Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466633a3a2f34382d3438203d3e2038303735.roa
File: 326131323a646434373a383466633a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier: XuwVCD23WTh/sb5G5zBdzbcDaz7XW57qzHN6Qe3t/U4=
Subject key identifier: 8F:20:8D:A3:F3:D3:1F:C8:CD:72:8B:F8:50:97:40:27:17:00:77:50
Certificate issuer: /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial: 594C192C2B61DEE123FA4AE685B2F2AFBB1506AC
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access: rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466633a3a2f34382d3438203d3e2038303735.roa
Signing time: Tue 11 Apr 2023 01:14:03 +0000
ROA not before: Tue 11 Apr 2023 01:09:03 +0000
ROA not after: Tue 09 Apr 2024 01:14:03 +0000
asID: 8075
IP address blocks: 2a12:dd47:84fc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4c:19:2c:2b:61:de:e1:23:fa:4a:e6:85:b2:f2:af:bb:15:06:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Validity
Not Before: Apr 11 01:09:03 2023 GMT
Not After : Apr 9 01:14:03 2024 GMT
Subject: CN=8F208DA3F3D31FC8CD728BF85097402717007750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:d4:0a:bd:78:33:22:f5:c1:07:5b:2d:bb:
ef:b7:01:9d:f6:9a:08:b9:8d:49:ca:7c:cd:7f:8d:
07:98:d1:66:b5:5a:75:2b:01:42:34:56:0c:f2:03:
3b:7d:57:8f:20:bc:92:bf:ed:6b:e8:4f:7d:2d:51:
fa:9b:e8:46:f3:62:60:3b:fe:2c:64:8e:d9:25:b9:
be:20:a9:a0:00:24:da:d8:60:14:e9:c3:b6:a9:6b:
f1:e4:73:cd:cb:4b:52:03:66:50:7a:06:dd:eb:9e:
8b:8c:f6:9b:25:36:dd:6f:c6:1c:90:da:0d:97:c9:
46:96:70:c0:79:6c:be:6a:06:22:9e:53:08:55:24:
41:67:37:b9:1b:b2:eb:9f:61:48:1d:1a:7d:a3:47:
70:7e:26:df:47:db:ed:ab:0d:39:c8:89:c0:13:2f:
53:3c:69:d3:37:a1:cc:6f:fe:50:96:68:28:c4:69:
46:82:40:e6:d4:55:09:29:4e:c7:9d:55:9f:10:4a:
ac:30:77:cc:4f:f9:37:9c:2f:b6:2d:f3:3c:32:85:
54:f6:2f:5b:a5:59:96:f8:07:09:5f:0b:43:c2:9d:
20:2d:cb:0a:64:29:c4:e5:82:16:24:94:b2:88:4c:
cb:3e:67:1f:c8:ad:69:89:a9:3b:25:03:94:a1:77:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:8D:A3:F3:D3:1F:C8:CD:72:8B:F8:50:97:40:27:17:00:77:50
X509v3 Authority Key Identifier:
keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466633a3a2f34382d3438203d3e2038303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:84fc::/48
Signature Algorithm: sha256WithRSAEncryption
41:92:39:f4:4b:19:56:ca:f3:54:3a:34:30:e1:74:25:4e:cc:
ff:aa:6b:2d:9b:7f:04:ac:21:cd:a9:6d:e5:f7:b8:8f:28:ee:
9f:be:86:f1:6a:ba:a7:bb:a0:11:2d:82:18:0e:a4:d8:bd:14:
18:7d:87:1a:09:77:a6:cc:4b:fe:4d:07:e0:2e:33:4b:36:6f:
2d:1a:05:eb:15:73:c2:87:c5:63:42:bf:34:20:d1:90:f5:1c:
e5:4d:67:4b:0a:05:da:db:99:9c:ca:6e:86:6d:fc:62:a9:98:
38:23:61:13:76:94:c2:55:43:49:f6:09:f2:77:68:70:f8:89:
43:d2:c3:69:cc:a4:71:bf:8d:dc:cb:9d:35:33:eb:f4:ce:43:
c5:4d:db:3e:89:5d:b2:55:6e:d3:5b:8d:16:53:f6:35:36:78:
be:80:c1:aa:f0:91:05:02:e2:1c:3f:f7:8d:58:a1:44:6b:54:
8e:be:f7:86:93:45:26:ca:db:8b:53:e2:4c:ac:23:9b:87:ba:
7c:cf:cd:76:aa:3d:6b:f7:d9:cc:16:da:c5:a8:3c:37:aa:9e:
62:a5:84:ec:7f:a2:e7:e3:21:a2:44:75:25:ae:a0:6a:58:8e:
52:dd:66:95:e7:82:60:6a:98:2a:df:70:4e:10:50:31:46:58:
84:30:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org