Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44092.roa
File: AS44092.roa (raw, json)
Hash identifier: n78jH5RzA5Rey6XeHFupybBH0F+47YEozs8fJYbDOfo=
Subject key identifier: 9A:1D:70:AF:D8:2D:CE:70:6D:8C:A5:91:5B:AE:98:0E:29:ED:C7:E4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7DE1C472CA6B727A3AECAB2A047B802BFA89FEA8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44092.roa
Signing time: Wed 31 Jan 2024 08:05:11 +0000
ROA not before: Wed 31 Jan 2024 08:00:11 +0000
ROA not after: Wed 29 Jan 2025 08:05:11 +0000
asID: 44092
IP address blocks: 194.110.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e1:c4:72:ca:6b:72:7a:3a:ec:ab:2a:04:7b:80:2b:fa:89:fe:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:11 2024 GMT
Not After : Jan 29 08:05:11 2025 GMT
Subject: CN=9A1D70AFD82DCE706D8CA5915BAE980E29EDC7E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:05:6d:cc:d6:bc:f9:6e:ec:f3:ec:74:e5:
ef:81:12:7a:7d:f0:4d:80:4e:76:02:2f:46:e3:40:
44:c9:f8:98:08:85:f9:52:43:38:f1:52:9c:ec:99:
35:15:df:22:10:4b:cc:8c:4d:23:d4:cf:a2:8d:20:
62:b6:26:0e:f9:06:28:88:2e:24:7f:c3:ba:46:dc:
df:0c:9f:5c:9c:13:3b:69:1f:59:ee:1c:fe:bb:89:
d0:65:bd:d8:d4:26:64:8e:60:12:a3:32:8b:e4:e9:
4a:db:dd:ad:10:9b:40:67:33:41:1b:f6:2d:66:37:
82:3b:da:ad:17:6d:8b:17:2c:65:4a:a1:e5:d8:24:
75:38:bb:d4:ed:ae:8c:f5:fd:d8:21:8b:7b:2b:70:
22:b4:74:8b:af:fd:77:41:1e:11:bf:9f:79:43:d6:
26:94:71:75:b5:d7:2e:c4:46:e5:4f:8d:90:1d:46:
76:be:bc:78:dd:a3:9c:8f:e5:ce:69:88:d1:2e:e3:
73:70:36:f9:d4:e1:07:18:84:fc:3f:58:1e:36:28:
bf:0c:31:3a:b6:8c:4b:9d:40:27:8c:44:cc:25:66:
d6:bb:c9:f9:50:c1:0a:03:23:b4:9d:0f:04:03:af:
23:f8:7d:f8:23:4b:0c:54:fe:15:58:5d:33:af:3e:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:70:AF:D8:2D:CE:70:6D:8C:A5:91:5B:AE:98:0E:29:ED:C7:E4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS44092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b4:57:4c:4f:73:81:90:b2:72:c5:a7:9a:5a:8f:5e:86:e4:
b9:37:5c:81:43:9b:49:ef:cd:d8:56:e6:15:81:46:f6:29:bb:
9f:9b:f4:35:76:80:cc:39:92:89:84:e2:a5:fa:fb:b9:96:9f:
9b:fe:90:2c:5b:7f:28:93:17:b5:90:2f:ec:33:7b:0f:77:6c:
53:1a:0f:14:1a:6b:ce:a5:41:73:7c:e9:a1:91:13:24:d8:a2:
4d:8a:7a:71:11:29:8b:dc:0d:3d:56:fe:d9:c7:b0:57:13:c3:
60:4c:85:d2:c4:a8:8b:6a:ba:42:ef:9d:2d:5b:5c:aa:fa:cf:
55:99:ae:89:a8:a3:80:30:77:74:3a:06:9f:64:bb:92:3d:0b:
7a:5f:eb:64:cb:00:87:55:e4:58:71:76:3b:5e:c8:e1:9f:72:
4c:51:a0:56:83:de:77:9e:37:00:24:d1:4c:57:06:bd:49:eb:
c2:f0:3b:ef:0d:da:3c:21:cc:3f:8e:c9:8a:57:39:ac:61:9c:
1a:4b:40:50:56:4a:0f:11:60:3b:7b:ed:8a:7a:bb:36:ec:30:
cd:89:34:e3:a3:22:cd:8d:fd:64:cb:32:88:3e:47:49:7d:b4:
ed:ba:56:88:43:65:4c:c6:73:36:15:20:93:fc:56:d8:31:ec:
76:aa:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:29 2025 by rpki-client