Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e203335393133.roa
File: 352e3138312e3138352e302f32342d3234203d3e203335393133.roa (raw, json)
Hash identifier: MaDLix3qguysmfsc2b8/fFOeHAPRuVC01ZCiD4zBO7s=
Subject key identifier: 06:8C:06:46:00:03:D1:FC:13:B8:D3:72:E4:E1:E8:1E:59:90:43:9E
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 18E0F54F7633A4C493E6E5217B9A1BC22E25F626
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e203335393133.roa
Signing time: Fri 20 Jan 2023 07:09:24 +0000
ROA not before: Fri 20 Jan 2023 07:04:24 +0000
ROA not after: Fri 19 Jan 2024 07:09:24 +0000
asID: 35913
IP address blocks: 5.181.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e0:f5:4f:76:33:a4:c4:93:e6:e5:21:7b:9a:1b:c2:2e:25:f6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jan 20 07:04:24 2023 GMT
Not After : Jan 19 07:09:24 2024 GMT
Subject: CN=068C06460003D1FC13B8D372E4E1E81E5990439E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:6f:3d:9e:37:9b:8b:9f:31:45:a1:cd:67:
95:01:bb:23:b7:a4:d2:60:f1:92:87:96:d4:b5:e1:
fc:94:44:66:88:26:d0:1e:d2:74:3e:9b:3b:04:d7:
48:ff:99:c9:31:1a:4f:8d:ec:3b:2a:e8:93:87:8a:
5c:d3:7b:55:14:e9:dd:70:f5:9a:98:60:66:78:f2:
59:6f:2d:03:1c:be:8e:97:9b:55:4b:f1:71:b1:0a:
c7:48:11:47:52:04:cc:e8:5a:83:f5:32:34:4f:09:
5c:ce:84:0c:71:88:dd:42:be:87:7b:d3:67:9e:4c:
a7:ba:6f:28:b8:ff:86:41:d5:01:b1:c0:cb:a9:4b:
8c:5d:d6:ff:83:8d:a4:b3:73:f4:a5:20:32:b0:0b:
61:9f:95:e8:0b:54:a0:bb:56:d6:7f:4b:14:e3:d2:
6f:18:83:28:a6:d0:97:f5:b0:5a:8a:09:f1:1a:72:
a5:82:92:74:d3:e6:b3:71:3d:7d:96:50:9a:6e:6f:
d5:a3:de:ce:b1:09:1c:71:45:49:d0:14:fd:fc:d4:
14:aa:73:6b:9a:9b:5f:92:40:a1:f0:4a:b7:8e:cc:
db:55:53:cd:f2:53:86:dc:01:1a:0f:fe:66:45:84:
4e:e6:a0:31:92:19:40:cd:21:43:8a:7a:63:d4:5d:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8C:06:46:00:03:D1:FC:13:B8:D3:72:E4:E1:E8:1E:59:90:43:9E
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138352e302f32342d3234203d3e203335393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:11:f8:9a:af:68:7e:a5:e6:7f:91:71:b1:5c:6f:a3:46:dd:
4c:57:65:be:d3:73:58:b1:94:e5:fc:6a:44:f0:dc:af:e7:9d:
55:5b:d1:b4:c2:4a:94:38:4c:f5:43:6f:d9:14:f6:73:a1:48:
94:22:8a:5a:97:46:1d:70:29:8c:92:14:3d:d7:c0:c3:21:5f:
71:0b:04:2b:2b:4e:27:6b:7c:a0:49:cb:36:42:11:7e:b7:71:
db:ae:e1:05:ee:91:d1:8e:f0:64:e4:da:31:7d:9d:80:fb:69:
83:51:38:0e:ff:06:7c:41:47:8d:93:2f:68:ef:66:8d:e5:25:
ed:c8:fc:a4:a5:29:da:93:24:8e:55:8d:9b:7f:be:66:be:b0:
d5:1f:0e:46:89:9d:a4:0e:f6:28:ed:ce:eb:a2:ce:e6:a7:57:
82:a2:0e:00:d7:d7:77:c5:47:aa:d5:b3:e7:70:46:43:85:31:
e7:8b:09:e8:05:6b:13:8b:d0:fb:64:9d:60:d7:8a:ff:1e:9e:
6a:85:2b:0c:69:9f:43:a4:73:1e:ca:d8:bb:6a:7d:74:57:db:
4c:b6:db:8e:d7:4c:be:a2:39:71:52:e8:62:2f:7d:65:c9:78:
c1:3b:a2:2e:3c:6e:eb:32:15:3c:82:ed:6c:95:8c:51:ac:72:
c5:37:0a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:56 2024 by rpki-client on console-ams.rpki-client.org