Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e20323030333835.roa
File: 3138382e3136342e3135322e302f32342d3234203d3e20323030333835.roa (raw, json)
Hash identifier: UpZvDSqkZCl7Wp4qip3+YzzfBzNEy7XX1jxmhrO4xbY=
Subject key identifier: FF:E8:6C:73:20:4E:61:B6:E3:F5:BA:E9:0E:51:6A:35:CC:85:6F:C5
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 060F425FB706B5AE4884E518370B893773D1F191
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e20323030333835.roa
Signing time: Wed 24 May 2023 12:04:36 +0000
ROA not before: Wed 24 May 2023 11:59:36 +0000
ROA not after: Wed 22 May 2024 12:04:36 +0000
asID: 200385
IP address blocks: 188.164.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:0f:42:5f:b7:06:b5:ae:48:84:e5:18:37:0b:89:37:73:d1:f1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: May 24 11:59:36 2023 GMT
Not After : May 22 12:04:36 2024 GMT
Subject: CN=FFE86C73204E61B6E3F5BAE90E516A35CC856FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a0:73:5a:bf:dd:be:48:82:c6:76:e4:c6:af:
a9:c7:af:cd:0b:67:91:7c:d7:ea:0d:01:86:0e:45:
3c:df:83:d1:de:76:b3:b4:a3:34:93:c2:f1:65:49:
f1:02:07:78:4b:60:9e:1c:d1:9a:54:4a:4b:9b:d1:
09:54:f5:91:e8:8a:73:2d:37:4b:ee:0d:50:75:28:
87:f2:94:82:48:96:c4:29:35:a8:6b:04:d0:50:0a:
39:63:9d:e0:87:03:59:c4:e4:d1:c8:6b:8f:e3:c7:
ff:00:e8:60:c7:0e:6a:8e:df:68:fd:47:f9:f2:03:
89:6d:19:9e:23:94:ed:e2:fe:60:81:88:cb:b0:dc:
63:c6:63:f0:05:9d:fc:f2:73:e4:c8:76:21:41:0a:
cf:28:e8:93:29:60:00:1e:2c:cf:24:6c:b3:ed:c8:
2b:33:10:72:3a:a7:94:fa:ed:10:bd:2b:d5:4b:11:
48:49:f9:dd:76:3e:ef:df:55:bc:8f:5d:68:37:2e:
1f:c9:10:a2:5f:37:d6:24:6f:e4:4b:13:50:e7:85:
2b:50:5a:2e:17:33:ea:ba:5a:28:cf:aa:85:dc:04:
0e:7f:c5:96:dd:0f:6b:a6:44:25:7a:86:6b:45:06:
93:7f:2b:bd:59:7b:0e:de:e8:34:a0:c3:9e:40:0f:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:6C:73:20:4E:61:B6:E3:F5:BA:E9:0E:51:6A:35:CC:85:6F:C5
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e20323030333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.152.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:0e:c1:a4:86:7c:07:84:8c:69:74:47:92:b9:8a:4f:de:9b:
6a:00:d3:70:71:05:e6:65:fe:9a:7a:12:b3:b0:19:64:7e:09:
d0:a1:09:e5:e2:8d:2d:58:49:81:3a:99:2a:3b:01:6c:95:34:
d5:0f:21:1d:3f:31:84:83:3f:f2:7f:a4:ed:d7:ed:0e:2b:0f:
fe:88:fd:ec:eb:27:a9:c7:d1:21:a1:b3:17:7e:81:ad:8d:9a:
55:f0:23:5d:b3:2a:f0:f8:5f:b1:77:d0:13:9f:b5:2c:17:a9:
71:3d:e6:cb:66:29:86:ff:38:2b:21:46:6f:f6:22:d4:f4:f7:
94:49:69:db:05:14:44:1e:26:41:04:df:f6:ba:fa:99:2c:b5:
ed:28:ed:78:91:d5:57:5e:d0:b2:df:e2:2c:ff:bd:7a:45:3a:
99:24:3e:2f:66:8a:b6:b7:39:cf:99:e3:9f:15:e1:12:b7:59:
23:b4:6f:2e:bf:92:14:c8:d6:3f:b2:18:2f:26:8f:48:7b:99:
f0:ed:9b:da:41:a4:fb:47:c3:c5:2e:f2:b5:2c:10:fb:21:0b:
cf:38:da:c6:13:7b:e5:28:ae:4f:97:7c:18:c9:8c:1d:c7:f7:
0f:18:87:ac:04:b6:0c:27:8d:32:89:51:dc:f4:c4:2a:a1:18:
d6:5f:90:4b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUBg9CX7cGta5IhOUYNwuJN3PR8ZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI5YmE5YWRkZTk2MzU3NzdiZjU4NmZkNDkzZTE0Y2Qz
MGY3YzRjYTAeFw0yMzA1MjQxMTU5MzZaFw0yNDA1MjIxMjA0MzZaMDMxMTAvBgNV
BAMTKEZGRTg2QzczMjA0RTYxQjZFM0Y1QkFFOTBFNTE2QTM1Q0M4NTZGQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4oHNav92+SILGduTGr6nHr80L
Z5F81+oNAYYORTzfg9HedrO0ozSTwvFlSfECB3hLYJ4c0ZpUSkub0QlU9ZHoinMt
N0vuDVB1KIfylIJIlsQpNahrBNBQCjljneCHA1nE5NHIa4/jx/8A6GDHDmqO32j9
R/nyA4ltGZ4jlO3i/mCBiMuw3GPGY/AFnfzyc+TIdiFBCs8o6JMpYAAeLM8kbLPt
yCszEHI6p5T67RC9K9VLEUhJ+d12Pu/fVbyPXWg3Lh/JEKJfN9Ykb+RLE1DnhStQ
Wi4XM+q6WijPqoXcBA5/xZbdD2umRCV6hmtFBpN/K71Zew7e6DSgw55AD0qzAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU/+hscyBOYbbj9brpDlFqNcyFb8UwHwYDVR0j
BBgwFoAUi5uprd6WNXd79Yb9ST4UzTD3xMowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAtZjZlMC00MTBjLWJjOTktYWYwOTIxZDFj
M2E0LzAvOEI5QkE5QURERTk2MzU3NzdCRjU4NkZENDkzRTE0Q0QzMEY3QzRDQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2k1dXByZDZXTlhkNzlZYjlTVDRVelRE
M3hNby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmMwMzA4OTAt
ZjZlMC00MTBjLWJjOTktYWYwOTIxZDFjM2E0LzAvMzEzODM4MmUzMTM2MzQyZTMx
MzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMDMzMzgzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALykmDANBgkqhkiG9w0BAQsFAAOCAQEAPw7BpIZ8B4SMaXRHkrmKT96bagDT
cHEF5mX+mnoSs7AZZH4J0KEJ5eKNLVhJgTqZKjsBbJU01Q8hHT8xhIM/8n+k7dft
DisP/oj97OsnqcfRIaGzF36BrY2aVfAjXbMq8PhfsXfQE5+1LBepcT3my2Yphv84
KyFGb/Yi1PT3lElp2wUURB4mQQTf9rr6mSy17SjteJHVV17Qst/iLP+9ekU6mSQ+
L2aKtrc5z5njnxXhErdZI7RvLr+SFMjWP7IYLyaPSHuZ8O2b2kGk+0fDxS7ytSwQ
+yELzzjaxhN75SiuT5d8GMmMHcf3DxiHrAS2DCeNMolR3PTEKqEY1l+QSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org