Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3232392e302f32342d3234203d3e203231383539.roa
File: 38352e3230392e3232392e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: ShI3JxozbXchyy/AybJqzgGVeRONRQ2RE0Ro0aY/BRs=
Subject key identifier: DE:05:52:DB:A8:73:4A:C8:78:C6:7D:78:9F:CF:29:CF:7D:18:F8:97
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 3E284658E413D320170218925F77490B968E6676
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3232392e302f32342d3234203d3e203231383539.roa
Signing time: Sun 05 Nov 2023 09:19:12 +0000
ROA not before: Sun 05 Nov 2023 09:14:12 +0000
ROA not after: Sun 03 Nov 2024 09:19:12 +0000
asID: 21859
IP address blocks: 85.209.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:28:46:58:e4:13:d3:20:17:02:18:92:5f:77:49:0b:96:8e:66:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Nov 5 09:14:12 2023 GMT
Not After : Nov 3 09:19:12 2024 GMT
Subject: CN=DE0552DBA8734AC878C67D789FCF29CF7D18F897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:03:73:98:2c:b3:31:74:2a:d3:1e:72:1d:
42:84:57:b2:1f:6e:84:ca:cc:84:c6:50:50:66:c7:
a2:5e:7f:66:e8:1c:2d:c3:95:d0:9c:55:4f:3b:58:
fd:98:1c:c2:c8:e8:94:1e:ae:37:f7:c7:3e:1f:26:
32:d9:89:a3:db:1b:c4:ff:6b:ab:74:d4:02:15:90:
5a:24:49:4b:da:a4:8f:77:d6:e3:44:18:46:56:e3:
06:70:71:4d:f1:7b:11:e3:e2:93:e1:a8:dc:fb:72:
ee:40:8f:a3:87:c3:95:45:9b:a9:78:4f:68:b1:33:
ed:12:67:96:65:e1:d1:72:c1:0f:20:2b:d6:d8:d4:
f1:71:9d:f6:dd:cd:af:b5:da:54:73:c6:f6:03:7e:
83:b5:8a:41:a3:15:3e:35:f3:9c:ee:f9:4c:6f:e9:
57:40:63:61:0a:2d:b1:63:49:69:58:09:15:57:35:
b0:9f:2a:a3:60:12:f5:1a:0b:c3:1f:89:a7:0f:f8:
ff:66:5a:d9:f8:66:95:96:27:d5:10:af:da:46:ee:
46:7d:7b:f0:94:e7:82:0c:bc:a0:7a:29:f7:45:97:
10:31:03:f2:1b:b0:0c:22:4d:f4:ba:1b:59:77:11:
4b:42:9e:ac:d7:24:da:89:08:6b:3e:3a:be:44:79:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:05:52:DB:A8:73:4A:C8:78:C6:7D:78:9F:CF:29:CF:7D:18:F8:97
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3232392e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.229.0/24
Signature Algorithm: sha256WithRSAEncryption
83:57:45:4d:e8:67:34:d7:d5:7f:c0:74:96:a2:36:c8:c3:d1:
22:8a:af:1e:19:b7:a0:a3:88:26:5a:90:e3:0c:de:d8:28:39:
8d:8d:b1:3d:22:51:53:9f:e2:35:78:20:6c:47:b6:14:e0:44:
b2:6d:b8:9c:97:5a:25:fe:4f:21:51:49:d5:7e:fd:b2:68:31:
e3:6d:f4:c9:fa:8c:ae:d0:d4:1f:af:3c:bb:95:88:f5:27:88:
8e:27:cc:5d:9a:15:ab:01:c9:6f:a3:f0:c8:79:86:de:41:1a:
d2:eb:f6:a8:e0:3b:20:21:49:cd:b1:d7:7f:25:64:71:9d:af:
09:9d:ff:b5:60:75:bf:75:c7:56:00:fb:36:a0:62:45:44:34:
50:b4:2b:6a:13:b1:f9:0b:cd:b8:45:10:ec:be:34:b7:47:ef:
10:cd:6c:ac:6a:77:17:10:83:da:58:f4:9a:f3:29:7f:08:53:
51:c7:59:f9:95:87:46:c5:e2:d1:c5:01:cc:65:59:1b:ac:13:
2b:3c:71:a5:a2:9b:a2:49:ea:31:c1:8f:98:ec:e2:10:82:6f:
63:4c:a2:dd:81:a4:36:66:38:d6:da:e1:0b:fa:e7:b6:f6:3e:
22:fe:a8:db:e0:5d:2d:75:a8:11:ab:bc:84:3a:c1:36:99:0f:
f9:47:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:58 2025 by rpki-client