Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135752.roa
File: AS135752.roa (raw, json)
Hash identifier: OqZ8k+Tl9h+V7f+crRHADWYKkOOwcoO2pz2YjH6KuFc=
Subject key identifier: 0A:BB:59:3D:26:21:17:4B:BF:F2:0F:C2:72:4A:F2:0A:49:D9:67:1A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3C3D2323749FEB3C1CAA7386EC093F3DBD97E7D9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135752.roa
Signing time: Mon 05 Jun 2023 12:15:27 +0000
ROA not before: Mon 05 Jun 2023 12:10:27 +0000
ROA not after: Mon 03 Jun 2024 12:15:27 +0000
asID: 135752
IP address blocks: 191.101.19.0/24 maxlen: 24
191.101.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3d:23:23:74:9f:eb:3c:1c:aa:73:86:ec:09:3f:3d:bd:97:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 5 12:10:27 2023 GMT
Not After : Jun 3 12:15:27 2024 GMT
Subject: CN=0ABB593D2621174BBFF20FC2724AF20A49D9671A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:bd:ca:6d:98:97:02:d3:58:7c:29:62:49:
fd:d8:6d:44:79:8f:82:b0:83:76:7b:db:10:46:76:
07:df:de:67:ac:6a:29:37:6a:7f:e8:94:a5:79:fd:
32:42:8d:38:c4:d6:f3:15:49:30:08:37:76:e6:65:
4f:0a:d3:01:e3:43:9d:2f:f9:44:93:da:0a:03:58:
18:c5:ce:67:37:cb:9d:e1:a2:81:14:db:a3:fe:ba:
3f:3f:3c:34:02:5e:aa:b8:d8:25:44:00:5a:fd:27:
e8:9b:e3:68:1c:b1:c6:f6:7e:d9:6c:ab:7e:4f:98:
d8:79:ef:35:f4:20:77:24:3d:64:bf:21:8f:ed:53:
2f:56:39:03:8a:cb:d3:79:11:e5:2e:7f:b2:5e:8b:
41:97:81:5e:ef:df:0f:7a:d6:f6:a3:ff:09:24:f2:
45:da:4d:9b:e5:69:bd:85:4d:9e:d4:5c:2b:8d:ea:
c5:77:f6:cb:22:f9:fb:d6:1b:44:d5:33:a5:b4:07:
21:aa:84:06:cd:c6:e5:69:f3:60:03:e3:f4:6b:d6:
ca:42:99:74:ed:91:ed:ce:05:b7:64:bd:2f:c4:d7:
75:f3:09:35:db:b9:d1:fa:dd:81:28:32:1c:26:97:
d7:54:90:35:a6:e9:bb:e8:78:7e:ee:c7:50:0c:60:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:59:3D:26:21:17:4B:BF:F2:0F:C2:72:4A:F2:0A:49:D9:67:1A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.19.0/24
191.101.69.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6c:38:67:7e:8a:10:dd:4d:db:93:d2:39:56:2f:89:53:2e:
ea:0a:5c:a0:e1:7b:4e:b6:59:91:17:c5:48:03:67:a2:bc:6a:
0c:e1:81:33:ed:99:54:17:ba:ff:f5:f3:48:52:d8:f4:51:95:
be:40:bc:7b:fd:c6:bc:6d:f3:91:7b:e9:10:53:13:9b:fb:17:
33:1d:63:6b:17:75:6a:b8:6f:37:0c:02:8a:0d:36:36:4c:ab:
b3:c8:ad:15:bf:53:f5:ea:ea:96:00:50:b5:67:1f:1f:cb:cb:
e8:55:69:f8:be:fd:de:e0:66:9a:7c:eb:08:9e:de:cb:d6:3e:
6b:92:d1:94:86:b2:ae:85:a1:17:d1:63:a2:4f:8d:93:11:5c:
2c:f2:37:12:8e:d8:3a:3d:26:10:67:7d:76:3a:09:a6:7b:93:
ba:f7:f1:8a:a8:f5:68:97:fd:4b:b7:fe:0f:55:45:0b:46:4d:
5c:0b:77:8f:4f:07:0f:6f:93:84:83:b5:02:20:9e:08:0c:c6:
13:39:ef:94:bf:61:e8:bc:bb:15:11:d8:bf:f4:4f:e7:10:14:
67:f5:5c:19:a4:62:51:a7:e5:bd:65:4c:9f:89:8b:89:bc:11:
2b:e2:a8:5a:c9:6a:3d:62:6d:99:1a:2d:c7:4f:ed:d9:37:db:
61:38:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:20 2025 by rpki-client