Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e203231383539.roa
File: 34362e3138332e32352e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: BSVcrH/ch2r2VnmegdEsoexpZa9sxN8NaVw4VSZP+Zc=
Subject key identifier: BE:AE:6A:DB:A3:D0:30:14:F6:87:8E:AA:4C:4A:29:DF:55:C9:0E:37
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 2174EEAFBF46BEF0B894B2C48D68664E4810B118
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e203231383539.roa
Signing time: Wed 31 Jan 2024 10:27:04 +0000
ROA not before: Wed 31 Jan 2024 10:22:04 +0000
ROA not after: Wed 29 Jan 2025 10:27:04 +0000
asID: 21859
IP address blocks: 46.183.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:74:ee:af:bf:46:be:f0:b8:94:b2:c4:8d:68:66:4e:48:10:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jan 31 10:22:04 2024 GMT
Not After : Jan 29 10:27:04 2025 GMT
Subject: CN=BEAE6ADBA3D03014F6878EAA4C4A29DF55C90E37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:42:c2:5a:04:7e:e0:d7:ca:e9:af:8f:b3:55:
5f:eb:fa:24:cd:8f:52:7a:34:2b:06:91:45:24:d1:
ba:0e:14:cb:a3:0c:64:e3:0e:42:84:ec:2a:0e:76:
09:51:a7:ba:43:cc:d1:30:e5:3e:5b:29:b4:ec:f0:
e6:23:1b:5f:25:69:2e:99:83:c6:d8:cc:3c:50:14:
ab:4f:f0:39:02:99:c7:af:90:16:12:04:70:58:6f:
23:1c:07:c7:4d:ef:90:33:24:3c:8c:de:4b:99:9e:
09:bd:31:5c:11:79:c7:ea:78:a2:0b:59:f6:98:b7:
ab:98:c1:af:c0:5b:fe:a7:7e:96:af:a4:1f:93:d8:
ec:cf:ac:9b:c7:ff:f3:a5:30:29:1f:d5:39:38:ae:
43:d5:61:0f:4b:e7:e9:ad:43:b5:3e:9a:3e:52:96:
e3:6f:43:4d:1d:ef:a1:d0:a5:95:1d:d0:9e:5c:96:
a1:47:d0:9d:7c:6e:dd:46:2c:f6:90:30:b3:b7:2b:
92:5e:88:24:4e:1c:89:fe:22:b8:40:b8:86:a8:a9:
be:b7:b4:5d:1c:03:ab:b8:0c:da:c6:b5:fe:0c:6b:
1b:51:cb:06:ac:4b:d5:79:23:ab:8f:90:55:c0:93:
00:20:3a:c9:4b:b0:bd:9c:36:0a:dc:90:9b:ec:39:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:6A:DB:A3:D0:30:14:F6:87:8E:AA:4C:4A:29:DF:55:C9:0E:37
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32352e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.25.0/24
Signature Algorithm: sha256WithRSAEncryption
95:64:1a:71:97:c3:2f:f0:25:a2:ae:d0:83:d2:06:21:ec:cf:
f2:3e:56:ae:ef:fa:b4:e4:c0:a6:5d:c5:82:86:a7:fb:f0:e8:
59:e1:11:ba:4c:b9:b0:1c:54:a3:b3:1c:4f:08:e3:f5:6e:1b:
74:7f:ad:ad:02:90:7f:d8:c4:1e:8d:63:f4:6d:ce:23:b7:85:
ec:45:0c:01:db:47:f1:2d:53:5d:5d:f7:fd:e1:59:2f:3b:ec:
51:04:67:9c:a3:41:7c:61:f2:e8:0c:43:80:49:af:e8:9f:9a:
84:ed:d7:96:b3:3f:22:69:3b:d8:c1:53:e4:74:58:7e:f5:7d:
1d:32:28:8c:03:82:d6:92:48:07:df:04:f7:d7:49:7e:17:3e:
d3:b8:d4:5b:f5:5d:26:35:b3:d7:6a:5b:e4:51:93:dd:b1:88:
c8:0f:a5:23:f8:85:9b:0e:e2:f3:75:a9:58:bb:47:68:99:0a:
53:20:ba:b3:c0:a8:9e:b6:35:95:5e:23:70:47:a0:16:b6:d6:
bf:32:41:dc:18:01:aa:fc:a7:04:26:58:31:3d:7a:66:49:50:
a2:5d:5e:8d:de:3c:f4:1e:b6:85:f6:9a:be:9f:5d:2b:76:ff:
c3:b3:a8:1f:82:1e:02:65:8e:21:5f:cf:5a:d9:b6:5d:90:71:
9e:a3:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:59 2025 by rpki-client