Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e203635353330.roa
File: 34362e3138332e32392e302f32342d3234203d3e203635353330.roa (raw, json)
Hash identifier: rfoHCx07z+5nPtwxoqYp6YNFKg3gH0Rma2g+PH5z6i4=
Subject key identifier: 7F:85:60:A5:BB:56:E5:87:16:7F:B6:3C:AE:D4:DF:F1:C9:0D:04:02
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 1C549843DAB9A2BE51B475E2E81890FB36A44979
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e203635353330.roa
Signing time: Mon 17 Jul 2023 10:10:39 +0000
ROA not before: Mon 17 Jul 2023 10:05:39 +0000
ROA not after: Mon 15 Jul 2024 10:10:39 +0000
asID: 65530
IP address blocks: 46.183.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:54:98:43:da:b9:a2:be:51:b4:75:e2:e8:18:90:fb:36:a4:49:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Jul 17 10:05:39 2023 GMT
Not After : Jul 15 10:10:39 2024 GMT
Subject: CN=7F8560A5BB56E587167FB63CAED4DFF1C90D0402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:17:68:fb:1e:cf:56:c6:b5:6c:71:df:8d:84:
62:79:d2:9e:d0:75:d0:52:f7:4e:02:b7:9a:57:4d:
30:a2:26:90:c0:a5:ee:91:85:20:6c:e5:1e:2b:9c:
ce:b0:33:8f:a4:ac:18:82:cf:31:dd:55:88:45:4a:
41:3c:96:d3:aa:6f:24:e7:76:d5:e8:37:3f:42:2e:
47:73:e9:57:b0:87:5d:09:df:bd:b2:1c:c2:6d:2a:
d2:e3:38:99:9f:57:e6:4e:fe:e7:6c:ce:5f:62:40:
00:0d:54:7e:28:3e:2c:b3:0e:37:0f:0b:bc:3c:6e:
2a:68:65:c2:bf:14:fb:f6:54:b1:db:d2:b0:bf:af:
3a:da:81:94:5e:a7:95:c4:f1:2a:6f:55:de:97:60:
8b:0c:39:dc:74:76:48:37:a3:b3:b4:54:c8:03:45:
56:2e:4d:5f:3a:3c:0b:17:72:0e:e1:97:89:ea:a4:
87:bf:e1:98:33:b4:b8:5f:4d:2a:90:dd:46:3f:20:
d5:ef:10:f5:61:89:de:a3:53:ab:1c:81:b9:b1:25:
9b:1a:11:85:ce:37:70:55:b0:f0:a2:a4:2f:28:58:
75:20:75:9f:0d:cb:00:25:2b:1d:dd:ec:a7:44:7f:
63:c7:b2:1d:1b:e6:01:e5:50:49:5c:28:39:1e:0b:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:85:60:A5:BB:56:E5:87:16:7F:B6:3C:AE:D4:DF:F1:C9:0D:04:02
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e203635353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f5:21:42:ee:0e:47:e8:98:7d:f3:15:50:b2:ff:c8:f7:49:
54:65:08:a0:89:d0:53:c4:f0:4e:c7:7f:78:25:5b:93:2a:43:
d5:f4:ee:ba:fd:9e:44:08:d2:53:1a:74:00:11:7c:fa:2a:04:
7c:c4:47:f9:ee:5d:19:7b:13:ce:a3:1e:ab:c6:6e:3b:df:43:
38:2b:ce:65:a4:5b:04:8a:cf:8d:e4:94:9b:68:c9:2e:ed:6c:
9c:57:fa:7b:b1:a8:e6:44:11:c8:1c:dd:2b:12:76:f7:67:48:
50:a9:7b:97:d1:16:8b:64:42:7b:65:62:22:e9:1e:fd:4c:1e:
32:ee:fa:60:45:cf:e7:08:e1:3a:5c:12:d9:10:e5:46:5e:2a:
00:e1:e6:5e:12:01:3b:85:3a:23:ff:e6:fb:57:a9:c8:c3:75:
be:f8:54:64:7d:25:d4:f5:13:b0:69:fc:ea:cd:77:44:ba:cc:
43:f3:bc:db:91:d8:3d:3c:fe:05:53:fe:84:a6:4c:b2:e3:a2:
13:f7:fe:32:f3:25:a4:84:10:c3:52:30:10:67:c4:d2:ea:6c:
f3:08:72:06:b4:e7:2c:96:3a:ec:fa:4a:fd:2f:6f:4b:2f:8a:
ed:62:b2:04:97:c5:03:c8:48:0e:68:bf:75:79:bf:e3:ae:d7:
8b:b6:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:35:54 2025 by rpki-client