd:9f:c6:43:83:26:e6:32:
e3:16:5d:93:2d:5f:00:be:53:05:4c:67:b8:10:d3:
09:7d:d9:cb:52:f7:9c:d4:a2:ff:92:ea:27:45:bd:
93:34:d6:65:f7:14:19:8a:d3:30:a7:25:40:4d:c5:
81:b5:5a:9c:b1:a3:c1:e3:93:06:a3:ab:da:49:07:
73:cc:c3:7d:80:e8:df:42:32:92:60:cc:29:d8:ce:
cf:dc:55:98:1e:d4:bc:b3:59:5c:5e:ef:f4:5d:91:
19:53:cf:85:f5:71:57:93:dc:e2:0c:ac:68:f5:c2:
b8:4e:af:e5:30:a0:9d:e0:d8:76:14:ba:06:d6:3d:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:71:39:A5:D7:99:8D:F8:96:D4:94:96:56:59:63:E9:BF:CF:1F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3134342e302f32312d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.144.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:d3:0f:98:5c:e9:b5:95:59:a3:0b:89:68:06:21:ef:ce:31:
b1:54:e4:a7:71:11:f9:30:24:fb:0a:d4:60:f0:2a:d1:7e:38:
c0:16:26:b3:9b:b2:02:75:7b:1f:b1:cc:73:a8:1f:dd:d8:fb:
82:6c:02:db:47:75:0c:7d:9a:d7:df:58:cb:e9:2f:59:81:44:
79:74:8e:cc:11:4a:c4:9a:40:9e:f0:5c:3b:bb:93:d2:52:7c:
d1:56:57:7e:16:61:fe:02:03:76:72:c0:3e:cd:10:5e:6b:8d:
0f:7c:8f:5a:18:02:eb:35:03:58:52:e4:6e:40:13:65:c9:30:
cb:08:b7:7d:83:1f:3c:1f:a0:23:3a:5f:a9:65:26:57:ad:da:
02:32:4b:81:4c:7c:40:f6:4c:45:3e:04:0c:d7:dc:30:82:d7:
63:27:be:de:96:c4:29:49:01:38:77:c0:c0:48:40:41:bf:8d:
7f:f9:cb:01:92:74:bf:6d:8d:c0:22:7d:25:13:81:cb:e6:5d:
28:e2:9f:bc:b8:95:82:cd:e3:cd:a9:f0:56:9f:0a:b6:2e:33:
79:b7:93:6e:43:0b:e9:ee:7f:ae:b8:dd:b5:54:b5:70:24:b4:
e2:e5:1f:3e:fb:42:c6:8d:d5:e6:1d:e1:cf:87:c5:05:5a:7a:
cb:c3:3e:18
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUOWQcRwyVaAprNXYE52A1y4JptVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yMzAzMDkxMDAzMjVaFw0yNDAzMDcxMDA4MjVaMDMxMTAvBgNV
BAMTKDA5QjA3MTM5QTVENzk5OERGODk2RDQ5NDk2NTY1OTYzRTlCRkNGMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhbSyP17fGjhdw6QVYAmaXWt2
YML013O41qCB1dSDEC2ADImkk/bW0l5D6pWoItmI+MuASm6dqFgsPw7v+y3dsjpS
pnP9/KEiSzPxp0HDi46Cfizv3K/PKgMbljd1a+UJQAbg13gs09jICvAD7sylHHoH
RXyvpbKbhcu9UHW9n8ZDgybmMuMWXZMtXwC+UwVMZ7gQ0wl92ctS95zUov+S6idF
vZM01mX3FBmK0zCnJUBNxYG1Wpyxo8Hjkwajq9pJB3PMw32A6N9CMpJgzCnYzs/c
VZge1LyzWVxe7/RdkRlTz4X1cVeT3OIMrGj1wrhOr+UwoJ3g2HYUugbWPV6PAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUCbBxOaXXmY34ltSUllZZY+m/zx8wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUt
YWVhMS00MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvMzEzNDMwMmUzMTM1MzAyZTMx
MzQzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAOMlpAwDQYJKoZIhvcNAQELBQADggEBAK3TD5hc6bWVWaMLiWgGIe/OMbFU5Kdx
EfkwJPsK1GDwKtF+OMAWJrObsgJ1ex+xzHOoH93Y+4JsAttHdQx9mtffWMvpL1mB
RHl0jswRSsSaQJ7wXDu7k9JSfNFWV34WYf4CA3ZywD7NEF5rjQ98j1oYAus1A1hS
5G5AE2XJMMsIt32DHzwfoCM6X6llJlet2gIyS4FMfED2TEU+BAzX3DCC12Mnvt6W
xClJATh3wMBIQEG/jX/5ywGSdL9tjcAifSUTgcvmXSjin7y4lYLN482p8FafCrYu
M3m3k25DC+nuf6643bVUtXAktOLlHz77QsaN1eYd4c+HxQVaesvDPhg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:54 2024 by rpki-client on console-ams.rpki-client.org