Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49581.roa
File: AS49581.roa (raw, json)
Hash identifier: 0Pe/+CzSrmitztypiluz8hytRAq66OUho7WyCghDQiY=
Subject key identifier: 8F:0F:D9:50:00:33:3D:BD:36:22:62:21:90:8D:CB:23:E8:CA:35:FC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 05CEE553BE9761EAADB3AD1299740303BC7FB2FC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49581.roa
Signing time: Thu 06 Apr 2023 12:30:07 +0000
ROA not before: Thu 06 Apr 2023 12:25:07 +0000
ROA not after: Thu 04 Apr 2024 12:30:07 +0000
asID: 49581
IP address blocks: 179.61.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ce:e5:53:be:97:61:ea:ad:b3:ad:12:99:74:03:03:bc:7f:b2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 6 12:25:07 2023 GMT
Not After : Apr 4 12:30:07 2024 GMT
Subject: CN=8F0FD95000333DBD36226221908DCB23E8CA35FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:58:3b:ac:ff:e1:1b:39:27:5c:87:f3:58:
7d:7c:49:a6:20:83:e2:01:11:c7:e5:9f:9f:b5:9e:
e9:6f:c5:78:80:84:37:e4:36:ee:c4:2d:a0:f7:a0:
01:4c:7f:71:6f:5b:7f:73:28:8a:74:7c:4e:35:d2:
99:8c:ee:c5:d4:d5:4c:44:b8:9c:d1:53:79:89:34:
27:10:7b:f7:0a:50:67:a0:8a:fc:20:66:a9:e7:fe:
12:5f:66:26:08:c6:02:e1:b7:99:c3:5d:a3:bb:a9:
4a:7e:7d:96:74:bf:0a:d1:80:88:2c:32:f2:cf:c9:
fe:cb:fd:25:3a:f0:0b:00:7c:0a:89:1c:1b:32:a3:
5e:a7:c8:ef:20:94:b8:98:d4:0e:e7:6d:2e:3c:25:
e1:67:42:2c:e4:37:40:96:d8:2d:1b:37:ec:07:41:
fa:67:5d:63:57:14:00:b3:0b:b7:50:a8:ee:3d:cf:
2c:bc:86:73:1b:6e:8b:9d:be:bf:50:d9:26:33:56:
02:65:aa:88:8a:04:51:d9:18:ca:bc:19:e7:e6:a0:
72:1e:6d:72:82:74:dd:6b:86:6b:f5:bf:6d:64:8e:
b0:5d:93:62:fc:d1:16:7e:ae:1e:ec:22:4f:a6:e2:
b5:f1:a2:5d:9d:54:54:65:69:e8:e7:4b:e5:c3:78:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0F:D9:50:00:33:3D:BD:36:22:62:21:90:8D:CB:23:E8:CA:35:FC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.226.0/24
Signature Algorithm: sha256WithRSAEncryption
41:79:31:b3:c4:09:9a:ed:b8:e3:20:7a:8e:14:58:56:c1:f8:
b2:55:4c:a9:b4:c5:e5:62:30:15:20:e6:e4:c0:11:09:7f:3b:
32:f8:e7:7d:d5:aa:76:ac:37:c7:77:43:2c:d6:ab:36:77:46:
b7:82:e9:83:e8:8e:57:b3:7b:6f:f5:8c:af:5a:27:aa:ad:34:
ae:4b:e8:0d:2e:d5:11:9d:c4:1e:42:9b:9a:b9:ab:26:3b:c2:
f0:d6:41:32:bd:84:b0:cf:84:6c:a0:bf:05:48:2b:4b:0b:5e:
5a:31:20:bd:6b:9b:71:9e:b9:61:ca:fc:69:fe:6f:23:e3:73:
63:50:ff:bb:20:a7:0d:ac:88:a1:01:7f:21:a1:9b:9a:ce:71:
bb:51:f9:56:0e:fd:c1:46:df:d7:57:00:a0:0f:c1:14:8b:e5:
9d:7b:0c:93:f2:3c:4c:80:d3:31:82:a3:d1:57:85:27:0c:b9:
35:64:14:b6:05:6a:3d:4c:11:aa:59:3a:c6:4f:f8:ba:f2:26:
df:94:6f:f1:09:95:14:96:85:dd:b1:c7:09:68:b1:4e:25:9a:
32:f9:c3:e4:2d:d6:d4:7a:49:b6:a1:40:ea:12:13:2e:c9:e5:
40:78:d2:ae:d0:86:1e:7b:65:de:0f:be:8f:be:bd:56:e6:a4:
37:c7:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:39 2025 by rpki-client