Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135382e302f32342d3234203d3e203631313335.roa
File: 34352e3135352e3135382e302f32342d3234203d3e203631313335.roa (raw, json)
Hash identifier: +zQs6St1VJJkSMJkyFHYzyRbhHw7zt7w2QKtKRM9huM=
Subject key identifier: DE:3B:C3:71:9D:37:D5:64:11:D8:2F:75:65:3B:4A:7E:30:AA:4D:7A
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 229B6F0E99381C6260B6C2DA6588E8B94F806B89
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135382e302f32342d3234203d3e203631313335.roa
Signing time: Wed 18 Jan 2023 06:08:01 +0000
ROA not before: Wed 18 Jan 2023 06:03:01 +0000
ROA not after: Wed 17 Jan 2024 06:08:01 +0000
asID: 61135
IP address blocks: 45.155.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9b:6f:0e:99:38:1c:62:60:b6:c2:da:65:88:e8:b9:4f:80:6b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jan 18 06:03:01 2023 GMT
Not After : Jan 17 06:08:01 2024 GMT
Subject: CN=DE3BC3719D37D56411D82F75653B4A7E30AA4D7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:bc:16:3b:89:d5:01:b1:73:20:a8:fe:b4:
d4:d6:e1:53:4f:8b:75:38:d8:89:d8:b4:68:c9:1e:
a6:e8:91:8f:d2:65:f1:ee:95:34:41:ca:a7:43:b7:
7b:e2:85:e2:31:60:ef:a5:e8:0b:a1:65:fc:d6:b4:
78:0d:70:97:54:6a:40:bc:20:5b:9e:82:c0:79:55:
90:5c:d7:30:0e:69:d1:28:ad:89:d9:5d:cb:c8:07:
93:4d:fa:cb:94:85:b0:45:e3:77:8f:74:ac:77:8a:
7f:af:39:3a:33:5e:e8:4d:41:ce:01:f7:ef:ff:ba:
c3:69:e6:66:f5:80:85:24:07:4d:8a:29:0d:82:04:
33:0d:47:2f:b3:31:fa:ed:f1:d8:4b:60:5a:17:d1:
f4:ea:d7:04:43:3b:78:9c:a3:b5:4f:c1:78:45:e4:
e5:85:64:4d:e4:a8:23:da:24:a3:2b:1d:f1:5e:7c:
a3:06:7a:6d:79:64:17:b8:72:36:87:c0:23:cf:e1:
34:2c:51:fa:7d:f1:fd:c9:20:f5:3c:fd:6a:1e:e0:
d3:48:bf:3d:d9:4f:a6:92:31:68:c6:77:3a:a4:7e:
e1:fe:fb:a5:d9:41:69:5e:88:65:7f:b0:b0:84:fc:
91:da:f1:44:c0:04:af:45:71:99:eb:ed:d7:f4:b8:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3B:C3:71:9D:37:D5:64:11:D8:2F:75:65:3B:4A:7E:30:AA:4D:7A
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135382e302f32342d3234203d3e203631313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3e:e1:44:a8:c9:1c:c6:c1:2c:46:2f:2b:d9:66:68:09:de:
bc:7f:af:36:00:ce:fa:5e:a4:2d:59:90:d3:f7:ac:09:5a:24:
e9:86:f6:37:e4:86:c3:a6:6f:3c:33:fb:c8:23:41:a7:a2:57:
95:83:58:b9:89:31:04:b3:f7:16:90:53:3c:dc:65:79:c6:f2:
8a:0b:4d:f3:16:ad:44:56:37:83:ed:fc:90:07:a0:de:a8:ad:
a3:74:0b:4f:a7:ce:ca:b3:a2:8f:69:ec:72:47:7b:4f:c0:f8:
11:6f:32:91:a8:7d:f6:d0:71:14:0e:73:00:71:38:ce:bc:84:
d1:55:81:d8:bc:69:65:7e:ce:5d:8b:da:a4:24:d3:a2:0e:69:
a9:70:aa:c5:e0:30:a1:08:b8:27:53:11:a6:8a:2d:ee:2f:4e:
91:f1:f8:c9:b3:10:3a:54:6c:9b:c9:1f:55:38:02:2f:a8:ed:
96:73:4b:e9:e5:df:74:4d:a3:7d:29:20:e4:5c:6c:97:0b:63:
38:8b:16:ea:a9:66:99:3a:df:f0:25:d9:a4:55:c3:10:b5:f8:
60:66:6d:3a:a8:03:03:7c:ea:01:c3:e4:98:59:ac:f8:4e:54:
58:81:b7:17:d8:8c:25:ad:a6:55:f4:d3:75:52:d8:3e:78:97:
19:43:e5:aa
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIptvDpk4HGJgtsLaZYjouU+Aa4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yMzAxMTgwNjAzMDFaFw0yNDAxMTcwNjA4MDFaMDMxMTAvBgNV
BAMTKERFM0JDMzcxOUQzN0Q1NjQxMUQ4MkY3NTY1M0I0QTdFMzBBQTREN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNrwWO4nVAbFzIKj+tNTW4VNP
i3U42InYtGjJHqbokY/SZfHulTRByqdDt3viheIxYO+l6AuhZfzWtHgNcJdUakC8
IFuegsB5VZBc1zAOadEorYnZXcvIB5NN+suUhbBF43ePdKx3in+vOTozXuhNQc4B
9+//usNp5mb1gIUkB02KKQ2CBDMNRy+zMfrt8dhLYFoX0fTq1wRDO3ico7VPwXhF
5OWFZE3kqCPaJKMrHfFefKMGem15ZBe4cjaHwCPP4TQsUfp98f3JIPU8/Woe4NNI
vz3ZT6aSMWjGdzqkfuH++6XZQWleiGV/sLCE/JHa8UTABK9FcZnr7df0uG+TAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU3jvDcZ031WQR2C91ZTtKfjCqTXowHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzEzNTM1MmUzMTM1
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzEzMzM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LZueMA0GCSqGSIb3DQEBCwUAA4IBAQAePuFEqMkcxsEsRi8r2WZoCd68f682AM76
XqQtWZDT96wJWiTphvY35IbDpm88M/vII0GnoleVg1i5iTEEs/cWkFM83GV5xvKK
C03zFq1EVjeD7fyQB6DeqK2jdAtPp87Ks6KPaexyR3tPwPgRbzKRqH320HEUDnMA
cTjOvITRVYHYvGllfs5di9qkJNOiDmmpcKrF4DChCLgnUxGmii3uL06R8fjJsxA6
VGybyR9VOAIvqO2Wc0vp5d90TaN9KSDkXGyXC2M4ixbqqWaZOt/wJdmkVcMQtfhg
Zm06qAMDfOoBw+SYWaz4TlRYgbcX2IwlraZV9NN1Utg+eJcZQ+Wq
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:01 2024 by rpki-client on console-ams.rpki-client.org