Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS400377.roa
File: AS400377.roa (raw, json)
Hash identifier: w7vX+F6GDaCxYLtTd5iFj4VKzEGNpo9ihJPMnexU4pY=
Subject key identifier: 28:BB:C4:86:AF:80:83:00:F6:AD:4D:65:FE:43:18:B1:9F:25:31:EF
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4A567D3DAF5DA4BA3F4F45A5A1408773ED43FAE8
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS400377.roa
Signing time: Thu 29 Dec 2022 12:27:40 +0000
ROA not before: Thu 29 Dec 2022 12:22:40 +0000
ROA not after: Thu 28 Dec 2023 12:27:40 +0000
asID: 400377
IP address blocks: 45.149.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:56:7d:3d:af:5d:a4:ba:3f:4f:45:a5:a1:40:87:73:ed:43:fa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 29 12:22:40 2022 GMT
Not After : Dec 28 12:27:40 2023 GMT
Subject: CN=28BBC486AF808300F6AD4D65FE4318B19F2531EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:c2:75:44:05:43:55:89:eb:21:ac:69:50:
5d:3b:38:52:84:52:92:b9:b1:99:a5:f8:f6:d0:4a:
ee:e7:3c:97:db:02:78:2a:f2:3a:10:24:aa:86:f4:
59:bf:d0:5a:e2:af:04:51:d6:b7:f8:03:86:11:a4:
c5:dd:d2:c4:2d:d4:11:41:56:49:d5:6d:c0:ad:e1:
30:f3:c7:06:f8:b6:38:02:6b:ad:cc:54:42:25:30:
f5:1f:53:93:45:8a:91:4f:a9:94:b6:80:bf:af:cc:
8d:2a:c9:4b:ee:b8:6a:30:86:19:5e:fa:72:9a:8a:
68:22:8a:f1:aa:ea:3c:a3:32:f2:7c:7f:59:32:38:
84:9e:fd:1c:88:24:45:b3:ba:64:c9:ab:b6:25:9f:
2a:37:fc:0f:92:9f:a4:37:a7:47:60:3b:72:ec:cf:
ed:48:a2:47:1d:77:84:51:bb:f1:2a:82:7c:3a:c2:
91:50:d8:92:2d:d7:39:6a:37:70:7f:40:01:70:0d:
61:35:21:83:81:8f:5c:9d:05:d9:7a:a3:c8:a7:74:
22:fa:19:cf:a5:80:f1:78:3b:9e:f2:2a:4e:0d:31:
18:65:36:dd:9f:77:c6:2a:2f:82:0f:58:32:e0:ef:
a6:e8:b9:9d:25:0e:c8:1a:13:b5:03:3c:b0:a7:6e:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:C4:86:AF:80:83:00:F6:AD:4D:65:FE:43:18:B1:9F:25:31:EF
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS400377.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6c:a9:0b:41:62:47:e2:6c:af:8e:63:8c:a6:1f:ff:20:7a:
8b:4d:35:16:1f:9b:fd:61:40:fb:18:30:e1:d2:8c:bb:64:1d:
d8:89:54:2d:79:6f:ac:d4:83:b1:d8:5a:92:60:a5:e1:8d:ee:
2f:fa:d3:6a:71:4a:a2:6c:04:db:7a:ae:21:f0:83:1f:e4:03:
41:11:26:e9:fa:9a:e0:78:d1:f4:98:ee:1e:de:9e:31:16:60:
ee:09:ac:91:54:d4:26:97:13:29:14:7f:f7:8c:33:85:d4:a6:
6e:71:41:8f:b4:51:ca:42:e7:f4:80:08:d5:d8:ee:08:5e:89:
37:5a:bf:4c:a1:34:bb:75:fd:7c:a1:34:30:5a:d0:94:3f:92:
67:82:e9:00:fd:53:4e:9c:2d:d0:bb:d5:14:ec:92:1e:ac:18:
cf:6a:ac:82:3e:1d:d5:99:34:51:f1:28:77:6d:af:bf:4e:e0:
1e:3d:07:77:e1:5a:7d:56:d7:3f:f7:22:c9:04:38:14:85:19:
88:1e:f9:4b:76:a1:51:14:47:82:c7:9a:0e:a2:0a:29:7d:b9:
78:32:55:25:6f:46:03:c8:c5:74:68:45:c2:01:c4:ec:73:e8:
d4:0c:70:c8:c3:cc:a3:8b:08:a5:74:21:a5:91:a4:77:d7:d1:
e3:22:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:34 2025 by rpki-client