Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213074.roa
File: AS213074.roa (raw, json)
Hash identifier: ER6itbA+eYN9fQi/malpWjDQuoC/jZSim2GVU8gH9D8=
Subject key identifier: 35:97:C4:A7:DE:6F:B3:CD:EF:99:49:9F:4E:43:ED:DC:87:20:28:36
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 723B2F4FA0FB6A9DC292CFCEBF31A38DC2B64790
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213074.roa
Signing time: Tue 06 Jun 2023 12:14:14 +0000
ROA not before: Tue 06 Jun 2023 12:09:14 +0000
ROA not after: Tue 04 Jun 2024 12:14:14 +0000
asID: 213074
IP address blocks: 191.96.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3b:2f:4f:a0:fb:6a:9d:c2:92:cf:ce:bf:31:a3:8d:c2:b6:47:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 6 12:09:14 2023 GMT
Not After : Jun 4 12:14:14 2024 GMT
Subject: CN=3597C4A7DE6FB3CDEF99499F4E43EDDC87202836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:d7:2d:e0:f5:78:18:66:2e:66:fd:58:01:
ae:c6:d6:35:f1:d5:9e:67:1c:98:16:b6:b9:c9:8c:
53:60:24:c3:c6:42:c8:82:29:4f:b6:71:d6:08:f2:
e7:a5:07:1c:7a:83:eb:e5:33:ec:76:88:a6:c1:ec:
05:87:35:d3:26:4c:70:63:a7:33:cf:ee:4c:e6:d6:
78:07:be:62:d9:df:15:d3:9d:e7:b1:c8:05:b3:b3:
c3:7f:7e:a1:9b:c2:7c:96:73:be:d3:86:db:68:b9:
e7:8c:4f:5d:20:65:ee:43:85:54:a1:dc:05:6d:2a:
43:db:f3:5f:d1:56:b0:e2:27:0a:53:3a:80:f9:08:
1d:2d:85:eb:c6:13:79:9c:45:ec:d7:de:54:3a:f4:
07:f4:99:c5:ac:04:f5:e2:b8:97:76:f7:28:f2:4c:
a4:d6:27:ae:6a:be:df:3d:0b:b8:fb:6d:73:50:13:
6f:8d:20:d2:66:96:1d:1b:56:ef:d5:32:a8:59:60:
fe:f7:e5:26:14:af:71:e0:f6:04:31:fd:61:7e:de:
a5:bc:0d:e6:c7:dc:17:94:37:ce:aa:3d:44:6f:20:
57:4c:74:9d:fd:9b:18:7f:22:fc:35:eb:2e:6a:35:
30:9a:bc:c4:68:3c:bf:b0:6b:7b:44:56:68:ee:23:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:C4:A7:DE:6F:B3:CD:EF:99:49:9F:4E:43:ED:DC:87:20:28:36
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213074.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.228.0/23
Signature Algorithm: sha256WithRSAEncryption
29:ff:7e:25:6f:01:9f:38:56:96:53:91:17:0f:cd:e6:d4:65:
15:e9:56:0f:77:7d:fe:4b:ae:cf:f9:7b:c7:19:c5:2c:11:2f:
9f:ba:cb:6d:09:de:0c:46:64:2f:7b:34:fc:7d:db:f4:a9:d0:
19:5c:fb:47:76:bf:87:d7:cd:19:9a:d2:f3:ff:6d:96:47:c3:
47:ea:d8:90:c8:a3:d7:9b:5e:a4:73:13:48:3d:90:25:13:23:
4a:d6:79:be:0a:38:8f:36:61:62:a8:4a:74:34:57:c8:b3:83:
b5:0b:9d:96:63:db:6e:53:83:ff:36:21:35:ef:f3:21:74:22:
55:e8:a5:4b:4f:f1:16:78:78:c0:b6:8a:20:4f:9c:bc:6f:71:
66:97:25:53:f3:65:2b:cb:25:8e:2d:32:33:a2:14:8e:d8:5e:
86:a1:17:8d:f6:cf:28:d4:1e:79:1a:60:78:66:2c:3a:be:bb:
51:3d:f2:30:2e:f7:d4:6e:09:e4:b1:a9:d3:08:0d:fb:36:d3:
57:64:1e:0f:27:31:32:45:b6:d7:a5:f4:a4:13:ab:01:5a:35:
79:2c:49:a5:35:37:c7:8c:1b:aa:7b:ac:b4:22:56:60:ff:29:
ea:b5:d5:b0:9a:04:8d:c5:7b:21:2a:b2:94:97:53:2d:ed:20:
01:4e:a2:7c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUcjsvT6D7ap3Cks/OvzGjjcK2R5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzA2MDYxMjA5MTRaFw0yNDA2MDQxMjE0MTRaMDMxMTAvBgNV
BAMTKDM1OTdDNEE3REU2RkIzQ0RFRjk5NDk5RjRFNDNFRERDODcyMDI4MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZdct4PV4GGYuZv1YAa7G1jXx
1Z5nHJgWtrnJjFNgJMPGQsiCKU+2cdYI8uelBxx6g+vlM+x2iKbB7AWHNdMmTHBj
pzPP7kzm1ngHvmLZ3xXTneexyAWzs8N/fqGbwnyWc77ThttoueeMT10gZe5DhVSh
3AVtKkPb81/RVrDiJwpTOoD5CB0thevGE3mcRezX3lQ69Af0mcWsBPXiuJd29yjy
TKTWJ65qvt89C7j7bXNQE2+NINJmlh0bVu/VMqhZYP735SYUr3Hg9gQx/WF+3qW8
DebH3BeUN86qPURvIFdMdJ39mxh/Ivw16y5qNTCavMRoPL+wa3tEVmjuIy0fAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUNZfEp95vs83vmUmfTkPt3IcgKDYwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEzMDc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBv2Dk
MA0GCSqGSIb3DQEBCwUAA4IBAQAp/34lbwGfOFaWU5EXD83m1GUV6VYPd33+S67P
+XvHGcUsES+fusttCd4MRmQvezT8fdv0qdAZXPtHdr+H180ZmtLz/22WR8NH6tiQ
yKPXm16kcxNIPZAlEyNK1nm+CjiPNmFiqEp0NFfIs4O1C52WY9tuU4P/NiE17/Mh
dCJV6KVLT/EWeHjAtoogT5y8b3FmlyVT82UryyWOLTIzohSO2F6GoReN9s8o1B55
GmB4Ziw6vrtRPfIwLvfUbgnksanTCA37NtNXZB4PJzEyRbbXpfSkE6sBWjV5LEml
NTfHjBuqe6y0IlZg/ynqtdWwmgSNxXshKrKUl1Mt7SABTqJ8
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:03 2024 by rpki-client on console-ams.rpki-client.org