Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32372e302f32342d3234203d3e20333937363330.roa
File: 3138352e3133392e32372e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier: vI+anwmX1BLeic5xHPT+37Rkk0jjpbHyayR9x0onslI=
Subject key identifier: A0:FE:85:A4:10:E1:37:7D:3F:D9:69:1F:4E:4C:4A:F8:7F:28:BD:11
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 177570EFC03AC6490D746D10BD44A216DFE5E3C1
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32372e302f32342d3234203d3e20333937363330.roa
Signing time: Wed 08 Nov 2023 09:24:17 +0000
ROA not before: Wed 08 Nov 2023 09:19:17 +0000
ROA not after: Wed 06 Nov 2024 09:24:17 +0000
asID: 397630
IP address blocks: 185.139.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:75:70:ef:c0:3a:c6:49:0d:74:6d:10:bd:44:a2:16:df:e5:e3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:19:17 2023 GMT
Not After : Nov 6 09:24:17 2024 GMT
Subject: CN=A0FE85A410E1377D3FD9691F4E4C4AF87F28BD11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:f1:cd:3e:32:33:5d:de:a8:5c:51:93:48:
3c:02:9f:3c:11:08:91:fc:5f:b6:a2:20:b2:ea:4d:
9d:3b:a9:91:93:d2:6b:a6:bd:34:dd:f1:c5:15:bb:
cf:99:6d:8e:f1:22:35:48:73:98:fc:54:ad:ad:4d:
59:f3:29:83:1a:63:a9:63:fc:a4:ca:5f:8d:21:47:
c7:4a:39:1c:76:bb:a1:51:f6:cc:b7:1c:19:4e:3a:
5c:a3:93:46:d7:67:99:6e:c0:9b:e2:e4:7e:e1:13:
91:71:11:8e:3b:5e:17:b3:cd:2c:b6:f8:39:4c:c8:
ef:8d:aa:c9:94:23:f4:b6:a9:b4:5e:03:ac:5a:ad:
12:4e:65:ff:9c:b7:16:83:85:ac:ec:b3:75:85:f7:
cc:69:69:43:3a:3a:6b:1c:86:97:c3:6f:9a:52:71:
e8:a1:a1:57:1b:d5:df:f9:15:fe:65:a5:cc:06:dd:
e9:a7:98:49:f9:d2:74:ab:fe:60:bc:2b:a0:9a:82:
f6:3d:ae:b6:61:2c:1c:6d:8e:1b:2b:7f:68:33:dc:
fe:e5:dc:b3:a1:01:bb:52:27:84:74:d4:3a:fc:c4:
33:56:6e:0b:a3:a8:1b:21:b6:9c:61:b4:9d:d1:d6:
40:0b:1d:09:d9:59:93:bf:03:29:b0:67:7f:46:67:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:85:A4:10:E1:37:7D:3F:D9:69:1F:4E:4C:4A:F8:7F:28:BD:11
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3133392e32372e302f32342d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.27.0/24
Signature Algorithm: sha256WithRSAEncryption
92:01:1c:47:2f:93:e3:dd:de:bc:60:de:aa:7e:48:cd:cc:41:
60:ea:cf:ac:47:2b:05:c3:47:5f:b9:85:18:05:9e:09:b7:79:
7e:04:33:69:2e:31:22:a4:e0:22:90:a6:3b:49:ac:b6:c7:12:
6e:17:31:9c:66:61:71:82:c5:b2:88:13:7b:16:74:33:4a:c7:
52:12:40:90:27:fe:95:af:34:4b:12:03:66:7f:2f:4c:ce:61:
1a:65:88:b5:fa:7a:ea:94:eb:c7:3f:9f:ed:82:39:5f:66:9d:
92:e9:d5:b3:d5:1d:05:4c:a4:8a:29:bc:45:69:c0:4d:23:bc:
9b:02:fe:9a:5c:1e:9e:8f:f2:a8:f4:77:57:54:9f:cb:b9:11:
e2:fe:99:1e:f0:b5:04:2e:dc:a3:48:02:02:ab:3e:a7:c5:cd:
06:65:11:ef:ad:7b:eb:ba:73:9c:6e:48:eb:fe:57:a5:ad:a8:
d6:6a:9c:6c:44:e5:84:12:8e:50:59:23:e4:c9:4a:03:c7:86:
23:24:65:ff:4a:a9:c8:99:43:81:2d:bf:af:9e:10:ba:ec:0a:
f6:ab:cc:ed:74:5a:25:aa:29:e4:ed:bb:6c:b2:fc:24:c5:a5:
24:f1:59:72:ed:00:12:da:80:df:be:96:bf:64:10:fb:2c:79:
70:3a:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:38:29 2025 by rpki-client