Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20323030303739.roa
File: 34352e382e3231372e302f32342d3234203d3e20323030303739.roa (raw, json)
Hash identifier: nAx8RrtXxBYIwqNVtOZvv4UC4uBcpYe4WloUZZXdZK8=
Subject key identifier: DF:D0:3D:79:E9:CD:16:79:A3:B1:78:C3:CD:F6:5E:17:F8:6C:A9:A1
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 3E72436F73E5DF3DFF9CE1C3020CDD2E8CEFF04B
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20323030303739.roa
Signing time: Mon 15 May 2023 12:03:44 +0000
ROA not before: Mon 15 May 2023 11:58:44 +0000
ROA not after: Mon 13 May 2024 12:03:44 +0000
asID: 200079
IP address blocks: 45.8.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:72:43:6f:73:e5:df:3d:ff:9c:e1:c3:02:0c:dd:2e:8c:ef:f0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: May 15 11:58:44 2023 GMT
Not After : May 13 12:03:44 2024 GMT
Subject: CN=DFD03D79E9CD1679A3B178C3CDF65E17F86CA9A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:2b:a1:74:1d:b8:a3:04:8f:f8:b6:40:b4:
1f:43:e3:25:80:d9:34:cd:ee:4d:ca:4b:e9:ec:2b:
b8:9b:16:4c:78:e1:b6:93:f8:87:81:67:00:86:3e:
97:99:89:83:8d:ff:0d:25:aa:bf:4f:51:b3:65:78:
95:b4:90:6c:ba:5b:07:af:72:25:e2:42:16:3b:4c:
2d:16:2c:ea:8c:57:0b:7f:71:54:7c:54:1d:ac:b6:
2a:65:7e:5f:de:06:4b:5c:a2:85:7d:ec:d3:d3:57:
2f:6f:23:bd:47:8b:1f:df:ec:77:14:cd:89:24:b3:
96:4d:9a:f8:76:70:49:12:65:34:0a:54:09:86:9d:
72:63:c8:47:0f:8b:ac:c3:5f:dc:a7:b2:94:88:53:
82:be:59:42:66:b5:dc:94:58:26:98:0a:b1:e1:aa:
ae:5a:bc:b4:1d:5e:2c:12:b3:de:b1:29:3e:27:3d:
30:80:eb:76:45:ec:53:87:d4:7f:58:08:a7:26:77:
01:73:77:4a:52:9b:06:b4:54:1e:fd:40:18:d2:ee:
b9:61:cc:b6:23:53:be:b7:4b:42:71:69:2f:aa:61:
e6:68:b7:f7:cc:3f:2f:77:0d:21:e9:00:69:22:59:
31:d2:ae:7d:a0:1e:ab:a5:91:93:5d:e3:e3:52:9f:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:3D:79:E9:CD:16:79:A3:B1:78:C3:CD:F6:5E:17:F8:6C:A9:A1
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20323030303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3f:1b:a1:06:f3:92:89:82:b6:05:43:85:71:09:90:bf:6a:
b0:2b:3c:8a:de:29:26:91:06:7c:65:86:a1:44:f9:dd:49:ad:
b8:c8:13:1b:46:03:fa:ea:05:65:2c:d5:16:8b:d4:d8:99:d4:
c1:07:63:74:18:4b:87:ce:dc:9d:e1:52:22:18:41:42:c4:53:
97:7b:eb:a8:ee:25:fe:2f:df:52:a9:c4:fd:f6:a0:3b:c5:52:
43:c2:19:8b:a1:a2:75:b5:59:33:fa:d5:18:7c:d2:c3:64:b3:
00:0d:d7:cc:7b:fa:a7:3b:4d:21:bb:70:8f:8d:e4:1b:74:bd:
60:bf:ad:a4:03:d0:d5:a3:85:59:85:aa:a4:25:b7:dc:6b:ea:
eb:23:4c:95:f6:e0:e5:5e:ed:23:95:2f:c6:09:e5:37:4a:2b:
b0:0e:2c:61:f0:23:1c:87:be:06:b4:c8:d6:72:c0:10:7d:21:
5a:d6:e9:30:a0:d5:43:db:20:39:96:81:3f:cf:f4:c3:5a:90:
61:73:70:4c:e0:6a:8d:23:64:be:32:d8:f6:c9:be:98:3c:17:
b3:9b:d3:1f:1f:b4:33:fb:1c:65:fa:97:2b:1c:54:4f:98:71:
6e:70:1b:a5:9d:d3:fd:6f:52:4c:bd:e7:18:95:2c:e8:ef:2a:
c7:9a:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:56 2024 by rpki-client on console-ams.rpki-client.org