Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203233343730.roa
File: 3138382e3136342e3135342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: aVLLqKBpXFqk1it8Ad4+bksL4GrUxp/DZl1/lf+a2DE=
Subject key identifier: 55:B0:C9:9B:EB:41:A4:89:58:F2:46:F8:38:38:2C:59:03:9F:D4:D8
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 0F220DE974291F13ADFD0E78D2E949F7FAE9B59A
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203233343730.roa
Signing time: Thu 03 Aug 2023 10:31:54 +0000
ROA not before: Thu 03 Aug 2023 10:26:54 +0000
ROA not after: Thu 01 Aug 2024 10:31:54 +0000
asID: 23470
IP address blocks: 188.164.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:22:0d:e9:74:29:1f:13:ad:fd:0e:78:d2:e9:49:f7:fa:e9:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Aug 3 10:26:54 2023 GMT
Not After : Aug 1 10:31:54 2024 GMT
Subject: CN=55B0C99BEB41A48958F246F838382C59039FD4D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:9c:b1:48:08:eb:0c:5c:3d:68:73:23:33:
fd:ec:a7:60:c2:fb:19:ce:b9:f6:22:7f:d5:3e:89:
b3:70:d6:a4:7c:17:4a:4b:16:4b:70:03:b4:4d:b1:
94:81:1d:d2:3d:67:f2:52:a8:cd:37:a7:45:e9:e7:
f9:5a:0f:45:47:e0:4a:d1:d2:31:1d:16:4c:bb:1a:
01:0d:f4:2c:d9:c2:6c:bf:49:30:bc:47:6f:45:8d:
c7:02:fb:a2:12:c1:a1:da:26:dc:16:0a:a0:91:e3:
d7:5c:2e:bf:31:f1:2f:c7:fe:ab:ea:88:e6:d0:78:
0d:fb:dd:f1:97:1d:4c:6f:bc:d0:6a:75:8c:c0:9d:
38:9e:d1:59:8b:de:54:08:c5:24:5e:a8:4b:06:e8:
90:87:b4:55:98:b5:c9:ff:d4:10:c2:bd:ad:6a:96:
a4:76:de:39:c5:07:2b:08:90:e2:4a:51:ba:62:ec:
e8:e0:07:bc:67:5a:75:93:20:c8:b3:5e:98:8f:63:
cc:5f:82:e6:32:fb:2a:bd:89:6b:5e:83:e0:fc:8f:
70:76:e7:51:7e:7d:92:28:8b:29:e0:a7:f7:0c:25:
09:26:14:70:cd:e1:35:e4:32:50:9f:d2:ff:23:7e:
1d:41:8a:a7:55:f2:8a:06:e2:4a:29:66:03:ad:9c:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B0:C9:9B:EB:41:A4:89:58:F2:46:F8:38:38:2C:59:03:9F:D4:D8
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a5:6a:50:45:2a:b9:8b:15:23:e5:5c:87:2f:c8:87:ec:bd:
b0:60:ec:76:73:61:d1:fc:8a:3a:1d:cc:8a:06:25:6b:d3:40:
d8:fc:be:f1:9b:ed:25:51:35:f4:e6:c4:cf:a8:95:74:12:e8:
2c:75:77:2e:94:b4:2e:c7:8c:01:67:41:8a:e7:4d:c3:92:16:
02:ee:4f:6f:ee:af:16:89:91:f1:a2:e9:a2:a8:5c:af:62:47:
ee:a0:da:76:0a:98:c3:2a:7b:4e:2d:74:98:52:f3:a6:38:1b:
e1:3c:a6:d7:87:0e:26:c2:50:f8:d6:12:e6:ac:94:40:3e:ac:
80:24:ea:75:80:5c:fc:1a:57:df:51:2e:7c:de:36:5f:d3:95:
7c:e4:61:b5:fb:cd:cc:62:c6:36:90:3f:6d:3a:1c:85:21:27:
a1:f7:f5:f6:41:50:4f:1e:79:20:e8:2f:81:f0:64:8c:dd:3f:
61:eb:a9:d6:fa:c3:a8:42:1d:d7:37:82:89:39:10:97:ed:1c:
7e:41:20:ee:cb:97:c4:47:56:46:b2:aa:6a:fb:c0:55:d5:ff:
f4:7f:4c:2a:ac:fc:d4:23:69:07:dd:0b:ef:d7:37:39:4e:9c:
08:dd:90:33:d5:4a:fb:1c:7a:88:5e:df:f0:4a:6d:47:b9:a1:
b6:6e:d3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:42 2025 by rpki-client