Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e2033333230.roa
File: 3134362e3234372e35382e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: Pd6aePm+VrEWOvqAx2TX+fOkBxFdccSV8qSYbvHsNNc=
Subject key identifier: 81:9C:68:1A:F7:93:54:E2:44:E0:98:C7:53:86:3F:AD:4C:7B:8B:32
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 1F285EEC4F5A7BA8D412E465134D044A24CACEE4
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e2033333230.roa
Signing time: Mon 23 Jan 2023 12:03:04 +0000
ROA not before: Mon 23 Jan 2023 11:58:04 +0000
ROA not after: Mon 22 Jan 2024 12:03:04 +0000
asID: 3320
IP address blocks: 146.247.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:28:5e:ec:4f:5a:7b:a8:d4:12:e4:65:13:4d:04:4a:24:ca:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Jan 23 11:58:04 2023 GMT
Not After : Jan 22 12:03:04 2024 GMT
Subject: CN=819C681AF79354E244E098C753863FAD4C7B8B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:d5:47:29:9e:b8:f1:78:c5:28:c9:d7:d8:
da:58:29:28:fd:df:66:f9:84:05:c1:8a:67:a7:16:
76:76:23:f3:f9:18:ee:66:aa:b8:da:af:50:a7:5d:
d8:ea:7d:f5:9c:6d:4f:3e:f6:85:7c:96:4f:38:47:
0b:0e:e9:89:8c:0b:57:93:a9:0e:13:dd:10:1a:64:
2d:35:e8:bf:2f:94:9f:ba:0d:0a:2b:55:dd:de:16:
9c:45:39:12:40:74:08:26:a5:e1:ef:0f:56:f0:95:
16:06:bb:cd:96:ac:b6:5e:51:06:bd:af:b4:b0:a2:
09:89:d3:54:41:22:f2:b5:5c:65:c7:c1:cd:80:3e:
bb:8a:93:c3:70:56:40:44:53:61:f8:9e:d1:f1:57:
e4:b3:5b:db:ad:de:9e:e9:f1:ec:b3:0e:04:ab:78:
f5:af:ee:80:47:7b:34:f0:88:20:c7:8e:81:18:5e:
55:c2:d8:7b:9c:d9:f3:99:04:9f:88:6c:bd:0e:dd:
c6:eb:57:29:e8:23:30:72:40:63:35:47:65:95:ba:
bf:ce:72:7a:ae:46:dc:8f:8c:f4:44:a9:49:e3:50:
30:dc:60:84:eb:76:04:b5:9f:03:6f:b7:f9:c8:86:
ee:7b:29:cd:8a:ed:9a:5c:59:62:8b:2d:de:9d:c9:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:68:1A:F7:93:54:E2:44:E0:98:C7:53:86:3F:AD:4C:7B:8B:32
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35382e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:da:df:20:7b:cf:58:e6:2e:34:d5:4f:cf:54:70:9e:f6:b0:
8b:97:b2:4f:df:14:0a:70:16:f2:71:4e:9b:b5:d0:7a:31:2e:
1f:77:e1:80:b8:fd:21:05:0f:0e:02:f7:ab:eb:a0:8a:d2:ab:
54:59:69:ea:6d:c1:53:ae:1c:02:be:49:4d:09:d6:c1:31:05:
cd:08:db:2d:c6:94:98:b4:70:fd:20:38:c1:2d:a9:35:19:bb:
9a:74:ec:f4:71:0f:b0:08:54:fe:40:b5:f7:c7:c4:e8:aa:9e:
5e:15:50:e4:e0:6f:a3:d2:d0:c7:8e:ce:43:f6:d6:38:e4:00:
3d:38:d4:ba:58:26:e4:b6:98:ce:ba:dd:cb:56:b9:eb:be:b6:
ae:37:e9:e8:5b:bb:7a:d5:14:d7:79:d8:40:51:7f:f2:55:8e:
00:0f:98:57:52:fd:a2:54:00:64:7a:e4:9f:e1:af:9d:c8:30:
83:f2:c1:ea:64:f2:d1:12:2e:b4:4c:e3:29:5c:a5:d1:67:1b:
2f:b8:bb:4c:66:d7:b0:d1:e9:3e:d0:aa:7b:d9:16:6c:3e:d5:
9e:bf:c9:2b:bd:c6:da:e3:d1:b2:ad:7c:e4:e5:32:9e:71:bc:
2a:27:6b:8b:12:33:4f:e3:4a:b9:f6:c3:c0:8d:37:08:34:d5:
4e:ce:32:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org