Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e203631313338.roa
File: 34362e3138332e32392e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: ToIZGNXF1tqjFpb5AMd9k2lteW5FY4DdOMNNgicZy78=
Subject key identifier: 5B:F9:C8:DE:F5:C9:88:12:59:15:10:8A:A8:AE:12:A2:6B:2D:5D:FC
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 2FD6E8E6BD4A1D5E47FA78DD0B17023B0A6BBD6E
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e203631313338.roa
Signing time: Fri 02 Jun 2023 18:51:05 +0000
ROA not before: Fri 02 Jun 2023 18:46:05 +0000
ROA not after: Fri 31 May 2024 18:51:05 +0000
asID: 61138
IP address blocks: 46.183.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d6:e8:e6:bd:4a:1d:5e:47:fa:78:dd:0b:17:02:3b:0a:6b:bd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jun 2 18:46:05 2023 GMT
Not After : May 31 18:51:05 2024 GMT
Subject: CN=5BF9C8DEF5C988125915108AA8AE12A26B2D5DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:b2:28:25:a7:9f:87:c5:dc:0e:12:2e:63:
7e:b1:de:2d:97:a2:06:6e:1b:8a:b0:5e:0d:8b:4f:
7d:36:5c:2f:8a:e4:1b:56:a8:76:cc:85:62:e9:d9:
9a:0a:e4:84:70:b0:a5:b5:d3:4b:ba:1d:c8:3e:ac:
14:93:a5:35:11:54:e2:d7:23:c2:b3:b2:39:5e:2d:
51:47:1d:b9:36:88:4d:3a:59:5e:eb:aa:7a:5b:98:
72:f1:9b:ac:59:e6:a6:e2:af:3a:b3:0c:4f:70:73:
b6:40:bc:c6:36:2d:30:da:12:c2:21:e6:56:25:1e:
42:99:ee:59:54:10:7c:35:c7:0d:ba:47:c6:02:1a:
5c:60:59:f9:3c:db:a6:5a:cd:1a:54:05:49:44:36:
4d:c0:27:d9:ef:c5:18:10:48:e1:4f:a4:5c:4b:93:
ec:17:09:df:d9:65:42:ab:52:cb:b0:a3:1e:1d:5b:
5b:11:62:d2:35:4a:c2:90:16:f0:53:39:c6:64:62:
e0:d4:26:ff:f7:07:62:7e:ce:15:60:6e:47:dd:84:
f9:3d:03:ba:53:bf:78:e5:39:19:3c:33:08:4f:8b:
9c:26:32:4c:4b:34:cc:e9:58:1a:60:b9:75:bc:4b:
f3:6f:84:91:00:bc:ae:c1:59:22:69:9d:d7:d2:36:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:C8:DE:F5:C9:88:12:59:15:10:8A:A8:AE:12:A2:6B:2D:5D:FC
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.29.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7c:79:a7:4f:ce:52:d5:59:48:94:82:f8:6c:53:f8:18:37:
3a:90:ff:19:23:16:83:e5:89:64:96:2b:5b:46:f7:dc:20:9a:
4f:70:c8:d7:cc:9b:1d:fd:7c:a5:00:b6:8b:c9:26:51:46:36:
6d:30:9d:b3:1a:7c:99:37:9c:57:67:bd:4c:51:7e:6c:f4:96:
28:79:4b:73:5b:c8:aa:9c:a8:cf:fe:67:a9:c3:18:f5:2e:f4:
6b:b7:f4:ca:2e:97:6a:75:aa:62:8b:7a:86:47:cd:7b:b7:5c:
78:8b:33:5a:21:f8:84:67:8c:89:ab:b7:40:0a:5c:8a:3e:90:
9b:b2:e1:d6:4f:35:fd:1e:9d:42:1a:7b:71:d4:74:c5:68:28:
97:c8:1e:d2:9c:5d:da:25:60:d4:51:e2:ef:7e:60:e4:ba:6b:
66:f6:01:66:a7:45:6f:79:1e:47:e0:c6:ba:02:a6:fb:0c:32:
81:28:b0:3a:46:52:c8:c0:c7:36:c4:10:39:e5:5b:9c:74:2b:
09:ff:ab:f6:f0:20:c3:1f:1a:99:3d:8c:27:bb:47:92:2f:b5:
10:40:a6:44:50:3e:88:09:94:53:60:7f:0c:61:b7:a6:45:0a:
77:89:0c:73:44:51:16:88:fe:69:79:9a:18:43:a7:b9:89:5d:
c1:01:a2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org