Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e20323130353432.roa
File: 3137382e3230382e3138342e302f32342d3234203d3e20323130353432.roa (raw, json)
Hash identifier: pmZ8XSeN9xbpEEXtXdraCKQnsBPYiU2cjfVuHI9UovQ=
Subject key identifier: B8:F2:72:98:A0:63:FD:72:AC:62:E5:6F:16:65:04:EC:79:2D:8F:FF
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 752E7E532CFFA5E04945D67CE171944533C231E3
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e20323130353432.roa
Signing time: Fri 22 Dec 2023 08:54:40 +0000
ROA not before: Fri 22 Dec 2023 08:49:40 +0000
ROA not after: Fri 20 Dec 2024 08:54:40 +0000
asID: 210542
IP address blocks: 178.208.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2e:7e:53:2c:ff:a5:e0:49:45:d6:7c:e1:71:94:45:33:c2:31:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 22 08:49:40 2023 GMT
Not After : Dec 20 08:54:40 2024 GMT
Subject: CN=B8F27298A063FD72AC62E56F166504EC792D8FFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:eb:72:4f:e5:9f:3d:da:3e:32:b4:cb:ea:
21:4f:4f:09:81:20:b0:dd:a0:91:4d:89:2a:e8:3c:
81:43:90:8f:f2:8a:46:19:f9:61:37:7c:de:b6:89:
fd:3d:d2:1a:e5:6e:1c:25:b8:91:71:13:35:be:20:
a9:a5:d2:85:75:d0:be:fe:fa:b4:af:45:7b:33:5b:
fe:01:00:08:f3:ec:77:fa:ff:ed:f2:bf:15:83:ed:
06:2c:cb:df:3b:b3:47:a7:55:c7:b7:b0:c2:e8:5f:
5c:8f:e3:ba:e2:fe:10:f0:8d:b8:d6:0b:a9:b6:1b:
04:10:d7:d5:c8:32:be:3f:39:0c:55:20:65:8f:26:
e1:8a:d3:80:3e:35:1b:01:ce:22:f9:e4:f1:5d:a2:
49:ab:34:cb:04:d0:26:02:51:17:23:fd:65:95:5f:
34:e1:a0:e0:7c:9b:77:f2:48:e8:66:77:fb:ee:44:
44:8f:94:0d:af:d4:df:40:57:62:2b:b4:27:6a:b5:
e1:62:f7:7d:d4:41:0a:c4:f6:8d:cc:19:96:7a:3e:
2f:50:d3:4e:43:bb:27:be:96:eb:1d:05:96:5a:5e:
e4:7a:8d:57:54:0f:fc:05:07:86:9d:14:e3:e8:f3:
f3:74:93:53:30:bf:f6:77:60:53:f6:d1:d3:d8:c9:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:72:98:A0:63:FD:72:AC:62:E5:6F:16:65:04:EC:79:2D:8F:FF
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e20323130353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fe:a5:66:cc:cf:7d:d6:64:11:73:57:55:0a:fd:b4:86:ba:
c2:00:68:5d:7e:56:de:cd:d8:01:f6:44:2b:0c:72:cc:bd:3e:
85:93:92:a6:b8:b5:69:df:42:6b:3f:df:68:34:8e:16:1e:d0:
10:94:ac:47:80:d7:71:bd:fe:6f:bc:74:2d:ce:d9:35:06:88:
09:97:19:b5:d2:7f:15:43:54:9f:23:a4:72:9d:54:0f:5d:b9:
3a:52:19:d8:29:25:7b:ae:0a:17:38:9c:66:4c:64:9d:2a:dd:
f0:bf:37:d3:db:69:75:9f:0e:ea:a2:45:06:b7:93:9c:00:e3:
9c:38:32:20:4c:1d:8d:e0:30:39:2e:dc:48:6a:78:21:b9:a3:
7d:c2:db:0a:50:b7:10:71:d0:a2:56:0f:89:fe:73:53:b1:2a:
5d:dc:c0:80:c9:f2:b2:e8:2a:3b:72:c1:07:70:b5:60:16:bf:
af:be:69:a5:48:1d:92:30:94:e6:43:ab:01:3d:a4:4a:96:76:
c1:43:3c:2d:67:fc:d2:e5:34:b4:96:70:bb:17:6c:a9:6d:8e:
fc:ec:d8:d3:27:15:88:bf:d0:e9:e2:68:4d:93:bd:8d:34:c1:
a7:f8:1c:27:a0:83:a1:2f:6a:35:0e:ce:e6:dd:30:93:60:33:
7d:b7:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:10 2025 by rpki-client