Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3232203d3e2033333230.roa
File: 37392e39392e32382e302f32322d3232203d3e2033333230.roa (raw, json)
Hash identifier: zxq51sTVBfK3i4u3RAlEj1nrpEiSmk6/12ZRWEpyPx4=
Subject key identifier: 92:5F:B6:AA:D5:0D:18:08:D7:75:F4:8E:92:DE:65:34:8B:87:7E:AF
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 50682115817CE61FD5F5DC48E92AC86AE8956C67
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3232203d3e2033333230.roa
Signing time: Tue 28 Mar 2023 09:49:21 +0000
ROA not before: Tue 28 Mar 2023 09:44:21 +0000
ROA not after: Tue 26 Mar 2024 09:49:21 +0000
asID: 3320
IP address blocks: 79.99.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:68:21:15:81:7c:e6:1f:d5:f5:dc:48:e9:2a:c8:6a:e8:95:6c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Mar 28 09:44:21 2023 GMT
Not After : Mar 26 09:49:21 2024 GMT
Subject: CN=925FB6AAD50D1808D775F48E92DE65348B877EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:1b:40:e5:42:13:4c:a1:50:f8:ee:bc:a6:
ee:d7:a5:6d:86:29:d4:a6:e7:ff:e0:e9:0d:b3:b7:
c1:29:93:e2:6b:f2:62:ad:7a:88:73:ad:cd:b0:57:
66:39:72:69:6f:55:56:16:41:99:8b:6c:e5:37:84:
e3:1a:3d:b8:20:09:d5:10:80:34:d3:cd:6e:f5:00:
0f:22:dc:c8:c8:f7:2a:39:d2:56:32:46:52:b4:41:
7e:c1:f9:e2:33:d7:94:83:c2:8a:a7:2c:4c:4f:7a:
41:cc:25:7f:ec:20:22:22:76:88:49:07:0b:82:ca:
e5:9d:8c:c1:7b:28:22:f7:c6:3f:5e:67:2a:b1:cc:
e5:99:05:ab:ab:fd:c2:61:ef:ac:d5:f1:31:0c:ac:
a2:be:19:d7:9e:b4:45:39:5e:01:bc:95:4b:2d:d3:
2a:aa:9e:12:1d:ae:59:96:2b:d1:49:dc:5a:c5:12:
d5:a0:73:a8:f0:e4:9c:f1:00:6c:3f:b6:4f:bf:d2:
a5:c4:1f:c9:b5:87:dd:53:6d:f3:06:96:78:23:4e:
0d:d2:2b:87:a9:6f:9f:db:a7:c5:39:c8:7f:df:a5:
f1:35:f2:32:2f:16:e5:f4:65:71:fa:d9:16:7b:af:
a6:c1:56:af:04:ac:96:5c:32:7c:50:bb:92:d8:48:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5F:B6:AA:D5:0D:18:08:D7:75:F4:8E:92:DE:65:34:8B:87:7E:AF
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3232203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:39:4a:a4:93:e5:46:9d:67:88:91:33:14:59:20:bb:87:cd:
77:65:1f:9e:86:89:f3:bc:a6:14:26:b1:57:f0:9e:2d:f5:42:
fe:ee:37:d5:60:92:a5:00:b8:95:ff:37:73:07:e5:11:5c:6b:
46:3f:26:e4:40:9d:9e:3a:6f:ef:3d:47:29:61:d9:c8:b4:42:
69:7a:a8:9a:94:59:8b:cf:7e:0d:0d:6e:e8:5e:68:ea:1e:88:
d4:90:31:21:00:5a:38:b1:5c:93:f0:8d:5a:9c:09:ed:10:1a:
2d:51:88:06:c3:67:04:b5:24:9e:9a:ce:00:fd:32:c9:ab:9e:
6d:83:10:72:f2:86:0c:f0:a1:5e:ce:a2:45:8c:3f:16:ce:1c:
aa:dd:ee:3d:a0:62:c4:cc:c9:21:ce:b4:61:7a:1b:6f:aa:6a:
e9:3d:02:24:64:ef:4f:6e:90:54:4d:00:b6:b0:ea:3d:14:89:
15:35:6a:11:73:10:77:08:66:aa:f5:7b:6b:f8:d4:27:6f:43:
09:f6:70:00:e7:95:c3:f8:99:46:d9:d7:14:c4:18:a5:f6:35:
17:44:3f:37:e7:4c:46:9e:26:5c:d3:89:fa:62:51:6d:b9:8e:
bc:fd:38:78:97:66:4d:60:b8:c2:58:88:fc:8d:49:d0:63:26:
c7:3b:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org