Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20323037373837.roa
File: 38352e3233372e3231312e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier: ct+qeTgLbc7gvzR2D40xJgVWTPi5cticQ6Y0Fn52x60=
Subject key identifier: FB:BC:50:8F:F8:14:75:2B:AD:25:55:95:FD:BB:0D:8A:99:5E:DF:04
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 4586C2EE2B2E984679E6E63E7475B6C8040E9ED1
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20323037373837.roa
Signing time: Wed 08 Nov 2023 09:23:29 +0000
ROA not before: Wed 08 Nov 2023 09:18:29 +0000
ROA not after: Wed 06 Nov 2024 09:23:29 +0000
asID: 207787
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:86:c2:ee:2b:2e:98:46:79:e6:e6:3e:74:75:b6:c8:04:0e:9e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:18:29 2023 GMT
Not After : Nov 6 09:23:29 2024 GMT
Subject: CN=FBBC508FF814752BAD255595FDBB0D8A995EDF04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:27:21:08:b4:03:3a:0e:ce:f5:79:fc:f1:32:
aa:ae:92:27:fb:2c:c5:ac:7e:42:44:d6:90:90:e5:
3f:0c:2a:1d:7d:6f:52:e5:dc:f2:7f:f2:07:21:6d:
14:ce:a0:af:6f:96:60:91:63:c6:8d:db:39:04:2a:
ca:e6:5f:19:58:97:b2:04:dc:27:5b:98:27:d8:98:
6a:9f:a7:c0:cf:96:0f:ac:eb:6a:bd:0d:be:db:7b:
dd:b0:26:2b:34:04:54:93:6f:f3:bd:33:c5:db:e0:
1d:1f:db:b2:24:43:d0:69:81:ea:14:22:26:b2:47:
0e:6c:df:41:3f:dc:32:32:16:44:78:05:a7:74:75:
7b:d1:8a:d7:e5:9a:90:1d:31:e4:f3:83:94:40:5f:
97:08:c7:31:00:a8:92:83:3d:cb:42:23:f7:89:f6:
7a:2c:c0:46:35:32:06:b1:69:6d:45:fc:da:5d:61:
78:b5:20:c0:30:57:2a:3b:84:8a:00:1d:ad:86:2b:
25:b9:77:2d:6f:1e:60:85:d7:61:e6:bc:29:77:00:
7a:96:37:1f:3c:54:23:cd:ee:5b:eb:b7:19:28:f0:
ce:8c:9a:8e:f1:b7:f8:0a:d1:a9:b0:97:68:09:04:
f7:98:ab:d3:6f:61:18:63:c2:e9:b2:53:fe:f8:07:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:50:8F:F8:14:75:2B:AD:25:55:95:FD:BB:0D:8A:99:5E:DF:04
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e20323037373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1e:00:76:b1:68:51:d7:ff:14:c9:3d:3a:34:33:e1:57:5f:
53:8e:6c:54:c0:96:77:e6:20:16:b1:85:bc:25:0f:ce:06:11:
a9:e5:d7:03:f2:ad:ad:30:42:ca:57:3a:1f:48:b4:6e:6d:31:
2b:d4:d3:16:40:38:af:c2:7e:76:56:a5:b5:3b:2a:34:18:87:
1a:47:9a:d2:b7:2f:66:90:85:6f:99:f1:34:88:f1:73:8f:6a:
dd:e6:d2:23:dd:4c:39:75:1d:fa:02:e6:f3:5b:75:0d:19:25:
dc:89:97:d2:c6:69:6a:86:e1:14:8c:fe:67:25:68:2f:e1:ba:
7e:de:46:ed:b4:04:87:9c:aa:80:f6:5f:1a:2a:d8:57:4c:bc:
94:4f:39:4a:4f:19:33:0a:e6:ca:4d:dc:0f:ee:ff:fc:89:c8:
a9:26:ea:32:79:2f:e2:2e:9b:74:61:2b:1d:b6:c6:63:3e:49:
ea:6c:51:d1:9c:67:cb:cc:3e:f0:63:c0:64:76:2d:67:3f:1b:
d1:42:1b:e8:8d:1a:9e:95:8d:d2:67:10:e6:37:a2:6c:d9:a8:
e4:b2:87:17:0d:77:45:ce:d8:00:55:6e:b5:71:e5:f1:44:06:
48:90:96:2b:8c:4d:9e:fb:55:c2:68:72:6e:e1:a4:17:8e:1f:
47:84:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:00 2025 by rpki-client