Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS149448.roa
File: AS149448.roa (raw, json)
Hash identifier: YPD+XTpxeaquW1jIqE2UEEKMM7YuAmsF+SwZeuNB4EQ=
Subject key identifier: 94:D6:C4:51:2C:42:BA:45:AF:02:68:80:61:3D:B8:19:43:8B:D4:AE
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 26F1F39E6337E82EE7E9D403815FA0F3DD089702
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS149448.roa
Signing time: Thu 30 Mar 2023 03:56:49 +0000
ROA not before: Thu 30 Mar 2023 03:51:49 +0000
ROA not after: Thu 28 Mar 2024 03:56:49 +0000
asID: 149448
IP address blocks: 45.158.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f1:f3:9e:63:37:e8:2e:e7:e9:d4:03:81:5f:a0:f3:dd:08:97:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 30 03:51:49 2023 GMT
Not After : Mar 28 03:56:49 2024 GMT
Subject: CN=94D6C4512C42BA45AF026880613DB819438BD4AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:ac:9a:b3:47:d5:fe:42:c3:f4:b4:79:b9:
52:c9:07:83:66:ac:a1:4b:9c:05:57:52:c2:35:5e:
44:72:9e:84:bd:09:f3:ac:5c:51:2f:ea:86:9d:fe:
03:1d:48:65:6e:bb:a6:ab:7b:fb:36:98:14:d6:7a:
b9:a2:43:c5:99:da:1e:bf:9b:bb:2c:3b:78:5d:95:
5b:08:83:d4:97:7e:ef:b2:e1:2e:22:78:3c:34:64:
cd:05:dd:6f:74:80:92:b6:6c:55:ff:b8:b9:a3:cc:
6e:df:d1:e1:d7:70:1d:b6:2a:4a:30:a1:c0:16:f0:
08:d7:56:e1:c1:0e:a9:30:80:d0:1a:4a:9d:46:a0:
f8:c5:23:81:7c:8a:b2:98:ad:a4:6f:7f:86:8a:d6:
fc:32:a6:1f:09:cc:2a:06:30:09:8f:ad:bc:d0:e7:
f7:95:bf:0f:2d:42:c6:de:aa:88:00:a7:5e:63:eb:
26:b0:7c:e5:e3:0a:90:9d:f4:88:48:c8:36:35:f3:
04:dc:2f:65:62:c2:aa:81:dd:aa:12:77:f2:5c:2c:
76:37:6e:74:1e:7e:7b:fc:93:d6:68:ca:3f:c5:5e:
cf:a4:d0:4d:d1:86:0b:77:05:bc:17:fe:bc:3b:34:
44:fa:24:16:1a:12:f2:70:33:97:ef:72:3c:01:55:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D6:C4:51:2C:42:BA:45:AF:02:68:80:61:3D:B8:19:43:8B:D4:AE
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS149448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c2:6f:fe:87:46:46:d5:78:c6:65:b9:7d:56:1d:bc:68:6a:
53:76:c9:01:2e:c4:09:bb:51:00:d6:64:ab:99:34:25:ee:0a:
70:d1:09:9c:4f:c7:b6:b6:46:a7:2a:3a:d3:93:c7:9e:e5:4e:
85:09:c4:0f:86:54:f5:7b:f7:e3:38:ae:d9:50:8b:58:b2:cd:
b4:92:67:e3:18:bd:2e:ce:f6:81:d4:e2:fe:d4:26:04:15:02:
0a:ab:39:d1:77:a0:64:b9:1f:b6:99:f8:73:15:94:f9:96:dc:
48:29:49:e0:3c:4d:ae:f7:ba:58:92:14:6e:13:5d:45:4f:3d:
e4:2e:c7:c1:0d:ef:c4:1d:69:78:93:07:07:55:f6:b8:b5:75:
b4:61:79:b1:3b:7c:0f:13:23:ee:87:ae:e3:da:57:3e:94:57:
4a:6a:49:08:b5:bb:b7:6f:70:9b:4f:a7:35:cc:03:73:19:6a:
cb:6e:0c:99:ef:58:12:b8:5f:39:6f:ef:86:80:93:42:b7:03:
9f:77:e7:ef:e8:fa:6c:83:24:be:7a:b0:e0:83:cd:fc:85:69:
e9:7e:35:fb:c6:78:c4:26:b9:29:cb:40:f4:98:bf:8b:b8:18:
54:76:88:fe:01:7c:a6:5c:f1:14:0e:e5:df:6e:91:8d:b4:35:
42:6d:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:11 2025 by rpki-client