Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e20323032363733.roa
File: 34352e39352e3231352e302f32342d3234203d3e20323032363733.roa (raw, json)
Hash identifier: yOFnzoEPj2f2DZNd9tszIKWU7IsGZeTkl6xsxs2ipTM=
Subject key identifier: 08:85:D4:18:7C:2C:8D:0B:A9:2A:18:C3:F9:94:3F:4B:2B:23:EE:FC
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 7BD7D60AB8387FB7E863B49EA0342124634068C4
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e20323032363733.roa
Signing time: Wed 24 May 2023 08:15:24 +0000
ROA not before: Wed 24 May 2023 08:10:24 +0000
ROA not after: Wed 22 May 2024 08:15:24 +0000
asID: 202673
IP address blocks: 45.95.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d7:d6:0a:b8:38:7f:b7:e8:63:b4:9e:a0:34:21:24:63:40:68:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: May 24 08:10:24 2023 GMT
Not After : May 22 08:15:24 2024 GMT
Subject: CN=0885D4187C2C8D0BA92A18C3F9943F4B2B23EEFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:60:a0:a6:50:d4:f8:fc:d2:69:8a:72:33:
3e:13:b4:d6:71:97:c5:8c:fc:6c:dd:40:b3:ec:4c:
ea:65:44:1d:f8:d7:4f:e5:22:73:e6:3e:ee:f0:11:
b3:f8:5f:53:f5:2e:6b:84:af:c8:9a:d0:d6:ae:0e:
73:ca:cc:7b:a1:03:61:4f:12:a1:56:48:7c:94:4e:
96:40:18:01:b3:76:6f:f1:b0:d8:8b:80:28:5a:e9:
61:cb:fc:a7:22:ef:a0:4c:98:71:57:41:97:fa:30:
f6:d2:b0:30:bf:62:28:0c:19:24:bc:5b:90:0e:83:
ae:bc:8a:76:eb:3d:54:cd:ac:38:c9:c4:33:e2:7a:
18:be:23:c8:98:36:d4:21:37:5f:3d:12:ec:f2:d5:
97:51:da:38:2c:fa:db:29:10:5e:fb:d2:e4:6e:41:
f2:25:c8:09:65:e0:26:fe:6e:47:73:6f:30:b1:6a:
ae:5a:80:f4:ba:f0:ba:23:c6:d4:99:cc:8a:e5:f3:
c0:ad:95:cc:aa:cd:48:60:f4:78:6c:ad:2c:08:6d:
a3:84:fe:40:27:6a:3a:16:58:74:a4:a7:b5:bb:1d:
75:b3:75:ac:25:39:b7:de:f7:16:3b:8e:d8:cc:66:
fd:cb:97:d1:ec:53:0e:00:50:4d:eb:34:47:40:48:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:85:D4:18:7C:2C:8D:0B:A9:2A:18:C3:F9:94:3F:4B:2B:23:EE:FC
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e20323032363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.215.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f3:75:c8:08:4e:f5:08:7d:7d:99:ba:fb:c1:13:2a:36:66:
9a:ab:b5:6b:37:58:eb:5e:52:03:27:25:51:53:12:5c:85:6d:
e6:34:b1:4d:5d:f1:df:70:ac:02:26:37:70:2e:97:f6:7e:d3:
68:0b:96:20:e8:64:c3:31:f1:5c:65:e8:96:93:b8:c2:f5:ac:
67:cc:9a:14:b9:3e:c2:6d:99:41:2f:85:8f:ed:58:78:1e:05:
13:89:c4:0d:25:d7:32:84:60:52:1d:45:3e:3c:7c:23:8b:84:
a1:e2:a7:b5:38:58:3d:2d:a8:0e:f8:a3:38:1e:6b:8f:77:91:
47:e9:e9:6d:78:3f:4e:1f:cd:d2:f3:54:09:39:ec:a2:70:68:
40:ca:19:92:1f:fe:cc:b5:68:fd:9d:c5:1d:68:83:4b:92:5d:
2d:6a:ab:ac:b1:34:79:81:c8:87:00:ad:bd:43:50:c8:b9:5b:
25:eb:47:32:06:01:70:5a:76:26:a7:e8:b6:f0:ef:8f:22:ea:
ad:25:d7:8c:2e:95:6b:c6:26:2f:96:f2:37:35:d7:44:cb:90:
ab:88:84:59:44:fb:3e:46:54:56:7e:a6:5d:20:b0:1f:b6:4c:
4f:94:63:2f:32:98:11:dd:63:a9:15:80:ed:e2:45:af:63:18:
2d:98:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:24 2025 by rpki-client