Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272697.roa
File: AS272697.roa (raw, json)
Hash identifier: KO3fB1oOEEmr7aDpKAYYc8dSfwInd91K+nwrhA1PqRw=
Subject key identifier: F5:BB:CC:38:DA:0A:3D:A1:DB:A9:C4:8B:E5:9E:D2:97:C0:D5:25:C9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 75AAE01E4B4087EF6922861B865071390F4532B4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272697.roa
Signing time: Wed 01 Mar 2023 07:08:13 +0000
ROA not before: Wed 01 Mar 2023 07:03:13 +0000
ROA not after: Wed 28 Feb 2024 07:08:13 +0000
asID: 272697
IP address blocks: 181.215.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:aa:e0:1e:4b:40:87:ef:69:22:86:1b:86:50:71:39:0f:45:32:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:13 2023 GMT
Not After : Feb 28 07:08:13 2024 GMT
Subject: CN=F5BBCC38DA0A3DA1DBA9C48BE59ED297C0D525C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:bf:b4:ca:e9:b0:2f:78:5b:cd:85:90:0f:
7d:bd:66:48:9a:cd:30:0d:c1:8d:96:42:d8:72:a5:
c4:3e:de:2f:da:43:c9:33:4f:99:63:7a:83:a1:21:
da:9e:ea:fe:43:43:f5:56:e4:45:26:af:94:3d:29:
52:1a:1a:23:4c:4b:fc:91:ca:56:33:f4:be:4d:63:
54:28:62:bd:da:96:81:44:29:ce:3b:34:bd:e7:45:
60:6d:7c:3d:39:a6:05:7b:dd:3b:bf:17:b4:f3:90:
fb:50:4e:e2:f4:18:7d:b2:d2:69:73:f3:fe:de:17:
59:a0:ba:28:db:ff:be:1d:31:7c:60:d5:e7:eb:05:
67:84:f3:3b:95:66:44:76:48:3a:19:15:11:31:1a:
ec:93:f6:3c:fe:86:9f:86:92:2d:02:5f:be:a1:ba:
33:85:6c:84:ff:f4:1e:4e:c3:bc:5e:f2:42:42:ef:
cf:a7:73:e8:7c:e6:3d:a4:4d:91:09:55:5e:86:19:
d8:9c:40:57:45:c5:03:5a:3d:ab:7c:33:20:86:37:
04:07:e9:c0:bb:bd:18:0d:3e:68:d9:47:ee:3f:bd:
42:03:55:98:8c:0b:c4:4b:8f:e5:67:6f:01:10:ff:
ac:95:d0:bf:f9:d6:ec:85:2b:e5:00:3f:f7:3a:54:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:CC:38:DA:0A:3D:A1:DB:A9:C4:8B:E5:9E:D2:97:C0:D5:25:C9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272697.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.22.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9c:4a:e8:95:92:11:10:58:7d:7c:01:0c:97:ba:a3:cd:cd:
a6:ec:ad:a6:dd:3c:cd:58:00:8a:19:8f:69:41:b0:67:a7:6b:
13:9b:d8:af:fa:11:2a:de:a8:4f:4b:96:4d:4e:94:4a:68:42:
c7:0b:a5:92:b6:b4:91:5e:88:1c:0c:dd:c7:63:cb:67:85:ab:
6d:31:f1:db:c9:54:83:a0:25:6a:01:bf:75:77:b2:b2:df:81:
78:f6:2f:ef:42:f4:1c:b6:6d:34:5c:19:5c:11:7f:55:d2:fa:
5c:86:66:76:34:5b:cb:cd:84:79:49:f0:d1:67:47:ef:f2:ca:
3a:df:08:e4:d5:f1:a4:99:9f:87:97:6c:29:95:a9:e0:4e:0a:
c3:97:61:41:6d:6a:2d:e3:fc:83:5d:7f:e2:9c:30:1c:be:7c:
42:e6:fa:fd:4a:da:c5:a0:01:11:7b:10:74:0d:4f:d7:f1:f5:
68:00:37:99:09:8f:30:4b:fe:86:c0:1f:46:a2:6e:0d:46:a6:
50:ce:12:bf:b6:bb:48:95:5e:4f:87:60:20:64:22:45:50:61:
1d:c0:6d:04:5a:5e:3e:a6:be:4b:0e:48:4e:23:d1:23:f4:55:
a7:aa:8a:b0:c3:24:41:e7:4e:db:a1:5b:24:be:f9:05:b2:8f:
bb:0b:ab:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:04 2024 by rpki-client on console-ams.rpki-client.org