Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210439.roa
File: AS210439.roa (raw, json)
Hash identifier: OiDU+SO4ZeNoj5Ez0S7hUlrco61rK7F48HjJTjHr/ks=
Subject key identifier: 99:48:B1:F8:D7:FC:A4:20:0C:17:A8:99:CD:37:DD:A9:96:BB:67:01
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 47756E886C5550C15F08C613B5CB3D4D09A0E965
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210439.roa
Signing time: Wed 01 Mar 2023 07:08:18 +0000
ROA not before: Wed 01 Mar 2023 07:03:18 +0000
ROA not after: Wed 28 Feb 2024 07:08:18 +0000
asID: 210439
IP address blocks: 179.61.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:75:6e:88:6c:55:50:c1:5f:08:c6:13:b5:cb:3d:4d:09:a0:e9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:18 2023 GMT
Not After : Feb 28 07:08:18 2024 GMT
Subject: CN=9948B1F8D7FCA4200C17A899CD37DDA996BB6701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ba:56:d1:d0:86:a4:90:ae:ce:f5:c7:0f:fc:
91:17:d7:9a:00:65:16:ac:98:19:b1:0a:b1:45:73:
66:57:58:f6:64:ed:45:64:8b:84:39:65:20:17:79:
a9:4c:86:6e:a9:7c:87:93:27:1a:82:90:ae:1a:cd:
09:99:5a:6d:51:a5:39:a5:9d:ad:65:ea:75:68:a5:
17:83:40:1f:e6:66:77:8f:24:dc:3e:df:60:55:d0:
f5:df:a0:3b:4e:d2:76:55:3b:48:1b:fa:bf:b9:00:
4d:14:59:b7:73:fc:e6:a4:cd:50:28:6c:92:04:1a:
82:3e:4c:2e:f8:fa:01:03:2c:0d:5d:b0:00:80:02:
ff:73:8c:c6:df:f6:50:ad:ea:06:dc:e1:a2:85:76:
a0:fd:46:12:82:ae:7d:d3:c2:be:79:29:13:08:b6:
74:73:70:65:d0:b7:11:63:e3:25:fb:95:3e:f7:7b:
d7:17:00:e4:10:b0:ce:41:d0:2b:22:d4:24:58:65:
00:89:aa:05:f3:9a:a8:58:ea:26:a2:08:06:f0:d9:
dc:97:a8:15:d7:79:15:27:48:7d:11:94:6a:72:7f:
33:33:28:7d:d7:61:e4:8d:84:80:db:17:1d:e7:32:
c5:fa:bf:cb:92:a3:71:c3:59:ff:cb:73:b8:47:5e:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:B1:F8:D7:FC:A4:20:0C:17:A8:99:CD:37:DD:A9:96:BB:67:01
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.212.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0f:3c:e7:a3:65:4e:8f:80:ca:b9:64:f5:33:e9:7b:08:46:
2f:d1:b2:f7:fa:da:12:cf:2c:0f:75:2b:94:11:38:df:04:e2:
c3:7f:3a:e5:5b:40:ac:8e:be:ab:c4:79:72:5d:b0:f0:4b:bf:
ec:a1:37:c5:66:88:bb:f7:b0:41:10:22:ac:d6:35:df:b9:1a:
42:d6:11:99:fc:b1:eb:26:c8:3f:30:92:0a:b2:9b:36:e5:ac:
9c:30:00:c3:b1:d9:1d:25:62:e2:06:ba:76:17:c4:6b:f3:1c:
ea:1e:7a:93:56:60:b2:63:6e:58:fd:c5:ca:d8:f5:95:e0:4c:
76:e8:0d:55:4c:57:6c:30:28:62:cd:58:c4:3d:16:aa:cb:5b:
26:08:2f:17:fb:83:eb:ca:34:5d:9a:0b:51:1e:e7:e1:06:e6:
6c:73:ad:8a:1a:2a:54:bc:9e:3c:76:8d:3b:de:49:a4:01:73:
0f:e7:df:fd:4c:b3:2a:90:a5:81:59:d8:67:02:d9:56:84:d6:
22:90:21:62:af:dc:75:59:2d:81:65:af:da:7b:b1:26:a5:e7:
00:f1:d4:d6:1e:b6:24:47:fe:b7:cd:1d:d4:41:f9:3d:81:32:
ef:2a:be:aa:ad:4f:17:91:93:37:49:54:ae:f1:a2:54:21:eb:
4a:5e:a9:1d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUR3VuiGxVUMFfCMYTtcs9TQmg6WUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzAzMDEwNzAzMThaFw0yNDAyMjgwNzA4MThaMDMxMTAvBgNV
BAMTKDk5NDhCMUY4RDdGQ0E0MjAwQzE3QTg5OUNEMzdEREE5OTZCQjY3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdulbR0IakkK7O9ccP/JEX15oA
ZRasmBmxCrFFc2ZXWPZk7UVki4Q5ZSAXealMhm6pfIeTJxqCkK4azQmZWm1RpTml
na1l6nVopReDQB/mZnePJNw+32BV0PXfoDtO0nZVO0gb+r+5AE0UWbdz/OakzVAo
bJIEGoI+TC74+gEDLA1dsACAAv9zjMbf9lCt6gbc4aKFdqD9RhKCrn3Twr55KRMI
tnRzcGXQtxFj4yX7lT73e9cXAOQQsM5B0Csi1CRYZQCJqgXzmqhY6iaiCAbw2dyX
qBXXeRUnSH0RlGpyfzMzKH3XYeSNhIDbFx3nMsX6v8uSo3HDWf/Lc7hHXoF5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUmUix+Nf8pCAMF6iZzTfdqZa7ZwEwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEwNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz3U
MA0GCSqGSIb3DQEBCwUAA4IBAQAiDzzno2VOj4DKuWT1M+l7CEYv0bL3+toSzywP
dSuUETjfBOLDfzrlW0Csjr6rxHlyXbDwS7/soTfFZoi797BBECKs1jXfuRpC1hGZ
/LHrJsg/MJIKsps25aycMADDsdkdJWLiBrp2F8Rr8xzqHnqTVmCyY25Y/cXK2PWV
4Ex26A1VTFdsMChizVjEPRaqy1smCC8X+4PryjRdmgtRHufhBuZsc62KGipUvJ48
do073kmkAXMP59/9TLMqkKWBWdhnAtlWhNYikCFir9x1WS2BZa/ae7EmpecA8dTW
HrYkR/63zR3UQfk9gTLvKr6qrU8XkZM3SVSu8aJUIetKXqkd
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:14 2024 by rpki-client on console-fra.rpki-client.org