Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS1299.roa
File: AS1299.roa (raw, json)
Hash identifier: sV+7ZHI7gHsgowNOzQNLkixJYR5jIyB+ZkuCARgPNeY=
Subject key identifier: 73:0F:C9:7B:B7:63:40:AB:AC:58:F9:1A:F6:87:D9:50:40:F5:62:34
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 65869AE74614B78CD63EE979A618D84E22DB4B8F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS1299.roa
Signing time: Mon 22 May 2023 09:00:08 +0000
ROA not before: Mon 22 May 2023 08:55:08 +0000
ROA not after: Mon 20 May 2024 09:00:08 +0000
asID: 1299
IP address blocks: 179.61.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:86:9a:e7:46:14:b7:8c:d6:3e:e9:79:a6:18:d8:4e:22:db:4b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 22 08:55:08 2023 GMT
Not After : May 20 09:00:08 2024 GMT
Subject: CN=730FC97BB76340ABAC58F91AF687D95040F56234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:ed:89:71:c8:64:62:c5:98:e1:3c:d8:e0:
ef:7f:66:db:91:63:98:d7:cd:4c:e4:dd:67:63:be:
ff:d5:3f:b9:47:c3:53:9d:0f:5e:74:7f:76:bb:f5:
ed:46:6f:c0:22:61:6c:76:79:87:f2:30:3b:f1:ec:
2a:7c:c0:60:8a:dd:04:2e:95:96:31:be:be:33:d6:
13:23:34:f9:dc:85:37:b5:57:ed:8b:8c:ab:3b:15:
3f:62:c3:4e:12:fc:21:2a:42:c0:2b:01:f1:d3:ba:
63:fc:14:9d:ff:db:d2:35:75:72:7c:d2:f3:c2:c3:
88:cd:64:7c:a4:de:17:ed:5a:5e:16:ac:cd:a4:b8:
e1:9c:40:2e:4f:0d:9d:62:b4:5d:ef:15:46:e1:ca:
db:67:85:84:01:25:09:e2:48:14:be:62:6f:c2:60:
95:cc:37:06:32:f1:17:b8:3f:50:bd:db:de:bc:d9:
1c:35:be:49:a6:f5:f8:18:cf:fe:97:95:36:d3:7d:
78:d7:7f:35:33:fe:4e:d8:4f:39:2f:0c:02:c6:26:
f6:a0:64:ac:05:4e:e6:94:30:6d:4b:08:2d:31:70:
c9:75:55:2c:c0:49:dd:44:fd:2e:49:d2:60:ab:cc:
b7:91:d6:19:33:f1:84:c2:9e:50:4f:5c:18:ca:10:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0F:C9:7B:B7:63:40:AB:AC:58:F9:1A:F6:87:D9:50:40:F5:62:34
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS1299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.172.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bb:bd:10:7a:b5:06:b1:70:8a:68:61:cb:d9:e4:70:d2:61:
4e:3c:3a:04:b2:58:39:cc:e1:73:c6:11:10:c8:b2:d7:bf:2c:
85:83:f4:88:fb:96:0d:66:31:64:1a:13:69:e8:f8:02:4f:1c:
a6:26:06:f5:94:42:ff:63:00:3c:6c:d5:4c:b6:51:5f:e0:b1:
93:f5:da:58:06:81:d6:fb:11:f3:c3:f9:14:e2:d1:a9:53:37:
0f:39:e3:de:a2:e9:0b:06:80:93:a8:6e:1e:66:1d:c0:f9:55:
db:c3:24:46:8b:e9:8e:c5:d8:7c:e7:35:50:91:4c:1e:79:95:
de:6c:9b:db:80:19:6f:7e:f6:67:a8:81:9e:12:70:95:a0:4e:
05:b9:bd:ff:1c:04:7c:f6:dd:0d:17:9c:40:f9:3d:33:64:5f:
88:9e:84:63:0e:7a:40:b5:36:52:d5:64:f5:1e:f0:79:93:e0:
db:36:db:d6:ce:c1:4a:bf:9e:c9:02:bc:aa:6b:19:8b:f5:9f:
b8:dc:80:1f:0b:ac:32:a5:d2:8c:98:34:5a:1a:a0:6f:78:dc:
03:f7:26:80:f1:bf:e7:f2:c2:b0:fe:41:e9:30:91:f3:84:a4:
27:fd:e4:7b:81:e7:61:d6:53:c1:8f:53:a0:4f:8d:1c:f4:f7:
82:bc:b9:81
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUZYaa50YUt4zWPul5phjYTiLbS48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA1MjIwODU1MDhaFw0yNDA1MjAwOTAwMDhaMDMxMTAvBgNV
BAMTKDczMEZDOTdCQjc2MzQwQUJBQzU4RjkxQUY2ODdEOTUwNDBGNTYyMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Z+2JcchkYsWY4TzY4O9/ZtuR
Y5jXzUzk3Wdjvv/VP7lHw1OdD150f3a79e1Gb8AiYWx2eYfyMDvx7Cp8wGCK3QQu
lZYxvr4z1hMjNPnchTe1V+2LjKs7FT9iw04S/CEqQsArAfHTumP8FJ3/29I1dXJ8
0vPCw4jNZHyk3hftWl4WrM2kuOGcQC5PDZ1itF3vFUbhyttnhYQBJQniSBS+Ym/C
YJXMNwYy8Re4P1C929682Rw1vkmm9fgYz/6XlTbTfXjXfzUz/k7YTzkvDALGJvag
ZKwFTuaUMG1LCC0xcMl1VSzASd1E/S5J0mCrzLeR1hkz8YTCnlBPXBjKEPqhAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUcw/Je7djQKusWPka9ofZUED1YjQwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTI5OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM9rDAN
BgkqhkiG9w0BAQsFAAOCAQEAkru9EHq1BrFwimhhy9nkcNJhTjw6BLJYOczhc8YR
EMiy178shYP0iPuWDWYxZBoTaej4Ak8cpiYG9ZRC/2MAPGzVTLZRX+Cxk/XaWAaB
1vsR88P5FOLRqVM3Dznj3qLpCwaAk6huHmYdwPlV28MkRovpjsXYfOc1UJFMHnmV
3myb24AZb372Z6iBnhJwlaBOBbm9/xwEfPbdDRecQPk9M2RfiJ6EYw56QLU2UtVk
9R7weZPg2zbb1s7BSr+eyQK8qmsZi/WfuNyAHwusMqXSjJg0Whqgb3jcA/cmgPG/
5/LCsP5B6TCR84SkJ/3ke4HnYdZTwY9ToE+NHPT3gry5gQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:30 2025 by rpki-client