Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: ITlseCeZ/Ovj+vbOLnTpGygd/yFIJ/CiVgR75ezpvIc=
Subject key identifier: C5:72:D0:68:1E:74:A6:13:2D:5F:92:26:D3:5D:27:42:EC:34:82:B1
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 602329E57473FEB4112D9094788C24A1B32BE2E3
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS64267.roa
Signing time: Sun 14 May 2023 00:00:16 +0000
ROA not before: Sat 13 May 2023 23:55:16 +0000
ROA not after: Sun 12 May 2024 00:00:16 +0000
asID: 64267
IP address blocks: 193.142.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:23:29:e5:74:73:fe:b4:11:2d:90:94:78:8c:24:a1:b3:2b:e2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 13 23:55:16 2023 GMT
Not After : May 12 00:00:16 2024 GMT
Subject: CN=C572D0681E74A6132D5F9226D35D2742EC3482B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:b2:16:d1:27:3e:da:32:34:2f:02:d2:a4:
7f:8d:b4:8f:21:74:41:b8:6d:6b:94:e8:d5:77:5b:
61:0a:82:7c:b9:7a:20:71:ce:f8:b4:4b:5b:04:35:
79:33:1d:ab:f3:ac:b0:2e:c8:7b:0a:a9:d6:2a:d1:
78:47:64:9c:2c:38:f8:34:95:0f:33:34:0c:ea:88:
72:fc:0c:ee:e1:b4:2d:31:45:ec:c6:41:12:b1:75:
2f:9e:79:f3:d4:d1:47:19:59:8f:04:dd:b4:33:7e:
85:ea:3d:e7:18:80:87:0e:91:b6:78:e4:91:e2:90:
6d:04:15:bc:cd:4e:fe:ca:04:ac:0d:b0:11:9e:bb:
7b:d9:13:9e:20:4b:98:9b:77:d1:15:61:d5:e4:fc:
42:85:ca:29:88:7a:64:30:97:7f:e8:c5:c8:d7:0c:
d2:71:63:5a:e1:3a:de:1b:6b:20:77:05:80:7a:48:
00:19:8c:57:2b:ab:60:36:60:e8:f0:42:18:f7:d2:
4f:52:99:69:bf:78:8b:ae:84:99:24:a4:a9:8c:33:
01:34:33:f9:73:a2:85:15:9d:29:c7:34:e2:63:d2:
9a:46:35:22:c3:5a:85:f5:86:d0:87:38:22:b3:d1:
cd:41:8b:bc:81:b8:59:6e:81:b9:2d:6d:80:87:1c:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:D0:68:1E:74:A6:13:2D:5F:92:26:D3:5D:27:42:EC:34:82:B1
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:26:34:55:c3:34:8f:ba:37:bb:d6:6e:64:61:50:b6:1f:f2:
00:51:e0:8f:f3:51:79:f1:63:dd:65:39:99:81:cd:61:50:5c:
1e:ed:67:af:86:e3:ac:7d:b6:19:a7:ea:dc:62:4b:a1:bb:58:
94:03:0a:2c:8b:d1:76:4b:63:13:5e:45:b1:d8:15:9e:4e:12:
d3:6b:ad:bf:62:2d:a3:7c:63:2b:65:82:84:16:70:8a:e4:88:
4a:0f:4f:39:14:95:d0:65:d5:c2:d2:c0:32:7c:66:0b:79:86:
b0:3e:9a:77:76:2c:f3:03:b6:12:5e:b1:fd:cf:22:ae:99:99:
c7:4c:90:d0:ed:6b:ca:eb:e4:7d:be:70:f5:5a:6d:a3:88:87:
fb:68:b4:8d:04:7b:f5:46:48:76:90:fb:ea:24:58:ef:e9:6c:
55:e6:74:ef:44:50:79:46:39:db:f3:b4:be:55:2a:e9:1f:27:
24:2a:cb:ff:f5:b1:fc:e1:36:5e:49:bc:96:7a:a5:0d:07:2f:
85:be:16:08:37:f0:32:c3:c0:bb:0c:7c:28:0b:d4:d2:5b:3e:
99:09:a2:40:7d:93:c6:f1:9d:7c:00:f7:21:e9:4c:80:55:eb:
85:97:2a:97:63:5f:82:15:18:14:5e:bb:cf:ff:24:71:51:6e:
dd:3b:29:68
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUYCMp5XRz/rQRLZCUeIwkobMr4uMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMzA1MTMyMzU1MTZaFw0yNDA1MTIwMDAwMTZaMDMxMTAvBgNV
BAMTKEM1NzJEMDY4MUU3NEE2MTMyRDVGOTIyNkQzNUQyNzQyRUMzNDgyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLbIW0Sc+2jI0LwLSpH+NtI8h
dEG4bWuU6NV3W2EKgny5eiBxzvi0S1sENXkzHavzrLAuyHsKqdYq0XhHZJwsOPg0
lQ8zNAzqiHL8DO7htC0xRezGQRKxdS+eefPU0UcZWY8E3bQzfoXqPecYgIcOkbZ4
5JHikG0EFbzNTv7KBKwNsBGeu3vZE54gS5ibd9EVYdXk/EKFyimIemQwl3/oxcjX
DNJxY1rhOt4bayB3BYB6SAAZjFcrq2A2YOjwQhj30k9SmWm/eIuuhJkkpKmMMwE0
M/lzooUVnSnHNOJj0ppGNSLDWoX1htCHOCKz0c1Bi7yBuFlugbktbYCHHHFZAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUxXLQaB50phMtX5Im010nQuw0grEwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNjQyNjcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBjgQw
DQYJKoZIhvcNAQELBQADggEBAEwmNFXDNI+6N7vWbmRhULYf8gBR4I/zUXnxY91l
OZmBzWFQXB7tZ6+G46x9thmn6txiS6G7WJQDCiyL0XZLYxNeRbHYFZ5OEtNrrb9i
LaN8YytlgoQWcIrkiEoPTzkUldBl1cLSwDJ8Zgt5hrA+mnd2LPMDthJesf3PIq6Z
mcdMkNDta8rr5H2+cPVabaOIh/totI0Ee/VGSHaQ++okWO/pbFXmdO9EUHlGOdvz
tL5VKukfJyQqy//1sfzhNl5JvJZ6pQ0HL4W+Fgg38DLDwLsMfCgL1NJbPpkJokB9
k8bxnXwA9yHpTIBV64WXKpdjX4IVGBReu8//JHFRbt07KWg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:23 2025 by rpki-client