Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399471.roa
File: AS399471.roa (raw, json)
Hash identifier: MJysbu2b7xXV0uhPMy87/gy0iuApJRrWhUIqvGb2W1o=
Subject key identifier: 1F:C4:BB:80:13:F9:85:E2:53:17:AD:6B:77:CF:40:7B:F8:6B:04:B5
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6CC3267453A5B35B98F6C0C24717DE5F7B677FF2
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399471.roa
Signing time: Thu 02 Nov 2023 06:18:57 +0000
ROA not before: Thu 02 Nov 2023 06:13:57 +0000
ROA not after: Thu 31 Oct 2024 06:18:57 +0000
asID: 399471
IP address blocks: 91.198.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c3:26:74:53:a5:b3:5b:98:f6:c0:c2:47:17:de:5f:7b:67:7f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 2 06:13:57 2023 GMT
Not After : Oct 31 06:18:57 2024 GMT
Subject: CN=1FC4BB8013F985E25317AD6B77CF407BF86B04B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:ec:31:ef:98:e4:94:f3:0c:cc:d1:eb:81:
54:5c:1d:bd:d5:34:78:9e:ab:25:cc:a9:d5:5b:18:
1b:67:03:c2:31:ac:2d:cf:f3:28:58:93:b3:56:b2:
48:89:45:a3:d4:59:bd:40:b6:d5:4d:8e:b5:13:4b:
4c:f5:1b:52:da:a7:6a:d0:1c:58:03:dd:4c:08:d0:
13:19:e5:d0:68:1c:61:ab:b6:8b:f5:22:dd:0f:42:
27:9e:a0:20:20:ea:25:6b:95:80:32:f0:0f:37:9e:
42:c8:e3:7a:d2:f0:60:2b:24:34:3f:52:19:e1:0d:
e5:36:a9:06:6c:2f:c2:ae:d4:57:5b:13:63:f1:62:
05:8a:19:b7:10:3c:b7:9e:92:1e:15:b0:d5:c3:a1:
e2:2a:ae:0d:38:6e:ee:91:0d:eb:86:61:01:ec:71:
48:67:8a:55:1e:3c:7b:bf:25:98:fb:5b:df:bb:da:
86:d1:70:6c:b2:98:5e:1b:a2:6b:66:b9:af:97:83:
97:4f:91:76:cc:47:f4:d0:bf:bd:13:39:af:eb:0f:
c7:d2:c8:b0:b9:7e:09:ce:db:6e:2b:04:c9:52:8b:
57:31:70:ec:aa:5e:66:dd:2b:2a:1e:26:b2:84:d3:
e5:fd:58:82:49:4f:e3:c3:fe:77:6e:25:92:4e:51:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:BB:80:13:F9:85:E2:53:17:AD:6B:77:CF:40:7B:F8:6B:04:B5
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399471.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.123.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:cd:27:d3:01:7e:13:73:a2:38:3c:1d:3b:3e:9b:cc:69:a2:
c5:74:9f:bc:62:0d:d7:87:ed:9a:0e:d1:e2:78:ec:ee:1c:a5:
c3:69:9f:1a:86:1d:80:de:97:0f:72:44:66:6d:28:41:6b:20:
cd:68:c0:3b:cb:5b:34:8e:d4:a0:cc:e7:63:34:c4:da:ac:b6:
7b:e4:7e:83:72:21:99:8e:d3:27:5d:36:2e:96:03:49:52:51:
d1:23:a2:0b:28:8b:81:31:59:60:2a:95:81:87:22:f4:98:92:
52:e7:28:21:3e:04:dc:cc:53:84:54:88:66:32:19:ed:0d:39:
d4:6d:1d:8c:32:a9:58:de:9d:ca:9e:a1:20:cf:4c:9e:51:21:
56:1a:b6:3b:ca:40:f8:1e:c7:15:b4:fd:b4:7f:c6:3f:8f:2a:
ac:f8:61:af:8d:fc:4e:96:d3:fc:17:c9:32:ff:3c:eb:68:f8:
15:4c:97:9d:57:8c:c8:a5:a3:50:6b:5a:8f:3b:14:7c:41:fc:
6b:67:8c:1f:45:f0:40:4f:6c:5a:24:13:8d:29:05:c3:15:79:
72:ee:ab:e1:75:03:67:58:67:72:92:92:d4:7b:52:61:c2:31:
26:30:84:f3:07:5b:00:00:f9:57:2a:dc:6d:8c:ca:32:03:04:
99:60:00:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:26 2025 by rpki-client