Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203511.roa
File: AS203511.roa (raw, json)
Hash identifier: xZ+iIiU8u/fGg2YCI/S55z+3KgVjcI7Zi/NqjK0l8Ls=
Subject key identifier: F6:74:6D:74:6B:7A:21:38:E4:F5:CA:7A:81:0F:2D:C7:78:D2:81:2A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 19CB27127B6810D2E55CAD2ECA21FAB468D7E1A9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203511.roa
Signing time: Wed 02 Aug 2023 14:40:35 +0000
ROA not before: Wed 02 Aug 2023 14:35:35 +0000
ROA not after: Wed 31 Jul 2024 14:40:35 +0000
asID: 203511
IP address blocks: 181.215.90.0/24 maxlen: 24
181.215.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:cb:27:12:7b:68:10:d2:e5:5c:ad:2e:ca:21:fa:b4:68:d7:e1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 2 14:35:35 2023 GMT
Not After : Jul 31 14:40:35 2024 GMT
Subject: CN=F6746D746B7A2138E4F5CA7A810F2DC778D2812A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:ee:50:4f:64:eb:73:7e:ca:8e:f9:1f:69:
8b:be:4d:ec:d0:b1:82:7f:79:aa:b3:80:86:c3:63:
94:d1:9f:e1:4a:30:e5:84:02:2a:59:c0:55:68:42:
9d:b6:14:78:7e:bd:b9:08:5d:44:f8:fc:47:26:f6:
17:c8:01:4e:16:13:b6:a2:1e:30:36:cb:5c:ff:07:
b9:a7:03:cb:7d:51:2b:41:1d:94:7c:f1:19:12:2a:
f6:ac:b0:60:6f:cd:81:ca:84:5f:20:c6:a7:c1:6f:
86:c9:7d:7f:4c:31:55:06:cb:1f:74:f4:da:c0:17:
61:af:b6:b7:13:43:d3:15:88:df:49:01:06:f2:06:
1f:07:30:85:16:ea:dc:66:e5:a0:0b:2c:41:47:d9:
c6:5a:0b:d5:ee:67:1b:2c:86:2b:f9:be:8c:14:cf:
f5:40:18:20:e9:77:f2:4b:f4:77:40:28:3a:17:22:
9d:1a:e8:96:70:23:54:2e:07:47:7f:45:25:c4:1f:
f6:59:c2:73:2a:05:6b:cc:b0:c7:82:72:04:f1:45:
31:03:6a:6e:5d:98:c1:3d:78:c3:bd:ef:36:91:e8:
0d:3f:ca:3a:00:d7:20:a5:e7:72:a8:a7:ae:af:3b:
2f:d6:2b:2a:9e:c9:6b:9b:77:34:21:27:84:53:5a:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:6D:74:6B:7A:21:38:E4:F5:CA:7A:81:0F:2D:C7:78:D2:81:2A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.90.0/24
181.215.193.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fc:eb:ac:94:c4:8b:97:2d:42:fd:e9:6b:4b:60:d3:98:eb:
29:f5:c8:ea:69:8d:4a:5f:ae:67:b1:97:42:87:c6:9f:4e:e3:
f0:54:ad:f0:7f:99:4e:07:20:73:d1:98:d9:8f:98:2f:1f:79:
0e:e5:31:eb:09:bf:6b:c5:44:e6:c7:30:ac:c7:13:27:f6:fe:
59:68:47:cb:74:13:d4:9a:eb:33:45:08:f5:a1:7f:e5:c3:10:
e8:8a:bb:96:03:e9:0a:06:41:0a:7a:1f:a1:ce:b3:7f:5a:f2:
3c:bd:ee:a9:eb:c6:44:c8:17:3b:54:72:0e:69:01:11:28:78:
d0:c1:30:fc:61:d8:d6:8c:d1:df:8f:38:e0:6f:c8:cd:2f:d3:
d2:6d:ac:39:15:a6:b5:10:27:77:58:bf:bc:3f:1a:77:80:ff:
e1:70:fc:3a:73:15:7d:52:f9:90:1b:51:ea:34:00:37:e3:89:
0c:7b:ba:bb:4a:df:97:5c:a3:6f:24:21:f8:d8:8e:8e:4c:94:
95:85:56:4c:af:dc:89:d0:25:17:47:23:f9:57:9a:db:c8:0a:
0a:a1:9a:96:85:5a:e4:31:48:02:64:bf:96:1a:67:57:c1:3e:
a8:01:6d:7e:cb:75:70:45:40:69:5f:36:11:71:bf:a7:d1:c8:
72:5f:29:4d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUGcsnEntoENLlXK0uyiH6tGjX4akwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA4MDIxNDM1MzVaFw0yNDA3MzExNDQwMzVaMDMxMTAvBgNV
BAMTKEY2NzQ2RDc0NkI3QTIxMzhFNEY1Q0E3QTgxMEYyREM3NzhEMjgxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Fu5QT2Trc37KjvkfaYu+TezQ
sYJ/eaqzgIbDY5TRn+FKMOWEAipZwFVoQp22FHh+vbkIXUT4/Ecm9hfIAU4WE7ai
HjA2y1z/B7mnA8t9UStBHZR88RkSKvassGBvzYHKhF8gxqfBb4bJfX9MMVUGyx90
9NrAF2GvtrcTQ9MViN9JAQbyBh8HMIUW6txm5aALLEFH2cZaC9XuZxsshiv5vowU
z/VAGCDpd/JL9HdAKDoXIp0a6JZwI1QuB0d/RSXEH/ZZwnMqBWvMsMeCcgTxRTED
am5dmME9eMO97zaR6A0/yjoA1yCl53Kop66vOy/WKyqeyWubdzQhJ4RTWlj1AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU9nRtdGt6ITjk9cp6gQ8tx3jSgSowHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAzNTExLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAtdda
AwQAtdfBMA0GCSqGSIb3DQEBCwUAA4IBAQBC/OuslMSLly1C/elrS2DTmOsp9cjq
aY1KX65nsZdCh8afTuPwVK3wf5lOByBz0ZjZj5gvH3kO5THrCb9rxUTmxzCsxxMn
9v5ZaEfLdBPUmuszRQj1oX/lwxDoiruWA+kKBkEKeh+hzrN/WvI8ve6p68ZEyBc7
VHIOaQERKHjQwTD8YdjWjNHfjzjgb8jNL9PSbaw5Faa1ECd3WL+8Pxp3gP/hcPw6
cxV9UvmQG1HqNAA344kMe7q7St+XXKNvJCH42I6OTJSVhVZMr9yJ0CUXRyP5V5rb
yAoKoZqWhVrkMUgCZL+WGmdXwT6oAW1+y3VwRUBpXzYRcb+n0chyXylN
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:54 2025 by rpki-client