Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49832.roa
File: AS49832.roa (raw, json)
Hash identifier: k/285H0OCDi+W5nK2ThxWzBjAWBAaXuxajragSzRN/k=
Subject key identifier: 91:79:5F:DA:7A:07:58:21:08:C8:2A:55:6F:56:9B:08:6C:C0:01:14
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 065E6D39A0E00F5F0CE0B93CFAC75C442A27A00D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49832.roa
Signing time: Wed 01 Mar 2023 07:08:11 +0000
ROA not before: Wed 01 Mar 2023 07:03:11 +0000
ROA not after: Wed 28 Feb 2024 07:08:11 +0000
asID: 49832
IP address blocks: 185.135.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5e:6d:39:a0:e0:0f:5f:0c:e0:b9:3c:fa:c7:5c:44:2a:27:a0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 1 07:03:11 2023 GMT
Not After : Feb 28 07:08:11 2024 GMT
Subject: CN=91795FDA7A07582108C82A556F569B086CC00114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:f0:5e:2b:8b:65:d9:a0:b2:ce:a2:53:64:
26:9e:c1:cb:95:13:ee:1e:3f:b0:74:f8:01:45:cf:
b1:e7:6f:90:dc:d9:d0:5b:e2:e8:61:a0:57:76:a1:
39:e6:b9:c3:d6:97:3d:78:29:0a:21:ec:6b:11:2c:
2f:10:87:72:2e:db:c6:4e:63:2c:b5:e8:7f:70:03:
67:b0:60:c5:50:dd:4e:a5:dc:11:00:aa:09:a2:0c:
97:92:54:ee:a6:f2:d5:e8:22:b2:29:d0:71:d7:67:
54:9a:36:ee:9a:66:51:26:89:bc:bf:95:3b:8d:85:
83:e3:c8:2e:63:0e:80:7b:18:a5:4f:be:90:9c:32:
44:f9:e2:67:e3:bc:53:02:07:41:3b:da:e8:8c:41:
b9:be:d3:2e:04:6e:fe:bc:26:c7:e5:be:ac:d9:ba:
f0:31:af:ca:2e:85:78:11:9c:b9:1d:a2:13:7a:ad:
b7:3d:7e:54:00:96:92:86:e9:67:89:4f:a7:93:90:
b3:1e:4b:d6:2c:9e:dd:77:14:f8:63:78:da:aa:11:
7e:08:6a:62:63:cb:43:06:ba:40:80:dd:08:b8:3d:
09:f9:80:e9:43:7c:62:5a:63:c1:f6:f2:92:96:68:
36:b5:68:b3:18:ec:b5:89:23:e1:37:c6:63:d5:62:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:79:5F:DA:7A:07:58:21:08:C8:2A:55:6F:56:9B:08:6C:C0:01:14
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS49832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.156.0/24
Signature Algorithm: sha256WithRSAEncryption
54:93:b1:67:e8:25:fc:1a:ee:59:06:7d:4c:c3:ac:6c:b5:8b:
d7:a4:6f:11:67:4a:d9:34:bb:07:5f:84:6a:0c:1d:af:83:54:
3f:fa:73:42:01:02:6b:fe:f3:59:d7:df:31:a6:d2:18:98:6d:
91:80:63:70:06:d9:d1:5b:ff:46:15:0a:7e:21:77:da:49:3d:
c7:dd:55:f0:f3:f7:d0:cd:99:39:34:f7:c3:c4:2d:10:65:48:
a8:cd:85:7d:6c:cd:52:b9:58:71:25:e3:a3:3b:ad:cf:87:d3:
5b:4d:1d:24:1f:d2:fe:2e:4c:9e:7b:10:7c:2e:a4:88:53:7c:
50:e1:ae:84:f7:c9:1a:e5:96:30:84:a6:84:42:d0:fc:cb:97:
95:f6:ce:b5:b2:63:d6:01:df:aa:3d:1c:ca:2b:a5:93:a9:2d:
0d:a3:ea:d2:53:bb:83:b6:e1:9b:e0:36:38:7e:87:89:92:f6:
49:cc:98:06:a3:5e:fd:39:14:98:cd:98:13:7b:b3:fd:83:db:
c4:68:c3:ff:64:6a:35:ff:56:24:b1:b0:cb:7a:93:e8:c5:10:
b1:b3:f3:29:c5:f9:57:0f:a5:57:0e:f6:1d:d9:64:20:64:60:
4e:bc:49:f1:7f:66:8e:3e:72:05:f9:3a:78:e1:46:8c:8c:cd:
4e:f4:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org