Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20323136313539.roa
File: 3139342e3135302e3231312e302f32342d3234203d3e20323136313539.roa (raw, json)
Hash identifier: ek5In6xkurjaIBiyfj7Y+vWk7S3QOwnbgxjqy0Ve0bE=
Subject key identifier: 90:60:99:D8:C7:54:FF:2A:B0:C5:60:A2:31:08:74:0A:C0:8A:88:D6
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 53BD5111AC8AD31BB3A16CE93F1C4D46ACFFD6BB
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20323136313539.roa
Signing time: Mon 23 Oct 2023 09:41:44 +0000
ROA not before: Mon 23 Oct 2023 09:36:44 +0000
ROA not after: Mon 21 Oct 2024 09:41:44 +0000
asID: 216159
IP address blocks: 194.150.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:bd:51:11:ac:8a:d3:1b:b3:a1:6c:e9:3f:1c:4d:46:ac:ff:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:44 2023 GMT
Not After : Oct 21 09:41:44 2024 GMT
Subject: CN=906099D8C754FF2AB0C560A23108740AC08A88D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:cb:9e:60:7e:0d:43:1a:d1:a2:40:99:8a:
d8:58:6c:75:67:8f:a3:1a:18:84:2a:d5:3e:f0:d0:
f1:c4:f8:42:01:4b:14:53:f8:03:ae:0e:94:35:d8:
1a:c1:87:52:89:54:e7:cf:2c:b8:3b:1c:16:67:ff:
3d:3f:dd:07:2c:1c:dd:aa:49:dc:7a:76:c4:a3:92:
50:0c:74:d3:ba:b3:aa:f0:c5:88:74:f2:32:74:57:
9d:fa:41:5b:7b:ff:33:c3:fa:ec:51:7e:de:5a:ef:
78:95:3c:2b:43:79:f7:0d:ad:ae:0e:95:56:6f:c5:
52:24:72:a2:05:65:6a:72:82:a6:c4:59:ba:9a:f6:
4e:59:79:0e:63:71:e8:7d:63:8b:f2:d1:01:45:14:
b8:e3:89:0a:b9:68:7f:f0:42:98:ea:ba:01:ba:0f:
38:00:13:1a:33:1a:c4:5b:97:e7:c9:f1:50:97:18:
03:21:2a:07:9b:75:5e:a5:2d:73:41:78:fe:fd:23:
26:7e:12:14:1c:96:dc:b3:2a:7c:8b:b2:93:22:d8:
67:b4:d4:d8:a6:03:44:fd:ab:1e:18:28:59:08:63:
36:d8:ab:5f:3d:e8:fd:b8:5b:df:80:98:38:b1:8b:
13:33:ac:74:27:50:46:84:a2:ff:7a:53:74:33:5c:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:99:D8:C7:54:FF:2A:B0:C5:60:A2:31:08:74:0A:C0:8A:88:D6
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231312e302f32342d3234203d3e20323136313539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.211.0/24
Signature Algorithm: sha256WithRSAEncryption
82:dc:74:6e:39:c2:1a:0b:2c:0a:e3:f6:f2:86:06:8b:9a:3e:
6f:da:26:f1:f2:ba:cd:d2:71:b5:95:93:6c:d4:ad:b9:48:77:
da:81:6a:2c:da:3e:d9:47:cc:38:5c:ad:6f:e2:39:36:bf:a9:
f9:f8:7e:13:cf:b9:74:39:da:69:25:d0:bc:b3:3e:c0:ae:f8:
f7:1c:b3:b4:0e:09:3e:7d:87:a8:26:4d:4e:de:de:9d:ac:51:
37:ed:ae:28:62:4b:d3:ee:19:d4:f4:b3:05:b1:66:60:f8:83:
be:22:83:62:fc:34:24:39:82:e7:31:77:19:30:5e:ec:63:b5:
02:80:df:9d:40:bd:d0:ee:34:e9:65:9e:a7:4a:78:ef:0f:90:
de:1d:07:d2:b4:bc:e3:02:b5:fe:30:1c:e2:63:c4:94:7e:6f:
b0:18:14:0e:0b:97:d8:e6:bf:6d:59:6a:d0:62:63:17:83:73:
6a:b0:83:4c:4d:dc:ad:16:1b:7d:46:17:6d:54:b5:09:22:4f:
63:37:6c:1e:b3:14:76:31:dd:0b:0b:a1:76:87:47:5b:98:3d:
05:af:4f:c3:bf:c3:4f:dd:66:77:01:fe:95:e4:59:22:6c:7a:
45:fd:1b:cd:e1:a3:64:d7:26:f7:e1:5f:48:47:b0:eb:44:98:
69:75:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:12 2025 by rpki-client