Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203631333137.roa
File: 3138382e3136342e3135342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: KACyGvG+bn0ag3ilE9Wp/vWAZ4/6dfQtBPFDI0K2PyA=
Subject key identifier: A8:E1:5A:77:85:5D:77:A1:FB:54:3D:2E:E1:CF:F5:44:69:24:02:D9
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 3B864519F4FD0976D2F8833C2BC8354F44A482D4
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203631333137.roa
Signing time: Wed 20 Sep 2023 14:09:42 +0000
ROA not before: Wed 20 Sep 2023 14:04:42 +0000
ROA not after: Wed 18 Sep 2024 14:09:42 +0000
asID: 61317
IP address blocks: 188.164.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:86:45:19:f4:fd:09:76:d2:f8:83:3c:2b:c8:35:4f:44:a4:82:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Sep 20 14:04:42 2023 GMT
Not After : Sep 18 14:09:42 2024 GMT
Subject: CN=A8E15A77855D77A1FB543D2EE1CFF544692402D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:18:13:a4:3f:0b:4d:ce:b8:cb:09:48:71:
2f:40:c3:79:bb:af:99:00:f7:3f:1b:ac:3f:28:16:
d1:47:49:9b:2f:5c:73:1a:48:c5:a6:7a:0b:a2:c0:
26:4e:fa:c3:b8:50:5f:02:e6:cd:c8:70:c0:2c:d1:
3f:9d:ab:5e:b0:a1:fe:6d:d9:14:ad:ef:f8:bf:47:
56:91:4d:73:8c:db:d1:b0:c5:35:c1:7d:d3:cb:6c:
63:5f:0d:35:47:d4:4c:71:b9:2b:3a:4e:85:60:aa:
3a:bb:e1:b8:5c:67:b3:40:05:c8:2e:05:c3:66:20:
13:ac:a5:cd:ba:94:0f:36:2a:a9:eb:39:9f:bb:04:
e6:ce:f8:23:67:cf:68:4f:5a:13:6d:e7:25:14:cc:
7e:c9:6a:47:db:3a:67:f3:18:5a:cc:62:e3:c8:04:
44:d4:39:2b:a2:ce:a5:a2:cb:bf:5b:1c:22:5a:1e:
1e:ce:52:78:b5:a7:8c:d4:f0:33:1c:e5:fe:e5:9d:
51:ab:41:79:0e:33:c1:bb:ae:e4:c4:91:85:ab:ba:
e3:ff:57:dd:43:11:83:19:e6:c7:8a:f1:e4:cb:84:
de:c3:08:05:52:9a:71:10:22:3e:1b:c3:db:a1:5a:
97:ce:3a:85:74:93:16:83:aa:23:9f:ab:30:9e:70:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E1:5A:77:85:5D:77:A1:FB:54:3D:2E:E1:CF:F5:44:69:24:02:D9
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:47:77:89:1e:9f:62:0d:b7:cb:20:28:48:8b:cb:37:32:98:
1b:7b:13:38:e3:74:28:98:34:22:10:b3:8f:e3:eb:bd:1b:95:
8d:01:43:7d:d4:fd:e9:72:7a:e0:ef:06:ef:0a:7c:11:5a:9b:
71:61:d1:0a:c7:3c:8b:6d:02:77:f3:cc:29:20:34:88:5e:62:
63:95:67:7e:4f:b3:c9:73:50:12:d7:20:a9:66:47:16:42:a1:
9d:4f:d6:8d:09:8e:2e:d5:17:f9:2c:51:53:f1:e4:f6:4f:f9:
3e:02:fd:2d:9c:87:af:3e:c2:53:8e:86:6f:23:70:f9:43:c0:
3e:16:fc:d2:4b:4e:e4:a9:77:f5:ca:ce:d0:05:62:d8:68:56:
a7:bf:27:18:75:6b:15:db:95:0c:0a:c4:2a:0d:a1:63:1c:66:
80:30:24:24:00:a1:44:39:d2:d5:f3:d5:04:05:15:0c:dd:4d:
57:71:f9:78:e6:7c:23:cb:38:72:a3:f3:57:88:f9:ee:83:37:
a4:c2:91:2e:99:7a:7c:f2:05:87:df:a1:8e:97:5e:dd:49:9d:
a1:ca:52:87:fe:71:84:e5:2d:4b:d5:f1:35:3b:28:cf:50:b0:
c3:a0:66:e8:53:39:20:56:e0:94:1f:bd:1c:90:13:70:38:33:
8a:3c:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:28 2025 by rpki-client