Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203231383539.roa
File: 33312e362e31332e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: eSqt0q4TtvjlCzKK3I0FogoBUadKfNy0TbN6qWhLRZs=
Subject key identifier: 85:81:DA:4B:71:22:DE:07:B0:21:91:03:29:91:D1:A7:F2:71:DF:77
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1D223316FE70F40B7437BC7188889CBFD9A98E8F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203231383539.roa
Signing time: Tue 02 Jan 2024 08:51:15 +0000
ROA not before: Tue 02 Jan 2024 08:46:15 +0000
ROA not after: Tue 31 Dec 2024 08:51:15 +0000
asID: 21859
IP address blocks: 31.6.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:22:33:16:fe:70:f4:0b:74:37:bc:71:88:88:9c:bf:d9:a9:8e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 2 08:46:15 2024 GMT
Not After : Dec 31 08:51:15 2024 GMT
Subject: CN=8581DA4B7122DE07B02191032991D1A7F271DF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:88:ae:ab:81:71:a3:eb:7c:18:72:2c:a1:
80:c0:98:62:9c:60:47:07:c1:ff:3b:53:02:f3:43:
00:e2:0c:be:51:58:8d:61:b3:29:8c:01:70:e8:57:
7f:6c:9e:8d:03:46:d8:df:60:ff:c9:cd:98:dc:30:
7d:39:c8:79:be:e7:cd:56:7b:e8:01:42:66:75:dd:
9e:9d:bc:0b:a5:b9:a1:a9:1f:a1:7b:d5:9b:4c:f0:
98:2a:44:05:70:2a:ed:69:36:64:38:80:3a:e0:e8:
fe:03:26:a2:14:41:a7:5f:17:84:5e:7b:0d:c5:e9:
d5:9d:5e:48:61:34:4c:c0:b4:25:c1:13:66:81:f0:
bc:c3:a7:24:62:97:a2:0b:49:5b:62:c3:87:e1:61:
9c:b2:c2:e1:12:82:4a:a3:f4:42:9b:95:5c:83:1c:
07:4a:49:48:5e:c9:64:66:0d:d9:c7:11:46:93:b3:
d8:58:e4:0f:0f:2f:f9:83:f4:fd:0e:ba:bb:4c:bd:
87:8f:15:d2:3b:e1:c5:0b:a1:d8:c7:6c:b7:45:78:
cb:4c:4f:4f:8b:91:f3:a0:02:71:16:92:cc:0e:9c:
e8:9a:70:7c:53:c0:39:a5:e0:ae:bd:0f:60:51:d4:
bc:5a:78:fd:16:59:e9:e2:1b:99:cc:bf:cc:8a:f0:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:81:DA:4B:71:22:DE:07:B0:21:91:03:29:91:D1:A7:F2:71:DF:77
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31332e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:05:a0:54:57:51:89:eb:f0:2a:55:65:d1:8b:17:c4:2f:86:
7a:a3:2d:4d:c3:41:6f:51:ed:dc:2a:58:76:5e:67:c2:e6:c6:
2b:f2:11:c4:a7:74:4f:52:67:78:15:ed:28:4d:db:dc:6c:c8:
16:2e:2c:26:28:d9:9f:b1:0a:2c:21:6a:7e:68:ba:2c:a8:b4:
b1:7d:eb:92:f5:0c:d1:45:04:25:c4:94:76:ec:6a:50:6f:2a:
69:5f:55:03:5b:e7:42:53:ff:60:81:65:52:8f:ea:a1:69:03:
2b:39:fb:24:3c:cf:e8:41:3c:49:38:1f:14:49:59:dc:44:03:
4c:20:43:3b:2a:c2:5c:fb:93:50:5d:9a:38:e8:71:6f:99:e2:
5d:d4:06:14:df:20:f4:73:ba:96:e1:82:0c:9d:d9:82:62:9f:
1a:15:34:48:e6:73:d9:48:6b:99:2f:15:b4:42:a3:67:1f:d8:
ec:c3:a7:cf:30:cd:5b:7c:e5:c9:06:9b:48:a8:1d:6a:73:37:
e1:bd:05:51:de:92:78:b6:56:83:31:52:38:8e:0f:eb:1b:b4:
8d:8e:8b:46:76:45:05:14:27:c8:6c:bf:a9:4b:10:db:72:b4:
a3:db:4d:47:35:78:2a:70:66:e8:e2:f1:7a:b9:93:a5:0d:ac:
ea:1e:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:14 2025 by rpki-client