Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207279.roa
File: AS207279.roa (raw, json)
Hash identifier: BUBiXuFUKKPqI8N8Ggb/51X4nygyhA7mXL5yIn4g4OQ=
Subject key identifier: 8C:3C:AD:88:55:88:B1:F3:27:29:57:14:5F:A0:88:15:E8:1D:08:B1
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 59065917947A046587C17BAC414AE58DE37A3276
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207279.roa
Signing time: Wed 22 Mar 2023 19:31:27 +0000
ROA not before: Wed 22 Mar 2023 19:26:27 +0000
ROA not after: Wed 20 Mar 2024 19:31:27 +0000
asID: 207279
IP address blocks: 45.149.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:06:59:17:94:7a:04:65:87:c1:7b:ac:41:4a:e5:8d:e3:7a:32:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 22 19:26:27 2023 GMT
Not After : Mar 20 19:31:27 2024 GMT
Subject: CN=8C3CAD885588B1F3272957145FA08815E81D08B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:f5:a5:fd:7a:8b:86:c9:e9:72:3a:14:aa:
a6:50:aa:89:6c:7f:2e:b1:f4:9a:75:cf:1e:01:d8:
f4:ff:85:51:c1:00:f5:e3:b0:74:0c:72:c0:16:a2:
90:c3:24:bf:e8:71:fd:00:17:6d:e4:ba:5a:87:f3:
69:80:01:bb:18:8a:c2:86:a0:07:4d:4c:ab:21:19:
74:05:09:89:ca:4c:15:f5:32:4b:f9:93:e2:cf:87:
19:04:11:46:4b:6c:ea:c3:b3:b5:e1:07:35:3e:00:
9b:10:58:c9:40:34:79:58:ea:9a:12:92:66:e5:d6:
7b:8e:ba:22:d4:85:5c:67:10:ab:8b:f8:f0:7e:61:
ec:e4:58:0e:ff:d2:70:af:b2:e5:3c:8c:e9:4d:1a:
97:73:88:35:63:a1:aa:71:89:08:c0:50:a3:1f:0f:
9b:9f:be:f1:bc:c3:c3:d5:eb:a4:26:cd:1d:3e:60:
b2:16:3f:10:26:64:65:95:55:5b:c2:12:2b:0c:81:
95:6b:70:b3:21:42:1d:50:d2:6a:7d:ae:c1:fd:79:
73:75:ad:b9:37:10:8e:4e:68:c4:ef:d8:54:a7:9e:
19:53:3f:ae:06:f7:7b:b6:4c:33:fb:fc:4b:fe:44:
ef:b5:fb:2f:5c:30:7d:00:ed:c1:c4:4e:36:7d:b8:
d2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3C:AD:88:55:88:B1:F3:27:29:57:14:5F:A0:88:15:E8:1D:08:B1
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207279.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.102.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e2:cd:4d:64:39:74:32:41:c8:b0:2a:13:56:8a:6d:1b:b1:
d8:8a:8d:d5:74:bc:8e:1f:32:bd:77:7b:91:d6:42:94:52:e0:
0b:1a:f6:23:03:ea:70:3e:bb:62:32:6c:71:42:a8:f4:b1:bd:
b8:b9:4c:dd:90:37:7d:ae:60:af:01:e4:8a:76:74:0b:be:82:
06:29:8e:73:e4:43:1d:fb:09:f2:a0:4b:b1:00:8c:4f:d7:77:
7f:d4:56:a5:0b:7e:ea:7d:b3:27:bd:c4:0e:cc:73:2e:17:80:
f0:a3:4b:47:cc:1e:3b:a1:bc:87:98:72:13:e2:11:b4:b9:31:
c1:03:f7:fc:f6:b0:1a:74:54:b3:e5:d5:67:20:60:37:f1:0c:
54:52:09:cc:e2:af:41:2c:74:3d:4e:e2:f0:3c:1d:7e:c9:9b:
af:0f:80:00:81:7e:67:d4:7c:a5:fd:b6:c0:ef:2f:55:3f:21:
d7:13:df:b7:95:13:22:d2:ab:44:49:a1:88:ff:90:4e:8a:5d:
5f:15:16:c8:b1:42:b1:5a:e8:74:27:62:a9:6c:d8:af:53:39:
13:69:94:44:ed:aa:84:b5:23:08:82:01:84:e0:30:b2:90:90:
f7:cf:b6:7f:60:53:96:0f:eb:05:bd:f9:57:29:ee:ba:9d:62:
15:ae:12:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:36:17 2025 by rpki-client