Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS267809.roa
File: AS267809.roa (raw, json)
Hash identifier: bokhk4o+AacDfo8QrtXJGxVjSO6Keh4YXSxgru+I2do=
Subject key identifier: 65:F4:23:91:D9:8A:E5:B5:F8:A9:9A:B0:84:43:09:EA:A2:19:D0:3F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4534922E5738B2C10221D707246F321F9C26992C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS267809.roa
Signing time: Wed 01 Mar 2023 07:08:14 +0000
ROA not before: Wed 01 Mar 2023 07:03:14 +0000
ROA not after: Wed 28 Feb 2024 07:08:14 +0000
asID: 267809
IP address blocks: 191.96.231.0/24 maxlen: 24
191.101.25.0/24 maxlen: 24
191.101.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:34:92:2e:57:38:b2:c1:02:21:d7:07:24:6f:32:1f:9c:26:99:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:14 2023 GMT
Not After : Feb 28 07:08:14 2024 GMT
Subject: CN=65F42391D98AE5B5F8A99AB0844309EAA219D03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:0b:c0:60:64:f6:64:60:90:53:2f:1d:37:
24:44:0f:7c:55:50:1c:a6:c8:cb:e0:8e:b8:91:72:
30:08:44:43:e3:bb:3f:99:3c:87:09:34:68:37:29:
3b:03:11:d2:93:54:a9:6b:ad:29:82:26:70:9d:21:
c9:f5:16:17:e3:93:1f:7e:44:6c:60:84:e9:f7:fa:
ef:6f:d1:3f:ab:3e:f8:54:0c:5e:0f:8b:a5:b0:b3:
14:d6:6b:57:82:40:2d:25:f9:6a:f8:a0:af:8c:64:
a6:5b:30:6a:98:9f:63:54:66:ac:ab:02:e1:4b:88:
a1:0b:4c:53:8b:2c:98:da:f9:82:de:ca:4e:54:57:
99:cc:8f:74:95:7c:38:b3:2f:58:b2:9e:82:14:df:
05:87:fc:a6:8e:21:78:fc:0e:e8:a6:04:c6:50:3f:
99:4f:0f:69:ab:03:d5:83:5f:25:37:16:ea:c8:6a:
69:c5:08:9f:67:81:75:f0:e5:c7:9f:d1:86:5e:68:
ea:20:79:7e:82:05:1d:5d:5f:7f:b2:c5:d6:33:af:
e8:83:a3:f6:25:22:1a:d2:c1:06:18:6a:af:2b:f0:
6e:53:c4:eb:15:6a:54:0a:37:af:cd:06:9d:84:12:
cb:e0:f2:62:e3:4c:14:37:f8:2a:55:cb:99:32:50:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F4:23:91:D9:8A:E5:B5:F8:A9:9A:B0:84:43:09:EA:A2:19:D0:3F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS267809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.231.0/24
191.101.25.0/24
191.101.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e6:b9:76:8d:27:3c:88:d4:29:39:a2:07:ea:e4:9a:f0:9c:
ad:8d:93:6b:84:2c:1d:d9:df:07:21:4d:44:39:27:63:bd:19:
7e:b3:52:cc:8a:ba:97:dc:67:fe:5f:05:38:eb:89:24:f9:48:
6d:af:5e:e5:3b:d8:11:e8:2f:3e:16:b3:c5:54:43:8c:bf:12:
e2:a3:19:f0:06:ce:5d:8f:f0:9f:1c:60:49:63:9d:fa:bd:81:
95:56:eb:31:65:dc:8c:1d:9d:1d:4c:6b:58:25:dd:04:fd:fa:
06:66:27:46:ca:f6:80:79:e6:bf:a3:94:d1:c8:f8:09:a1:b6:
9a:9f:b3:37:5f:da:3e:db:66:bd:ce:90:7e:9e:dc:63:bd:19:
af:8b:13:a5:1a:24:8a:0d:4c:0e:4f:16:c0:e8:55:aa:ad:3a:
b3:17:d5:74:fa:46:7a:8b:d5:3b:ae:cc:c6:a7:2d:32:f4:1e:
5f:e9:e3:0f:b7:bf:8b:dd:83:36:4f:48:d8:cd:d9:56:1c:ad:
69:61:12:27:b0:9f:d1:d9:4a:1f:88:4d:5c:37:c3:63:f6:ec:
2e:4d:f2:c4:35:2c:63:56:8d:c9:d6:81:ef:2c:a2:1c:a9:e9:
ef:7b:db:b6:8d:f3:66:9d:56:e6:cc:1e:e0:93:3b:6d:f9:c1:
3b:54:c0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:04 2024 by rpki-client on console-ams.rpki-client.org