Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200482.roa
File: AS200482.roa (raw, json)
Hash identifier: G8xHkylm/crc5uZLTPeNIZt4bRImynWDcYQLxrXMMuQ=
Subject key identifier: 7D:F7:95:56:D7:2F:EB:98:C2:34:EA:5F:0D:DA:A9:22:5D:80:C0:73
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1159A6817367300DCC7FE09077641C471D03638D
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200482.roa
Signing time: Wed 14 Jun 2023 15:00:05 +0000
ROA not before: Wed 14 Jun 2023 14:55:05 +0000
ROA not after: Wed 12 Jun 2024 15:00:05 +0000
asID: 200482
IP address blocks: 45.153.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:59:a6:81:73:67:30:0d:cc:7f:e0:90:77:64:1c:47:1d:03:63:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jun 14 14:55:05 2023 GMT
Not After : Jun 12 15:00:05 2024 GMT
Subject: CN=7DF79556D72FEB98C234EA5F0DDAA9225D80C073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:79:07:bf:cc:1d:e7:2c:13:14:7e:bb:d8:
22:80:dc:d4:1e:97:bd:3d:43:48:60:8f:83:9c:92:
b3:17:41:56:c9:d7:ec:67:15:aa:7e:20:73:16:93:
bc:b3:06:ea:e4:3e:48:06:d8:16:0e:65:2c:d7:50:
6c:0e:a5:ae:7d:d6:27:19:dc:2c:79:ef:db:1b:21:
00:de:28:d2:68:a8:b5:fb:17:58:54:f3:e0:6d:4a:
d0:f2:72:9d:c1:e1:ca:82:a8:fd:7e:70:6d:d7:9f:
cf:a0:9f:fa:19:6b:f3:57:ef:db:55:4a:d6:e2:8b:
fc:12:4b:f1:ca:03:c2:6b:d3:4a:12:b7:50:a4:44:
fb:2a:f5:20:7e:c3:f2:fd:f9:f5:ea:4f:be:cc:ed:
9e:6c:30:fa:78:e1:b0:cd:74:38:79:33:52:cc:6c:
40:26:96:6c:f1:08:2b:76:43:b3:70:6a:3d:6e:b2:
7b:1b:35:b0:0c:ec:29:2c:72:5b:a2:4e:e9:19:3a:
09:e2:a1:d9:a3:5e:a5:12:e1:b7:3a:48:ad:9c:ea:
d2:1c:5f:68:ba:cf:e1:7e:fa:89:48:bd:1a:12:17:
4a:22:e0:98:65:81:a4:ea:b9:0e:f4:fd:f3:fe:81:
eb:b8:c2:46:f2:8b:f2:b3:ec:96:05:97:05:04:b0:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F7:95:56:D7:2F:EB:98:C2:34:EA:5F:0D:DA:A9:22:5D:80:C0:73
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS200482.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.4.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:63:50:7c:d3:c0:fa:43:9e:67:a6:4a:b4:82:f7:2a:39:ee:
2a:88:ac:1d:bc:7d:20:a5:da:b6:e6:6a:ec:ed:0a:5b:ea:a4:
13:26:2a:b1:95:70:fc:1f:c3:fd:0e:ba:85:e2:c7:2d:36:fb:
56:ec:53:80:79:94:26:96:28:2b:23:45:c9:51:2e:9a:8d:ae:
6f:f2:04:02:47:46:e9:33:ab:c6:88:59:29:37:3a:8d:75:0c:
61:6a:d8:4e:2c:69:9c:20:ae:88:cd:61:a4:98:61:e8:53:22:
e1:3c:d6:db:6c:20:2b:72:44:c5:fa:d3:42:3e:36:66:cb:5f:
9a:e5:45:fd:32:60:2a:01:b7:4b:74:30:2e:44:08:bc:ef:70:
a3:cf:ba:12:33:84:ff:7f:07:a3:d4:ef:83:67:b3:5c:d4:aa:
13:03:52:ed:2a:78:c3:ac:f7:5e:7f:01:18:e5:58:50:82:d1:
3e:b5:f0:05:53:a6:67:22:2e:f7:52:99:48:53:cb:f3:18:46:
2a:e2:46:21:54:28:08:86:ed:09:2f:46:3d:23:e3:dc:37:57:
e8:dd:65:99:c5:61:a9:66:90:6d:c4:30:93:01:64:a0:b9:83:
4c:fe:e0:5f:78:8e:49:7e:4f:83:51:30:ca:3b:23:3f:de:14:
3d:42:b0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:57 2025 by rpki-client