Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e203631333137.roa
File: 352e3138312e3138372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: u3wM6MwM/p3T0FWSdcMNljNPI79J4gpx+bHWzdmbUxU=
Subject key identifier: 4B:C4:F1:1C:93:BA:0E:07:1F:EA:BB:91:83:F8:EB:BA:C1:0B:02:E9
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 309FFCAB44D15E27BC911E5F225E1543ECE6720D
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e203631333137.roa
Signing time: Wed 08 Feb 2023 21:16:06 +0000
ROA not before: Wed 08 Feb 2023 21:11:06 +0000
ROA not after: Wed 07 Feb 2024 21:16:06 +0000
asID: 61317
IP address blocks: 5.181.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9f:fc:ab:44:d1:5e:27:bc:91:1e:5f:22:5e:15:43:ec:e6:72:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Feb 8 21:11:06 2023 GMT
Not After : Feb 7 21:16:06 2024 GMT
Subject: CN=4BC4F11C93BA0E071FEABB9183F8EBBAC10B02E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:27:b2:00:17:99:74:f4:69:24:8d:4f:c5:25:
5f:7e:35:50:2a:14:23:e8:16:d5:aa:83:62:6b:7c:
f1:56:2a:05:31:27:67:93:c7:8c:cd:e9:d4:d5:d8:
f1:4e:12:af:69:98:43:55:60:ab:b9:5e:41:c7:30:
4b:f8:06:72:11:b9:cd:86:e1:ac:9f:ee:d2:84:77:
42:71:10:0c:c6:c8:a8:ef:ad:04:a7:e4:58:af:aa:
74:51:be:68:a0:a8:81:ba:1a:a4:4d:20:83:af:34:
4b:89:de:80:b6:1b:7b:8c:7d:2c:a4:3c:e3:0c:4b:
d7:92:e0:41:73:1a:3f:2f:cb:e5:e1:bb:27:e7:cf:
b7:02:da:6f:15:3e:94:0d:13:f4:75:82:8a:ec:7a:
ec:60:91:ae:70:a5:44:0b:3a:26:64:39:f8:f0:bb:
69:0a:ca:70:ec:0b:fa:47:32:12:f7:0d:e9:46:0c:
44:d0:43:ce:eb:16:fa:71:25:d5:dc:ca:24:4b:5a:
39:9f:94:6f:09:92:b8:7a:64:28:f1:c2:26:20:f2:
29:74:0c:49:d8:53:50:35:14:66:70:b5:18:8f:a0:
86:09:0e:54:9c:b8:1d:3a:01:de:2f:b8:b3:11:86:
e8:95:d0:79:b2:b9:60:7b:15:86:85:8f:66:4f:98:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C4:F1:1C:93:BA:0E:07:1F:EA:BB:91:83:F8:EB:BA:C1:0B:02:E9
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.187.0/24
Signature Algorithm: sha256WithRSAEncryption
53:58:f2:52:95:46:37:95:7f:71:0b:32:3a:b7:3c:3f:32:fa:
6e:79:c5:14:bc:de:e2:14:77:70:ac:b7:c1:8b:ec:a5:39:a4:
7c:59:98:c9:75:4e:c7:75:8c:9a:36:84:65:43:74:65:a0:76:
86:e6:a7:bc:c7:85:1f:3e:02:5a:43:45:87:c7:ae:64:3f:f0:
82:10:37:86:0e:fb:6e:b4:30:5d:b2:d6:26:a3:1e:ea:20:52:
6a:0f:5f:41:9b:9c:af:92:69:3d:17:26:d7:fe:8f:f4:f5:54:
55:89:71:fc:65:06:13:ce:2d:3c:1c:9f:ca:f1:bb:01:06:d6:
c3:1a:40:c9:10:59:ae:34:8a:d6:e4:fa:94:b7:7b:a5:35:11:
98:2a:39:00:a2:19:c5:f8:99:5b:52:2a:66:12:34:b3:c4:ff:
6a:43:38:f7:60:4f:61:39:b2:35:7b:0a:01:1a:09:77:2e:ee:
0c:03:28:d8:60:63:37:ab:33:3f:66:8c:3d:df:47:69:6f:6a:
95:42:aa:da:79:39:93:af:b9:e7:70:b1:8d:dc:34:44:32:08:
1a:6c:ef:0f:ca:1b:20:60:ca:2e:00:00:55:07:e3:b5:af:95:
47:b7:ac:98:ea:64:e2:c1:4d:59:cc:67:fb:66:47:d6:f3:f9:
d9:05:7d:63
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMJ/8q0TRXie8kR5fIl4VQ+zmcg0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yMzAyMDgyMTExMDZaFw0yNDAyMDcyMTE2MDZaMDMxMTAvBgNV
BAMTKDRCQzRGMTFDOTNCQTBFMDcxRkVBQkI5MTgzRjhFQkJBQzEwQjAyRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuJ7IAF5l09GkkjU/FJV9+NVAq
FCPoFtWqg2JrfPFWKgUxJ2eTx4zN6dTV2PFOEq9pmENVYKu5XkHHMEv4BnIRuc2G
4ayf7tKEd0JxEAzGyKjvrQSn5FivqnRRvmigqIG6GqRNIIOvNEuJ3oC2G3uMfSyk
POMMS9eS4EFzGj8vy+Xhuyfnz7cC2m8VPpQNE/R1gorseuxgka5wpUQLOiZkOfjw
u2kKynDsC/pHMhL3DelGDETQQ87rFvpxJdXcyiRLWjmflG8Jkrh6ZCjxwiYg8il0
DEnYU1A1FGZwtRiPoIYJDlScuB06Ad4vuLMRhuiV0HmyuWB7FYaFj2ZPmIJ/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUS8TxHJO6Dgcf6ruRg/jrusELAukwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzUyZTMxMzgzMTJlMzEzODM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW1
uzANBgkqhkiG9w0BAQsFAAOCAQEAU1jyUpVGN5V/cQsyOrc8PzL6bnnFFLze4hR3
cKy3wYvspTmkfFmYyXVOx3WMmjaEZUN0ZaB2huanvMeFHz4CWkNFh8euZD/wghA3
hg77brQwXbLWJqMe6iBSag9fQZucr5JpPRcm1/6P9PVUVYlx/GUGE84tPByfyvG7
AQbWwxpAyRBZrjSK1uT6lLd7pTURmCo5AKIZxfiZW1IqZhI0s8T/akM492BPYTmy
NXsKARoJdy7uDAMo2GBjN6szP2aMPd9HaW9qlUKq2nk5k6+553Cxjdw0RDIIGmzv
D8obIGDKLgAAVQfjta+VR7esmOpk4sFNWcxn+2ZH1vP52QV9Yw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:12 2025 by rpki-client