Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS139989.roa
File: AS139989.roa (raw, json)
Hash identifier: VEsnRx9/NtstuIPmrjZ+LS+AcrJcMrKugR8AQs4aHXo=
Subject key identifier: C2:FF:E4:9E:C4:3F:A3:E1:D7:4A:80:9E:9F:E8:74:56:11:FF:DB:62
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3DD2E1D2FBB1615089B204598D138F51B60E9A0F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS139989.roa
Signing time: Mon 05 Jun 2023 15:05:26 +0000
ROA not before: Mon 05 Jun 2023 15:00:26 +0000
ROA not after: Mon 03 Jun 2024 15:05:26 +0000
asID: 139989
IP address blocks: 45.137.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d2:e1:d2:fb:b1:61:50:89:b2:04:59:8d:13:8f:51:b6:0e:9a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 5 15:00:26 2023 GMT
Not After : Jun 3 15:05:26 2024 GMT
Subject: CN=C2FFE49EC43FA3E1D74A809E9FE8745611FFDB62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:4e:49:64:9a:49:59:27:eb:96:2a:51:08:
60:2b:f4:0a:eb:5c:35:19:ea:d6:70:97:b3:26:22:
a0:8a:5e:f1:df:c4:a7:76:ad:c4:e4:9f:e7:c7:1d:
be:2f:fb:26:48:ed:e9:4e:92:92:e3:53:74:b3:61:
10:07:4a:20:46:06:ff:66:d1:e9:c0:0e:ca:78:75:
f0:08:5a:b0:8c:5b:73:40:cd:3d:aa:7d:34:39:2e:
39:04:8b:c9:c8:7f:e8:0d:f0:b9:d0:45:38:52:75:
ef:ad:bc:b0:69:ab:bf:f8:1c:43:23:84:ea:ea:05:
d8:b0:33:4d:08:a0:f2:8c:ae:76:7b:12:5c:a0:50:
1a:a7:8c:75:6c:d5:65:df:69:b3:f4:ec:11:0f:ce:
14:0a:0e:d2:9a:33:aa:27:b2:02:4d:aa:b3:8b:8f:
e2:19:9f:95:6c:dd:cc:e4:2d:dd:27:ff:f0:e5:62:
b5:0a:cf:c7:18:39:46:64:26:18:9c:f7:bd:1d:04:
b5:d3:f4:87:8c:94:4d:37:e9:26:47:8c:e7:ab:e8:
79:de:a8:dd:54:42:a2:57:05:78:03:f0:25:c8:c8:
0b:bc:6b:66:b6:e5:56:ec:d0:03:f5:d6:b4:f0:3c:
16:c6:34:76:45:ae:5b:fa:0e:a8:ba:8f:a1:5e:10:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FF:E4:9E:C4:3F:A3:E1:D7:4A:80:9E:9F:E8:74:56:11:FF:DB:62
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS139989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:bd:f2:b9:06:9f:42:77:1c:52:fc:7e:c8:86:f9:e5:a9:5c:
ee:51:17:2b:42:b4:03:ac:3a:82:df:af:41:e5:cd:bc:b1:9f:
8d:1b:e1:a7:a8:d6:32:e6:a4:14:89:43:71:df:5f:37:f2:37:
ad:f3:25:ee:c4:f3:9d:b6:c3:77:cc:e0:6c:e3:9a:c6:cf:52:
fc:e1:20:ed:e4:38:65:16:49:0e:18:4a:ac:d0:bc:f1:a3:0e:
60:8a:5e:73:ec:a2:ab:dd:db:61:03:a9:4e:06:f7:da:26:b5:
8e:b8:74:61:54:6d:04:19:1c:4e:4c:87:f8:e2:8f:db:94:9b:
d8:d6:58:6a:a7:bf:f1:c1:57:da:c8:f7:4b:19:7b:0d:71:7f:
5e:6e:fe:79:c1:ee:72:15:1d:42:73:8d:e3:0c:d8:83:9d:36:
3b:fe:98:9c:2b:3b:32:fd:d4:a1:74:e7:ce:19:fe:cf:f9:32:
db:ad:c9:6d:fd:14:ab:9a:49:9c:da:ef:1a:d9:0a:48:91:b9:
77:8a:0c:b6:5a:81:d0:66:dc:58:70:10:8f:3b:95:1b:f2:4c:
25:a3:a9:a5:96:3b:2d:88:14:7d:20:48:66:5b:5e:d9:c1:f3:
98:37:00:01:35:d9:7d:8b:4e:6f:a5:55:7b:f0:b7:21:09:99:
40:1a:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:52 2025 by rpki-client