Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3232203d3e20383334.roa
File: 37392e39392e32342e302f32322d3232203d3e20383334.roa (raw, json)
Hash identifier: 7q1MyMLa2NsL0HbCLSgYkOaI9l8DQx94h25htd75wF4=
Subject key identifier: A9:87:22:55:73:37:C3:66:17:27:59:F6:E6:74:28:FC:D1:EC:E4:89
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 39A44A5DFCCB20BE7229E95F2F001A50295B7AC8
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3232203d3e20383334.roa
Signing time: Tue 28 Mar 2023 09:49:11 +0000
ROA not before: Tue 28 Mar 2023 09:44:11 +0000
ROA not after: Tue 26 Mar 2024 09:49:11 +0000
asID: 834
IP address blocks: 79.99.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a4:4a:5d:fc:cb:20:be:72:29:e9:5f:2f:00:1a:50:29:5b:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Mar 28 09:44:11 2023 GMT
Not After : Mar 26 09:49:11 2024 GMT
Subject: CN=A98722557337C366172759F6E67428FCD1ECE489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:cc:54:87:a4:5f:5d:cd:5c:95:0a:13:da:
d1:82:fc:61:76:1f:40:bf:f8:f8:96:01:fe:be:45:
60:00:c2:e8:d4:73:6d:34:71:2c:de:f1:28:ce:a4:
8d:1f:9c:ec:c7:63:27:8b:e5:fe:db:31:fb:c1:39:
81:99:a6:51:f2:58:9f:c9:05:ad:49:c8:01:6d:35:
7a:71:84:ce:56:03:c3:b1:e5:ac:e6:c2:71:e8:e6:
92:6c:81:14:9b:7d:fd:c0:41:68:3b:25:19:67:b4:
18:4f:a8:8f:99:84:6b:71:a8:27:00:60:e9:ff:0e:
cf:45:3c:cb:66:69:df:7e:d3:b8:7b:76:e0:e8:c6:
b0:e8:b4:59:41:d5:6d:e7:8e:06:b3:77:d3:a9:38:
df:ab:c6:52:2a:1d:00:99:d1:9e:b7:fb:51:f0:a2:
1f:e1:f4:c2:20:e6:d9:09:81:ed:d6:a0:9e:ce:81:
c6:85:b0:9e:d6:41:90:2a:40:30:3b:4c:0e:5e:70:
69:6d:6d:1c:fb:e8:05:6a:e0:f0:42:e1:db:b6:e6:
ea:0f:a4:53:bd:05:4c:82:88:45:eb:da:8f:aa:a9:
20:58:49:60:a4:35:72:e9:69:b6:73:30:f9:79:e3:
88:48:ea:be:8e:06:9f:23:39:da:81:f7:44:4d:e0:
40:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:87:22:55:73:37:C3:66:17:27:59:F6:E6:74:28:FC:D1:EC:E4:89
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3232203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.24.0/22
Signature Algorithm: sha256WithRSAEncryption
76:07:db:fc:13:64:df:5b:61:e1:30:8f:fd:fb:57:bf:72:ff:
24:8a:cc:7d:7f:e4:df:c9:93:7d:b5:e3:49:38:43:da:f7:a3:
7a:1c:40:27:c8:fd:7c:58:e0:31:eb:85:96:96:fb:bb:a5:5e:
71:f3:a2:07:6e:a9:47:be:0a:ad:30:d9:3b:82:c9:79:44:43:
bd:5b:c3:e1:16:da:92:31:52:1e:4a:72:f1:5b:93:8e:2b:a1:
b0:25:5d:c9:2c:c2:81:68:83:1c:76:78:55:56:97:55:37:1a:
30:44:98:a1:f5:79:b8:12:c1:36:67:77:19:35:9b:0e:61:f8:
f8:3d:1e:02:36:8f:fa:f5:4c:a7:20:a3:6a:84:41:59:00:d8:
7f:ee:98:be:ed:96:da:ca:5a:ae:c6:fc:35:f7:5b:03:89:20:
d5:ff:df:d1:3f:8b:6d:ae:91:9d:ba:d7:b1:a5:bd:8f:34:71:
07:b2:25:46:0c:ce:6c:1e:7b:1a:ec:78:bc:03:90:f7:60:4e:
2b:10:e6:d2:b8:77:4d:7a:86:ec:f3:40:2b:bf:a1:1b:86:0e:
96:5c:18:22:b3:79:bc:b2:02:77:34:40:75:9a:03:ba:63:e8:
39:17:1e:29:bc:92:6a:dd:ac:d4:58:3a:fe:eb:a7:ca:cb:40:
5f:2a:0b:8f
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUOaRKXfzLIL5yKelfLwAaUClbesgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDdiZTlkMzUyMDc1MGVmMjgwZTczNGY0MTM0NmQwNTFj
OGIyZjUyNDAeFw0yMzAzMjgwOTQ0MTFaFw0yNDAzMjYwOTQ5MTFaMDMxMTAvBgNV
BAMTKEE5ODcyMjU1NzMzN0MzNjYxNzI3NTlGNkU2NzQyOEZDRDFFQ0U0ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNsxUh6RfXc1clQoT2tGC/GF2
H0C/+PiWAf6+RWAAwujUc200cSze8SjOpI0fnOzHYyeL5f7bMfvBOYGZplHyWJ/J
Ba1JyAFtNXpxhM5WA8Ox5azmwnHo5pJsgRSbff3AQWg7JRlntBhPqI+ZhGtxqCcA
YOn/Ds9FPMtmad9+07h7duDoxrDotFlB1W3njgazd9OpON+rxlIqHQCZ0Z63+1Hw
oh/h9MIg5tkJge3WoJ7OgcaFsJ7WQZAqQDA7TA5ecGltbRz76AVq4PBC4du25uoP
pFO9BUyCiEXr2o+qqSBYSWCkNXLpabZzMPl544hI6r6OBp8jOdqB90RN4EB5AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUqYciVXM3w2YXJ1n25nQo/NHs5IkwHwYDVR0j
BBgwFoAU176dNSB1DvKA5zT0E0bQUciy9SQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTZhZTIxODItMjg4ZC00ZmZiLThhZjktOGMyYmNhYzE5
NzlhLzAvRDdCRTlEMzUyMDc1MEVGMjgwRTczNEY0MTM0NkQwNTFDOEIyRjUyNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3NmROU0IxRHZLQTV6VDBFMGJRVWNp
eTlTUS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTZhZTIxODIt
Mjg4ZC00ZmZiLThhZjktOGMyYmNhYzE5NzlhLzAvMzczOTJlMzkzOTJlMzIzNDJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk9jGDANBgkq
hkiG9w0BAQsFAAOCAQEAdgfb/BNk31th4TCP/ftXv3L/JIrMfX/k38mTfbXjSThD
2vejehxAJ8j9fFjgMeuFlpb7u6VecfOiB26pR74KrTDZO4LJeURDvVvD4RbakjFS
Hkpy8VuTjiuhsCVdySzCgWiDHHZ4VVaXVTcaMESYofV5uBLBNmd3GTWbDmH4+D0e
AjaP+vVMpyCjaoRBWQDYf+6Yvu2W2sparsb8NfdbA4kg1f/f0T+Lba6RnbrXsaW9
jzRxB7IlRgzObB57Gux4vAOQ92BOKxDm0rh3TXqG7PNAK7+hG4YOllwYIrN5vLIC
dzRAdZoDumPoORceKbySat2s1Fg6/uunystAXyoLjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org