Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209940.roa
File: AS209940.roa (raw, json)
Hash identifier: ybthnLoDVHPzjJi4odzQ2YqtDEZMcYU5/rb9JcxzKyA=
Subject key identifier: DF:4C:B5:C3:B9:76:44:48:CD:4E:7A:39:01:A4:C6:D4:F0:50:99:E9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 755F7962EAF713DE39F0FFD290CD821137BD2CA4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209940.roa
Signing time: Mon 07 Aug 2023 17:09:48 +0000
ROA not before: Mon 07 Aug 2023 17:04:48 +0000
ROA not after: Mon 05 Aug 2024 17:09:48 +0000
asID: 209940
IP address blocks: 185.170.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5f:79:62:ea:f7:13:de:39:f0:ff:d2:90:cd:82:11:37:bd:2c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 7 17:04:48 2023 GMT
Not After : Aug 5 17:09:48 2024 GMT
Subject: CN=DF4CB5C3B9764448CD4E7A3901A4C6D4F05099E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:86:c6:42:0d:31:44:e5:79:37:fb:3a:8c:
c8:d8:51:93:f0:8c:df:d4:2d:ef:0d:1c:dc:b2:9f:
eb:a0:fa:ca:d3:6e:cf:7b:f7:91:cf:6c:bd:67:87:
07:ca:bc:3e:e2:64:b6:66:06:2d:4e:58:18:a9:34:
03:24:4c:eb:80:03:1a:df:ef:75:50:46:ea:c9:2e:
03:29:d8:24:c1:2d:4b:9f:d1:01:66:ac:2d:30:ad:
fc:a5:39:95:ce:75:f3:b6:ae:55:ca:72:14:17:25:
fe:31:b8:0a:42:56:12:48:1e:c6:c4:8d:95:79:62:
f9:50:d5:f0:de:cb:5e:16:b0:05:d9:57:f9:3d:5d:
f7:b0:3d:5f:38:2a:cf:4c:e1:28:44:69:34:e4:5f:
47:21:36:66:70:9f:fb:bd:11:5d:17:db:ca:50:09:
80:4f:00:d5:ef:7e:d9:49:3b:c1:04:e2:88:a9:b9:
4f:2e:cd:2f:48:33:00:e2:1d:48:2d:f6:44:88:3d:
21:c5:43:54:37:01:e2:a5:4a:9a:23:10:e9:67:c4:
3a:71:8d:78:c0:43:d7:7e:a3:1e:f6:cb:66:5f:63:
5a:c4:e2:84:25:65:4a:3f:fc:8f:5a:9b:4e:af:3b:
fe:d9:21:eb:61:cf:26:ce:33:3d:92:04:68:6a:71:
72:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4C:B5:C3:B9:76:44:48:CD:4E:7A:39:01:A4:C6:D4:F0:50:99:E9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209940.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:54:0d:35:bc:d5:72:26:8e:3d:a7:bb:8e:79:d3:db:83:c2:
32:88:fb:fd:87:9c:78:10:19:50:40:08:f4:67:c0:98:76:69:
e8:cc:62:77:7a:2b:4a:5f:71:c9:60:02:26:4d:3f:c4:19:23:
cc:7a:b7:2b:7d:18:92:41:3d:ec:29:03:1f:67:d1:1a:54:d0:
46:a1:f7:ee:4c:8b:66:66:ce:f0:21:d7:2f:01:bc:23:bc:a6:
ba:ee:1a:f0:b3:89:29:5c:25:28:a7:5b:76:96:f0:3a:29:ac:
d8:6f:25:3b:ad:d2:34:b5:8b:73:50:00:36:aa:18:17:0a:92:
1c:b9:96:6b:f5:9e:2a:7f:68:97:ca:22:26:4c:33:c6:b7:1c:
b7:f5:c5:4b:c1:15:03:c8:70:b6:88:ce:7f:5d:fa:4f:63:ae:
9e:f2:61:42:9e:74:6c:48:fe:e9:15:13:92:41:c0:33:6b:cc:
a5:f7:f2:d6:dc:52:15:27:0a:43:8a:ee:6a:89:04:db:14:69:
ef:31:c5:c9:22:66:53:fe:b0:d2:4b:0e:d5:86:08:92:72:4b:
ac:af:83:69:d3:0e:7d:57:73:dc:f2:e7:5d:9a:0f:77:a7:dc:
fe:bc:2f:8a:4e:d5:ea:99:13:a4:c9:31:10:0b:30:2d:72:b4:
a3:2c:ba:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUdV95Yur3E9458P/SkM2CETe9LKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA4MDcxNzA0NDhaFw0yNDA4MDUxNzA5NDhaMDMxMTAvBgNV
BAMTKERGNENCNUMzQjk3NjQ0NDhDRDRFN0EzOTAxQTRDNkQ0RjA1MDk5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6obGQg0xROV5N/s6jMjYUZPw
jN/ULe8NHNyyn+ug+srTbs9795HPbL1nhwfKvD7iZLZmBi1OWBipNAMkTOuAAxrf
73VQRurJLgMp2CTBLUuf0QFmrC0wrfylOZXOdfO2rlXKchQXJf4xuApCVhJIHsbE
jZV5YvlQ1fDey14WsAXZV/k9XfewPV84Ks9M4ShEaTTkX0chNmZwn/u9EV0X28pQ
CYBPANXvftlJO8EE4oipuU8uzS9IMwDiHUgt9kSIPSHFQ1Q3AeKlSpojEOlnxDpx
jXjAQ9d+ox72y2ZfY1rE4oQlZUo//I9am06vO/7ZIethzybOMz2SBGhqcXKpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU30y1w7l2REjNTno5AaTG1PBQmekwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA5OTQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuao6
MA0GCSqGSIb3DQEBCwUAA4IBAQChVA01vNVyJo49p7uOedPbg8IyiPv9h5x4EBlQ
QAj0Z8CYdmnozGJ3eitKX3HJYAImTT/EGSPMercrfRiSQT3sKQMfZ9EaVNBGoffu
TItmZs7wIdcvAbwjvKa67hrws4kpXCUop1t2lvA6KazYbyU7rdI0tYtzUAA2qhgX
CpIcuZZr9Z4qf2iXyiImTDPGtxy39cVLwRUDyHC2iM5/XfpPY66e8mFCnnRsSP7p
FROSQcAza8yl9/LW3FIVJwpDiu5qiQTbFGnvMcXJImZT/rDSSw7VhgiSckusr4Np
0w59V3Pc8uddmg93p9z+vC+KTtXqmROkyTEQCzAtcrSjLLog
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:20 2025 by rpki-client