Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43260.roa
File: AS43260.roa (raw, json)
Hash identifier: 9dw+uDtEje0razRf5Mb6N9ncexi0dXcpMoHJMHs1vII=
Subject key identifier: B6:73:9C:BF:40:C9:35:E9:98:86:50:9C:0D:88:3A:1B:22:AC:4F:AA
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 718D571D551ACA044783C067D1112DBAA879D125
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43260.roa
Signing time: Tue 31 Oct 2023 00:00:11 +0000
ROA not before: Mon 30 Oct 2023 23:55:11 +0000
ROA not after: Tue 29 Oct 2024 00:00:11 +0000
asID: 43260
IP address blocks: 45.89.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:8d:57:1d:55:1a:ca:04:47:83:c0:67:d1:11:2d:ba:a8:79:d1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 30 23:55:11 2023 GMT
Not After : Oct 29 00:00:11 2024 GMT
Subject: CN=B6739CBF40C935E99886509C0D883A1B22AC4FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:60:b5:4d:2a:d0:c2:de:79:a6:52:95:9b:
8f:26:7e:df:83:20:18:a2:0b:8d:b8:d9:2e:85:2f:
6e:df:1a:20:c2:d1:3b:7d:c0:81:52:c3:8a:83:37:
46:69:e5:6f:9e:a1:19:fe:52:d2:8a:56:8d:ed:c5:
29:74:15:dd:9c:13:54:e8:aa:cd:19:4a:f8:96:08:
80:2a:d0:73:e0:c2:0f:69:15:6d:b0:9f:45:e2:3c:
7c:6a:6f:6a:4b:41:96:09:ba:ba:7f:ce:35:ff:bf:
40:c6:09:50:b1:06:e7:07:23:58:7f:f3:a4:54:22:
11:15:be:7e:90:f0:54:73:b7:0a:b0:3c:d9:8b:3a:
a0:a8:ba:ee:be:85:9a:57:0f:0f:67:81:ed:22:58:
9a:19:f6:34:bd:96:a6:7f:dd:03:1b:11:b6:11:d3:
99:2c:98:e4:45:87:6a:d6:3f:df:52:a8:d1:cb:43:
d8:73:b3:75:62:06:e3:24:8d:61:aa:4d:2b:25:48:
fa:a0:43:ea:01:c4:ff:ed:f1:46:a8:68:f0:30:29:
d3:ea:ed:5e:2d:8d:56:c8:a8:eb:47:f7:1c:2e:20:
58:8c:4a:97:f3:5b:ba:d5:5e:26:f9:7c:d0:69:38:
95:91:52:55:3e:59:96:f5:35:ce:0a:8e:da:68:61:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:9C:BF:40:C9:35:E9:98:86:50:9C:0D:88:3A:1B:22:AC:4F:AA
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS43260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.253.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6c:33:54:61:50:04:48:9d:4f:d8:4f:95:39:aa:70:d0:61:
ec:fa:5f:08:95:d6:96:7a:23:fc:da:be:f1:8d:26:b9:46:f1:
c7:b7:1d:c9:da:f7:15:28:08:46:8e:ec:e1:fe:47:9f:43:9b:
50:4a:a4:e7:6f:0f:9f:a8:86:7c:27:74:a7:bc:57:c3:ac:8b:
92:8f:30:81:df:27:5d:bd:65:fa:61:08:a7:32:7b:1b:53:6f:
99:22:71:c3:76:d0:77:fe:d4:a2:76:2b:93:bc:cf:b7:0d:72:
8d:1b:3b:46:62:26:88:43:24:3f:b3:19:fd:12:54:75:17:9c:
7b:77:c7:d0:52:06:d4:5b:2d:47:b5:36:76:c5:f7:fc:fc:d1:
e9:3b:48:15:1d:d0:27:eb:fb:5a:6d:3e:7d:dc:75:ad:5e:77:
eb:2e:ac:2f:13:b1:d1:b5:3b:8a:bb:71:5b:55:3f:fa:14:8b:
7b:4d:54:36:4d:a9:07:c1:3e:ca:f3:52:22:bb:5c:81:84:9c:
8b:9e:71:44:fc:b1:ff:bd:80:7f:70:04:3f:ee:3a:4c:81:a9:
ea:c0:41:55:30:0e:1e:c9:ea:83:24:ee:28:db:ec:80:ab:57:
a2:02:a1:a7:17:b1:7f:b1:54:8e:c7:ad:b9:26:48:bc:7d:e9:
3e:b4:1e:46
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUcY1XHVUaygRHg8Bn0REtuqh50SUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzEwMzAyMzU1MTFaFw0yNDEwMjkwMDAwMTFaMDMxMTAvBgNV
BAMTKEI2NzM5Q0JGNDBDOTM1RTk5ODg2NTA5QzBEODgzQTFCMjJBQzRGQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/q2C1TSrQwt55plKVm48mft+D
IBiiC4242S6FL27fGiDC0Tt9wIFSw4qDN0Zp5W+eoRn+UtKKVo3txSl0Fd2cE1To
qs0ZSviWCIAq0HPgwg9pFW2wn0XiPHxqb2pLQZYJurp/zjX/v0DGCVCxBucHI1h/
86RUIhEVvn6Q8FRztwqwPNmLOqCouu6+hZpXDw9nge0iWJoZ9jS9lqZ/3QMbEbYR
05ksmORFh2rWP99SqNHLQ9hzs3ViBuMkjWGqTSslSPqgQ+oBxP/t8UaoaPAwKdPq
7V4tjVbIqOtH9xwuIFiMSpfzW7rVXib5fNBpOJWRUlU+WZb1Nc4KjtpoYWpfAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUtnOcv0DJNemYhlCcDYg6GyKsT6owHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDMyNjAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtWf0w
DQYJKoZIhvcNAQELBQADggEBAAFsM1RhUARInU/YT5U5qnDQYez6XwiV1pZ6I/za
vvGNJrlG8ce3Hcna9xUoCEaO7OH+R59Dm1BKpOdvD5+ohnwndKe8V8Osi5KPMIHf
J129ZfphCKcyextTb5kiccN20Hf+1KJ2K5O8z7cNco0bO0ZiJohDJD+zGf0SVHUX
nHt3x9BSBtRbLUe1NnbF9/z80ek7SBUd0Cfr+1ptPn3cda1ed+surC8TsdG1O4q7
cVtVP/oUi3tNVDZNqQfBPsrzUiK7XIGEnIuecUT8sf+9gH9wBD/uOkyBqerAQVUw
Dh7J6oMk7ijb7ICrV6ICoacXsX+xVI7HrbkmSLx96T60HkY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:22 2025 by rpki-client