Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134512.roa
File: AS134512.roa (raw, json)
Hash identifier: a4vcrypr+u23yLoLbQkQpXdGKxP1GH6es+R4cXMOsO4=
Subject key identifier: C4:B9:9E:D0:16:F6:65:D8:4D:7D:D2:1A:2E:6E:79:C8:A9:16:55:0A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6B54BE17F8D2048757F2BDD364B511224972C452
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134512.roa
Signing time: Fri 24 Mar 2023 00:00:11 +0000
ROA not before: Thu 23 Mar 2023 23:55:11 +0000
ROA not after: Fri 22 Mar 2024 00:00:11 +0000
asID: 134512
IP address blocks: 179.61.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:54:be:17:f8:d2:04:87:57:f2:bd:d3:64:b5:11:22:49:72:c4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 23 23:55:11 2023 GMT
Not After : Mar 22 00:00:11 2024 GMT
Subject: CN=C4B99ED016F665D84D7DD21A2E6E79C8A916550A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:10:a1:83:8d:83:01:46:d2:13:9d:cf:f9:
c4:ef:78:b9:28:73:1f:c9:3b:eb:0c:a9:9f:92:e6:
3d:ec:42:66:a2:d0:83:97:ad:5e:c4:f8:be:62:12:
dc:1c:dc:8e:5e:e0:d0:a8:47:c8:c0:d7:b2:7e:8c:
8a:1e:f6:59:08:15:73:7a:45:c2:00:72:4b:88:be:
c3:49:1d:b5:39:f2:3f:91:37:c1:71:ab:a9:b8:4d:
f9:b0:c8:40:27:a4:d9:b3:cc:cf:12:2f:af:5d:37:
ed:95:c7:e0:9e:02:02:11:a6:f5:f0:e2:73:9c:fc:
e1:4c:f9:82:ee:81:6f:f6:30:8a:6d:7d:cf:f3:2d:
19:dd:ab:11:de:36:dc:eb:be:15:0a:95:f6:0d:52:
d8:38:ad:87:1f:2d:bb:f7:4c:40:dc:4a:78:5a:03:
28:ea:d5:2e:1a:94:3c:2d:5b:46:25:04:60:2a:91:
ee:d6:4d:6d:12:87:20:b2:77:66:46:d8:7c:95:f9:
29:a2:37:ba:9f:6d:3a:d0:16:4c:7c:3b:ab:00:15:
92:22:3f:82:43:d6:96:fa:ef:40:47:3c:15:61:34:
8e:ba:4c:1a:ba:06:e3:1d:e7:c7:6a:31:b8:3a:91:
91:2a:a0:09:09:4e:c1:15:e5:95:96:66:f2:c1:95:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:9E:D0:16:F6:65:D8:4D:7D:D2:1A:2E:6E:79:C8:A9:16:55:0A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS134512.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.135.0/24
Signature Algorithm: sha256WithRSAEncryption
31:cc:40:d6:64:b8:92:b5:2d:4f:e4:84:34:8a:7c:d4:3a:bc:
2a:4c:7f:15:ea:77:65:50:06:e1:4c:cb:9e:89:49:3c:45:5b:
66:4a:40:f1:d4:5c:17:88:a3:09:ac:81:c9:9f:38:78:68:1c:
c9:45:51:64:d3:a8:86:93:ad:e5:96:8d:03:b9:4b:93:95:32:
50:13:9e:22:63:45:55:1d:b7:b9:74:4a:5b:4c:cc:89:07:36:
ab:fd:82:6e:de:e3:3a:19:5c:49:f4:e0:dc:d0:70:25:59:cc:
b2:df:63:94:cc:ba:94:d1:7a:55:ce:88:c8:29:06:31:82:8b:
47:1a:b6:a4:45:65:bc:ec:28:ab:4f:61:50:82:0b:0f:09:3f:
55:ca:63:f1:38:bb:2f:23:9f:62:f2:5d:19:d5:8a:5c:9f:fd:
31:72:0a:ac:5a:35:d2:05:b4:44:48:07:70:ff:3f:34:f9:86:
17:f4:85:8d:33:d4:ac:48:ae:98:6a:de:55:16:8a:c6:f2:ce:
83:b8:eb:76:91:40:ba:ea:64:2c:8e:5a:0d:8f:bb:33:e8:d8:
33:f8:1b:9a:4c:c9:1e:9c:ba:df:e7:30:77:3e:cc:7b:0f:89:
4d:5f:54:94:3c:ae:67:34:82:ea:aa:0b:0b:e5:12:48:81:95:
a5:d8:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org