Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43072.roa
File: AS43072.roa (raw, json)
Hash identifier: 1VGbKoe9roAq9iG2WytCLaZ65z1CMaZfg1Ugc6EcNLU=
Subject key identifier: F2:89:C1:44:10:47:D4:42:53:19:78:ED:5A:1D:16:E4:35:08:9F:4D
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 12587D0283C2894FBA769326D38C25182A134156
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43072.roa
Signing time: Wed 03 May 2023 14:52:16 +0000
ROA not before: Wed 03 May 2023 14:47:16 +0000
ROA not after: Wed 01 May 2024 14:52:16 +0000
asID: 43072
IP address blocks: 185.139.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:58:7d:02:83:c2:89:4f:ba:76:93:26:d3:8c:25:18:2a:13:41:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 3 14:47:16 2023 GMT
Not After : May 1 14:52:16 2024 GMT
Subject: CN=F289C1441047D442531978ED5A1D16E435089F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:d1:2e:04:90:b8:dd:ea:a9:44:11:7d:c3:
7f:20:4f:30:9a:04:68:ba:15:e2:be:09:47:91:e6:
b5:18:c4:99:ad:e1:62:af:58:da:52:b3:da:81:b8:
18:0e:6b:b9:77:3c:4f:4e:97:ad:a1:ec:df:d5:95:
5e:a8:44:97:68:4c:8b:49:82:b5:df:a5:0d:1e:55:
78:59:ae:6f:8b:77:65:51:7f:f7:99:81:1d:39:6f:
50:5c:57:a6:29:46:59:78:4a:4b:a2:36:09:fc:a7:
c2:a8:b3:20:04:ba:5a:df:9c:b2:c5:81:98:07:b5:
b5:2b:5c:3d:ee:f0:c6:07:26:dd:2b:67:be:fb:36:
c5:d9:51:02:23:de:ee:03:58:58:1d:60:0d:bb:c5:
a8:20:8e:3b:c5:a9:d8:a4:33:0d:a3:51:f5:c0:da:
4c:8f:18:c0:38:b1:fc:e1:c7:78:b2:2a:60:6d:0f:
0c:0e:c5:25:90:71:cc:0b:1a:65:d7:91:0b:9b:5b:
23:36:34:19:bd:c0:2c:55:2a:a1:24:6e:7d:29:1d:
03:f4:4a:f4:23:df:98:6c:42:71:71:66:e0:13:fb:
01:fa:70:32:c3:7e:06:b7:e9:12:ba:c9:5b:7e:52:
89:41:c8:3d:57:77:fc:ae:46:93:dc:b7:78:60:85:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:89:C1:44:10:47:D4:42:53:19:78:ED:5A:1D:16:E4:35:08:9F:4D
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43072.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.236.0/24
Signature Algorithm: sha256WithRSAEncryption
45:18:e1:7e:dd:eb:74:36:a7:c5:3f:84:48:73:8f:7b:32:fd:
9f:0b:cc:77:23:9d:31:36:b4:2f:02:7f:f2:cb:de:9e:70:95:
56:f8:fe:67:d5:ff:71:52:86:04:f4:16:f6:3b:ba:0e:ae:1f:
3c:88:3c:60:9c:8e:17:ad:df:17:5d:c5:89:bb:9f:80:05:9b:
6d:d1:52:b1:31:9a:52:69:8e:6c:d8:96:16:67:4e:ce:54:7d:
c8:71:61:bc:5d:32:b6:5e:31:fd:fd:d8:cd:d6:e9:e3:04:c8:
34:ba:14:5b:35:50:b1:af:79:b9:d2:e9:63:0d:fc:a5:74:4d:
8d:1b:6e:0b:52:9d:19:6c:0e:eb:02:58:bf:a4:7b:76:81:b2:
0b:8c:f4:80:e5:b4:75:93:e3:95:66:49:f6:f9:d0:20:61:ec:
fd:23:82:e1:7e:10:7b:d3:23:68:05:32:d5:00:a2:f1:0f:2c:
aa:8f:3f:9e:08:df:ac:a7:f2:ce:d0:eb:d4:65:09:45:b3:a2:
2b:d6:e1:c9:cc:b2:1a:cb:cb:f6:2c:4e:d1:a5:f1:ab:b0:e5:
63:55:1c:fd:be:1f:46:f6:bb:9b:ca:e0:41:27:0a:65:08:f1:
04:2e:ce:39:d2:84:06:47:c8:ae:16:58:d0:f9:e1:48:7b:e8:
7a:fc:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:03 2025 by rpki-client