Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e20323131393336.roa
File: 3134362e3234372e35382e302f32342d3234203d3e20323131393336.roa (raw, json)
Hash identifier: YS1Oo6jKpZ7AFy4RpENECoGUoqD7D7mVGCrrBXJI1pk=
Subject key identifier: F9:88:C4:6A:74:87:40:7D:53:06:D7:1D:F1:6B:06:8C:B7:C2:30:50
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 14D1F6C0D56C978E9B65545C6441FFFFCE67B32F
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e20323131393336.roa
Signing time: Mon 23 Jan 2023 12:03:04 +0000
ROA not before: Mon 23 Jan 2023 11:58:04 +0000
ROA not after: Mon 22 Jan 2024 12:03:04 +0000
asID: 211936
IP address blocks: 146.247.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d1:f6:c0:d5:6c:97:8e:9b:65:54:5c:64:41:ff:ff:ce:67:b3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Jan 23 11:58:04 2023 GMT
Not After : Jan 22 12:03:04 2024 GMT
Subject: CN=F988C46A7487407D5306D71DF16B068CB7C23050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:55:bc:5a:b2:28:09:83:0c:a7:54:35:a2:da:
50:2d:c1:21:44:b0:29:bf:02:fd:95:2f:27:b5:c2:
68:8d:a2:19:7e:ad:6f:fa:b0:02:3b:00:f4:eb:3a:
a1:47:f3:eb:34:4d:7e:2c:c8:f2:44:ce:a3:b7:b8:
76:a8:2c:99:6e:d7:6e:0b:ae:3a:42:7f:94:36:f8:
e4:fa:ba:f8:e2:72:08:ef:9e:c7:e7:e8:fd:f8:ab:
11:47:b3:17:77:15:6c:82:53:e0:18:85:3d:ac:2c:
cf:42:41:a4:71:df:de:1a:35:3f:ff:55:41:c8:91:
35:89:50:62:8f:81:e4:d0:83:ef:f8:5a:a9:49:66:
3c:78:43:03:53:78:f5:eb:7f:5b:80:62:1c:30:4b:
fa:61:a5:0e:6a:ae:7f:e1:0c:e4:dc:df:47:c7:50:
6a:c1:a4:28:03:5d:54:de:b8:97:f9:9b:17:0d:37:
75:de:02:68:d4:e6:d2:7d:36:c3:61:69:0e:2b:de:
5b:eb:9d:02:ba:17:e1:05:59:e2:ab:20:e7:5d:32:
93:de:8e:f3:5d:5b:6d:2d:6d:04:66:ea:a1:12:9f:
77:bc:66:17:ad:c7:99:f5:16:34:9e:e8:81:f8:7d:
f2:56:d2:c3:4a:c6:cc:a2:38:24:77:b8:54:b2:b6:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:88:C4:6A:74:87:40:7D:53:06:D7:1D:F1:6B:06:8C:B7:C2:30:50
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e20323131393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:75:82:75:02:96:2e:ed:a2:bb:b0:24:b6:72:bb:d9:88:35:
12:3e:bf:d0:c1:e9:8c:45:c8:da:2a:2b:3d:aa:10:7d:0d:da:
e0:11:08:74:b0:be:62:56:c2:28:0f:4c:6c:ef:f1:3b:26:aa:
02:79:18:73:86:95:e1:b1:1e:c7:a5:63:7c:d6:18:f2:16:ba:
b8:5c:44:b0:2f:f7:a4:d3:ce:3d:b8:1f:4c:9c:7f:3c:a4:bc:
7b:95:b5:59:e8:b4:07:fb:2f:c6:4e:d7:33:7a:04:13:9d:f9:
e4:56:95:ef:2f:80:10:4d:2b:c5:73:2e:0b:c1:68:96:9d:60:
7d:6c:37:b9:b3:d0:c9:1e:68:4e:a8:86:17:91:63:88:14:9d:
04:b2:46:83:d1:53:2c:66:a2:40:3a:1b:a5:7d:3e:3c:1c:8f:
97:bd:31:ac:1d:4b:c9:68:c0:9d:3b:2d:f6:5a:a1:f0:d3:a0:
09:5e:24:d6:13:6a:13:b7:b3:ef:c2:92:06:71:5b:19:ea:f0:
c2:cf:0f:f9:96:b6:02:0c:e7:5e:70:00:ce:64:e4:8c:c9:11:
36:4f:a4:ea:81:e9:6d:2b:7a:00:12:f8:95:60:48:33:b8:80:
fe:25:d6:e3:a7:38:87:55:2c:c8:62:4d:e0:f3:e7:6c:e3:0f:
f2:20:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org