Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34352e302f32342d3234203d3e203335373538.roa
File: 33312e362e34352e302f32342d3234203d3e203335373538.roa (raw, json)
Hash identifier: yBpE07/jY83h6+BYgrAd3Q++gRrr41GLLbNOmlkH2FA=
Subject key identifier: 04:77:49:1E:8E:A8:FC:61:51:4A:88:DF:32:E2:1F:C2:76:71:0C:18
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 230C3F4E2F3AD97DD9850E6D358EA4A47AD982E3
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34352e302f32342d3234203d3e203335373538.roa
Signing time: Thu 14 Dec 2023 10:04:58 +0000
ROA not before: Thu 14 Dec 2023 09:59:58 +0000
ROA not after: Thu 12 Dec 2024 10:04:58 +0000
asID: 35758
IP address blocks: 31.6.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:0c:3f:4e:2f:3a:d9:7d:d9:85:0e:6d:35:8e:a4:a4:7a:d9:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 14 09:59:58 2023 GMT
Not After : Dec 12 10:04:58 2024 GMT
Subject: CN=0477491E8EA8FC61514A88DF32E21FC276710C18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:ad:05:58:d6:d9:f3:59:bc:dd:e4:9e:aa:
76:0e:bb:d5:00:da:fd:55:79:be:59:7a:59:5e:c5:
99:28:34:f1:e4:0d:7f:c7:6d:1f:2a:01:7d:64:13:
61:48:54:4c:58:e1:5b:85:49:35:43:c3:03:27:a9:
2d:c9:60:8c:ea:1d:6c:b7:3f:0c:7d:e3:d6:9d:b5:
69:c6:48:fd:51:d1:d1:5a:4d:7c:4a:0b:99:12:4a:
c0:58:30:c3:80:71:0d:13:77:1b:60:c3:4f:02:b2:
cf:33:b5:cf:62:be:5a:ac:4a:74:67:eb:f4:74:9d:
78:1f:ab:e2:41:2d:3b:9b:ee:ca:00:5b:db:a1:a0:
9f:64:52:08:30:52:72:e4:27:30:6a:1f:5a:0b:df:
2d:92:b1:1d:69:1b:e2:4a:4f:6e:4d:6a:10:b3:8e:
cb:eb:85:44:ca:b3:ca:cf:ce:66:86:08:38:6b:ee:
c3:b0:60:26:a8:c3:aa:28:2e:ab:63:e9:d4:63:e6:
ba:59:3f:f3:b8:47:f5:bb:14:fc:6b:ff:14:4a:6e:
3d:f3:0b:86:32:e4:a7:34:69:63:f2:4d:ae:63:fb:
b6:6b:37:76:4c:80:2a:5f:32:d8:42:c1:aa:07:2d:
20:61:3a:6d:89:c7:4c:a1:e6:2e:77:63:35:9e:7c:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:77:49:1E:8E:A8:FC:61:51:4A:88:DF:32:E2:1F:C2:76:71:0C:18
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34352e302f32342d3234203d3e203335373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
70:67:ac:c2:48:8a:70:23:08:10:12:40:2d:3a:0a:43:74:43:
e4:32:63:e5:f1:44:f2:82:85:a7:aa:06:99:64:02:79:fc:fc:
65:02:69:2d:91:16:90:c5:6e:79:d9:5e:07:45:a0:ff:5d:45:
da:db:a8:dd:bb:9b:21:eb:6e:a0:00:a9:d0:dd:85:de:47:98:
5f:10:e7:31:e8:6b:f1:6a:0f:ef:73:c0:31:ce:4a:28:9e:fa:
04:57:77:de:20:35:1e:1c:27:07:16:ec:99:8e:24:b4:84:5d:
f3:e1:cd:d6:c6:0b:22:68:d9:73:41:d1:eb:f7:86:b9:16:0f:
fb:07:86:29:2e:01:64:bb:43:f0:5b:4a:42:ce:99:15:67:da:
d9:24:b4:38:9d:5e:cd:46:97:63:ab:ba:eb:4a:b1:03:43:a1:
cf:18:25:84:7b:00:2e:12:4a:2e:e7:fb:c8:81:27:a5:09:22:
4e:fb:8e:a7:03:60:24:cb:b4:ba:66:36:5e:3e:09:98:30:b7:
9d:24:8b:ae:a0:c8:db:e4:ec:6c:dd:5f:cc:53:18:d0:7b:e9:
05:3e:75:7b:5f:ee:02:b1:82:4c:f4:1d:7e:8d:50:3d:ba:eb:
38:17:75:cb:8e:6d:a4:09:a2:79:c7:57:98:65:2c:bd:07:cd:
46:1b:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:11 2025 by rpki-client