Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212144.roa
File: AS212144.roa (raw, json)
Hash identifier: ONhVjz7EUjh1kLWkwDQpVO0e1Gif/RNgIDSkiSPXU5o=
Subject key identifier: 93:FD:EA:74:A9:26:43:D3:C4:4A:85:9B:DF:9C:91:DF:48:6D:04:EB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 200650F523110716C50DA1F8F19C9E7139466756
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212144.roa
Signing time: Tue 26 Sep 2023 08:19:56 +0000
ROA not before: Tue 26 Sep 2023 08:14:56 +0000
ROA not after: Tue 24 Sep 2024 08:19:56 +0000
asID: 212144
IP address blocks: 2a0a:9600::/29 maxlen: 48
2a0a:ba00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:06:50:f5:23:11:07:16:c5:0d:a1:f8:f1:9c:9e:71:39:46:67:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 26 08:14:56 2023 GMT
Not After : Sep 24 08:19:56 2024 GMT
Subject: CN=93FDEA74A92643D3C44A859BDF9C91DF486D04EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:aa:ed:6e:4e:fb:e6:88:ae:ce:13:d8:20:
68:ef:b0:c8:6a:31:6f:77:a1:b8:60:3a:86:aa:d2:
7d:a0:7a:64:65:91:13:8d:4f:a3:6e:9c:0d:8f:10:
ff:4d:22:db:a2:b3:a0:7b:05:36:ec:33:cf:da:ec:
1b:9d:c9:bf:a6:92:8b:a9:66:48:1d:f7:a8:a5:e1:
14:06:12:d5:92:1c:fb:ef:d6:ed:5b:80:5b:5a:57:
7f:6d:33:c3:b6:af:e7:7c:07:58:76:c6:f7:0a:60:
ae:4d:07:a9:95:61:5f:c0:60:9a:e8:3f:da:4d:34:
dd:69:78:1e:60:83:72:7f:5b:00:bc:9b:a9:68:6a:
d3:7b:e0:b9:99:99:b6:87:a1:1c:65:ea:b6:69:96:
bc:51:c8:4e:c0:52:3f:bc:1b:a7:32:a4:98:be:ca:
c7:1a:00:d4:06:14:e1:e7:6b:5d:98:1f:e3:94:38:
d9:a5:8b:20:34:4e:78:f2:e4:d8:88:4d:f4:98:d9:
c8:f3:cd:9c:4f:e5:94:c8:92:b9:7d:ae:d4:a5:a7:
c9:8e:40:1b:81:11:17:a8:56:ec:69:29:64:c2:e2:
96:0d:3f:f5:7a:45:39:98:03:3f:dd:cc:bc:62:98:
d2:f4:21:95:2b:b3:b4:10:c3:79:d2:ec:88:a2:9e:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FD:EA:74:A9:26:43:D3:C4:4A:85:9B:DF:9C:91:DF:48:6D:04:EB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212144.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:9600::/29
2a0a:ba00::/29
Signature Algorithm: sha256WithRSAEncryption
81:9b:24:71:ef:63:2d:e3:c5:cc:5c:6b:4f:90:c5:27:dd:0e:
07:73:7d:27:ac:27:81:75:b3:67:da:e8:f6:6e:f9:88:e4:8d:
c8:ef:25:d8:2d:77:82:72:0b:eb:fb:e0:73:b8:7b:2c:19:01:
33:c0:b4:6a:90:95:b7:1f:d3:ac:2a:46:39:38:6f:8c:ef:7b:
39:45:13:88:87:62:9e:69:24:64:cf:b8:f3:74:0a:fc:46:0b:
49:70:b1:df:bb:78:b1:90:c4:b3:72:a4:11:f9:29:a9:90:a3:
13:e7:ab:96:41:4b:1d:72:0a:32:5e:48:3c:9b:8e:bc:59:ec:
aa:b0:47:88:54:85:e1:19:1f:f9:11:f2:13:b6:81:72:0f:63:
a3:be:62:92:56:75:52:2b:43:20:f6:63:83:37:2a:db:d1:62:
0f:13:28:01:4a:c3:83:f1:39:c9:2f:5c:8e:22:c6:99:87:31:
b5:11:ae:1b:b5:36:9d:32:64:2f:db:43:0b:30:a9:24:9a:5d:
83:d6:59:55:7c:7e:d2:23:32:b6:30:ee:42:5b:6d:c9:6c:37:
8a:bb:1b:78:1a:77:4d:4f:0a:da:ed:e6:6f:28:19:c4:0c:e1:
65:bb:79:82:e6:43:f6:b3:b8:a3:ff:0e:0f:99:dd:6f:7e:ee:
51:f7:d4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:10 2025 by rpki-client