Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32352e302f32342d3234203d3e203632353739.roa
File: 3138352e3133392e32352e302f32342d3234203d3e203632353739.roa (raw, json)
Hash identifier: miZ+jRdDj+yfmG14NntFFY1HWjFBxPO+fDhg+w7q9GU=
Subject key identifier: 5B:D6:8C:75:8D:59:F2:18:B3:99:91:EF:2E:12:A3:2D:49:1A:9F:5F
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 11929CFABA0B0A1E550BC811352670082A7DDDB2
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32352e302f32342d3234203d3e203632353739.roa
Signing time: Wed 08 Nov 2023 09:22:32 +0000
ROA not before: Wed 08 Nov 2023 09:17:32 +0000
ROA not after: Wed 06 Nov 2024 09:22:32 +0000
asID: 62579
IP address blocks: 185.139.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:92:9c:fa:ba:0b:0a:1e:55:0b:c8:11:35:26:70:08:2a:7d:dd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:17:32 2023 GMT
Not After : Nov 6 09:22:32 2024 GMT
Subject: CN=5BD68C758D59F218B39991EF2E12A32D491A9F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:e7:05:91:2a:a7:1e:e5:81:12:87:b2:2c:
13:2c:13:95:48:27:59:12:08:06:39:a7:78:4c:7b:
52:c8:73:c9:12:05:64:e5:d2:39:59:92:2b:71:91:
45:0e:74:dd:4c:9d:ff:83:5d:08:ff:02:10:06:40:
be:a4:56:09:1b:52:a9:75:05:ed:0d:1a:f6:b4:e8:
f8:72:69:ec:6a:fb:db:c9:60:2f:da:d8:3d:49:40:
c6:48:ae:6c:93:84:9e:b0:e0:1d:aa:52:2f:4f:b3:
1c:e0:a2:10:7e:41:c1:7c:b7:6c:02:04:96:24:4f:
2f:c1:3a:b8:4f:d9:1d:0a:17:c4:3f:df:6f:e7:df:
fd:16:25:5c:e9:51:dd:f3:65:f2:f9:57:46:00:36:
8d:a8:62:bf:8a:7e:0d:a3:46:d0:a2:97:1f:13:92:
10:22:b1:91:30:f9:39:ad:8c:9d:0d:e2:4b:f4:8a:
b0:10:a8:be:0a:ac:7b:77:55:71:a3:03:bc:5b:b5:
34:92:c0:e1:d2:0a:4b:df:12:55:70:fb:1f:a8:ef:
94:be:d9:01:cb:7f:d8:1c:a7:9d:6c:5b:f9:1b:3e:
e0:50:65:c2:54:95:7b:e8:da:2c:17:33:8e:e6:70:
66:c9:60:d7:77:d8:4d:9b:d4:2b:e7:2c:42:31:c3:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:8C:75:8D:59:F2:18:B3:99:91:EF:2E:12:A3:2D:49:1A:9F:5F
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32352e302f32342d3234203d3e203632353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d3:b8:20:f7:b7:d8:31:f5:b4:71:2d:c9:af:55:c1:81:cf:
2a:f9:51:20:4a:93:1a:28:99:09:97:42:35:23:7d:39:95:a4:
02:54:e2:17:03:a4:a6:1c:82:61:bb:14:b0:0a:93:2b:fa:23:
85:1a:38:be:0a:20:16:2a:33:1b:2e:42:76:38:b8:52:03:98:
34:95:73:7f:47:56:44:7b:90:64:e1:2b:1f:05:2a:1e:ba:bb:
56:56:e9:9c:8d:d5:85:0a:0f:7b:dd:7e:53:98:32:78:74:7f:
3a:f8:ec:c6:09:eb:b5:07:a1:c7:ce:6b:ac:6c:f7:5b:a9:3f:
4e:40:76:35:ab:0f:b0:a1:00:fc:37:43:5f:91:4a:ae:d9:57:
24:26:87:65:4b:57:ba:30:81:c1:54:0d:92:64:bb:f7:18:ab:
11:62:10:59:ac:b7:de:65:53:45:98:92:42:d7:66:6d:16:d7:
b3:31:22:90:fe:96:5a:c9:14:07:ad:e4:b6:57:43:5d:01:de:
e4:f7:b1:f6:01:a4:6a:fe:13:58:7e:26:14:b5:7c:6d:e2:86:
1c:b5:e8:e8:2c:a6:d9:76:22:c0:60:49:7c:5b:26:85:a4:dc:
4a:74:37:15:4a:eb:50:3d:56:6f:57:d7:ec:d9:7d:bc:f7:5d:
bd:3c:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:54 2025 by rpki-client