Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205474.roa
File: AS205474.roa (raw, json)
Hash identifier: OGzp6n9YPmE8u2PqmtEYNxuaZJaPXOXq9rCr5mPYDiY=
Subject key identifier: 5E:55:D6:F9:21:24:24:A3:3E:47:1C:06:DB:5E:AF:E5:A7:F5:B7:AE
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 45271551AC96E54892F6CF038841C430C812C2D5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205474.roa
Signing time: Wed 01 Mar 2023 07:08:14 +0000
ROA not before: Wed 01 Mar 2023 07:03:14 +0000
ROA not after: Wed 28 Feb 2024 07:08:14 +0000
asID: 205474
IP address blocks: 181.214.170.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:27:15:51:ac:96:e5:48:92:f6:cf:03:88:41:c4:30:c8:12:c2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:14 2023 GMT
Not After : Feb 28 07:08:14 2024 GMT
Subject: CN=5E55D6F9212424A33E471C06DB5EAFE5A7F5B7AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:d1:b9:53:48:1e:bc:3f:e8:8c:5f:d6:26:
01:76:5c:d7:10:b4:3a:79:45:ed:68:3c:24:0f:c3:
9f:69:65:ed:f3:68:09:8b:0e:f5:82:97:78:b3:6a:
f4:66:2e:2e:d8:8c:a2:08:cb:ba:19:b4:f3:94:de:
a7:4a:2d:b3:8f:77:ac:a7:42:59:fc:c5:a2:bd:a1:
7d:0e:b6:23:d9:e4:16:eb:47:9f:57:34:76:58:01:
16:bc:92:58:d5:69:2d:ea:b0:7f:93:9a:e4:c0:e5:
9a:85:be:fc:c2:5a:bf:88:5c:1e:c8:40:13:ec:cf:
0b:a6:93:df:9a:53:fb:13:7e:08:d8:31:47:7e:10:
f5:a3:07:f9:cb:e5:33:22:09:9f:60:96:05:b3:ef:
d1:c5:32:4d:c2:67:20:cc:ef:e8:24:e0:ac:23:e9:
e6:fd:07:59:b1:f4:0c:72:56:c0:5f:f4:5c:fd:e0:
a6:c6:13:df:4e:12:ac:f6:b8:fa:43:8c:1e:14:49:
aa:26:17:92:04:59:d7:de:2c:db:be:2b:78:30:1a:
f2:d3:48:2f:d2:41:0a:ed:bf:01:67:4c:04:2f:d3:
df:34:8e:74:b6:ab:b0:a1:10:bf:a3:52:cd:a5:fb:
d8:76:95:4f:0b:7c:7f:1f:80:24:00:32:8f:f9:0e:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:55:D6:F9:21:24:24:A3:3E:47:1C:06:DB:5E:AF:E5:A7:F5:B7:AE
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205474.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.170.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:98:96:fe:82:32:ff:f9:58:0c:55:15:67:ae:88:7b:db:24:
cb:3e:eb:dd:0e:a2:a4:91:3f:fc:6f:3a:c2:b0:4f:71:22:fa:
53:7e:7a:14:e0:75:23:ac:1b:a1:41:fa:3e:8c:1d:13:22:b4:
5d:aa:d3:73:33:2f:b8:08:92:2c:d5:50:06:c3:8d:a3:1a:60:
a0:d2:99:3d:98:1e:de:c8:b2:17:26:a5:fa:19:83:7f:8c:ed:
9c:d4:c0:3f:bc:7d:d4:59:96:53:ee:d3:00:48:87:d2:d4:6b:
3f:e2:00:24:e9:b7:f2:ea:e9:00:67:7d:66:59:3b:06:8a:d1:
d4:a6:1c:2e:c8:4b:c8:57:86:6f:d0:9f:f0:fc:fb:19:17:86:
ac:ab:87:35:b7:68:7e:aa:0a:f2:46:a9:a9:bf:95:27:fe:f8:
56:ce:7a:28:10:75:03:34:ff:9a:47:c6:9e:8d:c2:ff:34:b1:
4e:d7:22:64:e9:de:43:69:92:17:70:76:79:17:58:fe:7f:e9:
f3:42:c6:46:f2:48:c3:27:9b:63:44:43:5f:b5:85:c5:0e:02:
37:85:10:22:6f:2c:ea:5f:e2:a3:14:f5:c7:fd:61:94:d6:91:
eb:c4:f6:fa:b1:1d:9c:22:16:4c:ad:31:eb:4f:f4:65:79:33:
f7:8a:64:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:52 2025 by rpki-client