Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3234332e302f32342d3234203d3e20333937363330.roa
File: 3139342e35302e3234332e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier: oJDYnCJbL7+nIv5SIv8wosE/qOdlQboe6A125FwuNsI=
Subject key identifier: 42:EC:AB:78:49:85:BC:1F:3D:12:DE:42:3E:D7:87:9F:7B:B6:D2:2A
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 765DDD991A5EE87967006DCD46146B25EA6D5D56
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3234332e302f32342d3234203d3e20333937363330.roa
Signing time: Wed 18 Jan 2023 06:15:00 +0000
ROA not before: Wed 18 Jan 2023 06:10:00 +0000
ROA not after: Wed 17 Jan 2024 06:15:00 +0000
asID: 397630
IP address blocks: 194.50.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:5d:dd:99:1a:5e:e8:79:67:00:6d:cd:46:14:6b:25:ea:6d:5d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jan 18 06:10:00 2023 GMT
Not After : Jan 17 06:15:00 2024 GMT
Subject: CN=42ECAB784985BC1F3D12DE423ED7879F7BB6D22A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:ca:44:76:5a:62:e5:8b:43:7f:e0:a6:d9:
80:e1:c5:69:78:52:eb:b2:40:98:17:ea:8a:1a:59:
9b:f1:90:d8:b8:3d:e6:1d:fa:02:05:47:fc:53:76:
8f:75:19:6b:ae:e0:90:b9:b1:3e:80:a3:0e:e3:10:
77:b1:74:82:a1:2c:77:0f:63:db:59:26:7f:17:46:
e3:90:2b:2c:80:e9:6a:df:82:cb:76:27:41:46:68:
d4:c9:98:1d:7c:e7:71:d2:4c:06:d2:c4:32:30:00:
8f:3c:41:4c:18:b1:f4:72:37:51:55:7f:f3:36:5d:
86:41:d8:50:74:91:e1:ab:a8:53:8b:3f:d9:dd:ed:
51:d9:e2:74:b6:4e:66:b2:61:1e:6a:c9:58:6c:40:
67:df:ef:6a:7d:ec:95:ef:7a:40:14:61:88:77:ba:
5f:05:34:21:bb:57:83:ba:18:d6:47:45:09:1c:e8:
bd:62:16:72:dc:50:72:0b:36:f6:64:53:53:66:04:
4a:a5:81:62:6e:cb:fc:57:f2:b6:30:30:2d:13:82:
e4:5e:6c:37:60:ae:9f:d8:ad:c4:9d:6d:66:4e:39:
94:a5:10:c3:ee:54:10:95:87:ec:1c:ee:63:5e:6c:
41:2c:f6:69:ea:bc:bd:1f:82:88:c3:36:11:aa:0f:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EC:AB:78:49:85:BC:1F:3D:12:DE:42:3E:D7:87:9F:7B:B6:D2:2A
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3234332e302f32342d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.243.0/24
Signature Algorithm: sha256WithRSAEncryption
01:23:57:c5:6a:20:09:43:b3:f0:4e:3c:b6:84:8d:51:0a:0d:
4c:8c:85:b2:66:06:fa:d6:7e:3c:bc:5d:0b:87:a0:47:ec:36:
18:5f:26:5c:ba:c4:ff:b1:5f:32:91:61:43:5b:f5:b7:88:d6:
53:a9:0d:41:c3:aa:a8:72:2a:07:f7:f7:3e:34:ff:29:b9:80:
ca:2c:6a:3a:61:17:91:8c:30:22:27:67:15:bb:b3:31:24:82:
a7:0a:ca:16:1c:72:45:54:b6:38:ff:03:9d:43:83:f9:b0:8a:
52:0b:0f:1c:b7:10:e7:8e:67:90:a2:5e:14:9a:44:1d:60:da:
47:01:45:d9:60:1b:10:db:3d:21:3b:67:43:02:8a:8b:c8:7e:
07:67:70:c9:90:f4:5a:d6:54:46:af:f2:b7:79:6f:28:6d:9a:
0d:5e:4f:ca:b2:2b:f3:ae:32:b9:e8:30:4d:aa:bd:81:30:af:
2b:50:f4:3b:56:2c:bc:7d:2e:4b:e4:9d:95:77:9c:f6:b9:a9:
4d:b0:3e:4b:4b:07:cf:16:d5:17:c4:24:99:b4:8d:3a:36:3c:
1c:63:0d:3c:fa:b5:2f:6a:a5:c4:65:df:8f:c4:79:e2:30:e0:
f1:4d:58:1e:2f:bf:61:dc:1d:87:e8:8f:cd:78:92:c3:ad:8a:
67:45:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:02 2025 by rpki-client