Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3136302e302f32312d3234203d3e20323132323338.roa
File: 3134302e3135302e3136302e302f32312d3234203d3e20323132323338.roa (raw, json)
Hash identifier: MeVoBIFC8gSQR4i+X7My1VpgFlYFefFBdDN5ixOJPVw=
Subject key identifier: 16:64:19:37:13:2F:70:15:C1:29:89:4E:8A:FF:37:8E:6D:C4:4D:9D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2BE5BC4BB9DFCBCC9641ABC95D39D180C72A43D6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3136302e302f32312d3234203d3e20323132323338.roa
Signing time: Tue 21 Mar 2023 18:19:58 +0000
ROA not before: Tue 21 Mar 2023 18:14:58 +0000
ROA not after: Tue 19 Mar 2024 18:19:58 +0000
asID: 212238
IP address blocks: 140.150.160.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e5:bc:4b:b9:df:cb:cc:96:41:ab:c9:5d:39:d1:80:c7:2a:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 21 18:14:58 2023 GMT
Not After : Mar 19 18:19:58 2024 GMT
Subject: CN=16641937132F7015C129894E8AFF378E6DC44D9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:da:0f:05:c8:b5:d3:24:05:c0:6f:94:35:
ad:1b:51:5b:d0:0b:41:d6:4e:bf:5c:18:7a:2d:6f:
4a:d5:e8:fd:52:07:9c:5a:a2:a6:01:1a:f5:f1:1c:
cc:7f:14:10:a3:f0:1d:07:23:7d:e3:a9:85:fa:99:
82:f3:46:b1:69:2c:10:a9:08:1e:9e:79:39:66:67:
a5:b1:01:3c:bd:74:21:5a:7d:e5:d3:57:1c:84:ef:
4c:a5:31:52:f4:1d:14:99:0a:88:d3:bb:04:9e:70:
d4:1b:7b:82:c8:af:3c:e8:67:1b:bb:ac:a4:c0:61:
f6:e3:a3:42:2d:10:68:6e:bf:05:75:13:c6:0e:a9:
38:1b:9d:cf:4b:6b:aa:c0:ac:c0:77:ef:90:ac:bc:
f9:a4:b5:b1:6c:9c:a6:b2:68:fa:eb:6c:f7:36:82:
11:4c:2e:1c:31:d5:c2:bc:ba:f0:bf:95:bb:ff:03:
20:d2:d5:04:28:bf:57:89:29:eb:04:5d:f7:f6:1c:
01:ea:8d:4e:dc:22:b4:02:06:36:23:02:24:0d:98:
eb:c0:d6:24:a8:3c:13:44:a8:57:ab:a9:2c:09:03:
e3:4d:b8:51:be:fe:50:3e:cc:de:af:6f:10:2b:5e:
4b:95:a3:b0:2d:43:c1:02:e6:e6:53:8a:cd:e6:cc:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:64:19:37:13:2F:70:15:C1:29:89:4E:8A:FF:37:8E:6D:C4:4D:9D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/3134302e3135302e3136302e302f32312d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.160.0/21
Signature Algorithm: sha256WithRSAEncryption
59:ff:1e:fa:b8:17:38:da:85:f0:ab:a5:ed:f7:a6:77:73:c1:
0b:df:71:cb:4e:4b:da:5e:10:7e:df:ce:aa:81:07:76:71:8c:
40:01:b4:96:5e:b1:2d:2e:62:5a:89:bc:40:44:af:aa:51:f6:
ec:69:cc:6c:73:76:e2:bf:ab:71:be:95:8a:36:f0:5d:a1:25:
da:06:4f:8d:6d:37:dc:7e:ed:be:f0:d1:b5:63:cf:ff:b7:2f:
f2:ce:03:b2:b6:02:e0:bc:a8:de:5f:a8:a8:37:12:63:97:52:
d1:24:dc:32:5b:36:d5:96:1e:71:91:72:3b:0b:82:ec:ec:d1:
ea:0e:d5:ca:94:6c:33:c4:f0:eb:4d:5d:3b:48:e6:14:46:ab:
8e:5d:15:dc:8b:15:28:f3:62:81:c6:6b:db:20:e1:02:b3:c4:
d7:42:90:18:df:d6:59:76:8a:d8:23:53:79:4e:32:02:22:5e:
9c:86:6d:3f:81:68:ef:38:f0:df:1b:cc:1c:9c:54:e9:66:2b:
2b:ff:60:08:89:43:ca:77:3b:4e:40:a4:db:c9:1e:6a:16:f2:
f8:b9:63:d6:1d:64:7e:89:a5:49:e3:63:52:c5:3c:a6:df:19:
37:8e:c0:ee:92:29:b4:46:b2:aa:99:f0:1c:1b:c0:22:5f:45:
40:24:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org