Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e20323131333138.roa
File: 33312e362e34382e302f32342d3234203d3e20323131333138.roa (raw, json)
Hash identifier: FDqtVRX6RDEuuLEXBCJwiczCnWMW6IwgdRIf2lvEEhk=
Subject key identifier: FC:25:97:9D:24:75:C1:22:83:28:39:D1:55:C1:A0:86:47:92:91:85
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1703AC77366C20774800EAB91489348A9BAC0C04
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e20323131333138.roa
Signing time: Fri 19 Jan 2024 21:34:42 +0000
ROA not before: Fri 19 Jan 2024 21:29:42 +0000
ROA not after: Fri 17 Jan 2025 21:34:42 +0000
asID: 211318
IP address blocks: 31.6.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:03:ac:77:36:6c:20:77:48:00:ea:b9:14:89:34:8a:9b:ac:0c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jan 19 21:29:42 2024 GMT
Not After : Jan 17 21:34:42 2025 GMT
Subject: CN=FC25979D2475C122832839D155C1A08647929185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:d1:0f:a5:3c:33:21:c3:4d:ff:09:50:77:
ba:9b:5f:48:a5:14:19:37:d3:7c:ba:02:7c:51:80:
dd:3e:75:43:20:a8:2c:2d:16:80:19:da:79:59:a5:
ae:b3:b2:d9:f9:38:95:42:92:2d:ab:d7:3a:a9:fe:
db:9d:ae:3f:7d:6c:fd:8c:bd:d7:19:25:11:58:e1:
25:e4:dc:10:e1:c7:e9:ec:82:6a:d4:2c:6f:a8:b6:
1d:aa:73:c8:f1:03:7c:8d:65:39:cf:3f:bd:1d:74:
09:15:f7:ff:2f:51:07:1f:b8:ba:94:03:cd:7f:1b:
63:24:d0:37:51:5e:73:19:e2:99:c1:7e:0d:29:63:
22:76:ca:25:a4:39:83:b4:3b:ef:66:de:08:ad:39:
d5:12:66:28:82:88:b9:84:31:d0:8e:57:90:45:e8:
44:1d:6e:f4:15:ff:e5:63:57:33:e3:e5:02:3a:ba:
c0:c3:29:8a:17:41:77:94:09:2f:62:52:6a:9f:62:
85:18:18:e3:e8:bd:93:b7:b3:4d:c5:cd:bc:c2:e5:
16:db:8f:d6:c7:e9:32:98:0d:2d:c1:07:e4:15:af:
b2:cf:09:cf:4d:c4:7c:dd:ba:2f:54:ed:2d:15:e8:
59:a3:26:e5:e8:1f:44:a2:42:d0:a9:b1:3f:c3:7e:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:25:97:9D:24:75:C1:22:83:28:39:D1:55:C1:A0:86:47:92:91:85
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e20323131333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.48.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a9:f8:fb:25:66:7b:69:f9:53:91:df:58:03:aa:0e:d1:a1:
04:0b:e5:26:ae:9c:58:9e:df:7f:2c:6d:4c:c9:a5:6a:f5:c8:
e2:34:1e:6d:b1:24:ec:b6:b6:2c:ac:2d:87:14:e2:6f:26:bd:
f0:64:68:4a:1b:9a:e2:07:f8:6d:67:a2:c0:59:d7:06:31:95:
81:7d:cc:28:1c:19:10:c6:da:3d:09:f3:27:ab:66:29:d0:d0:
91:d3:48:dc:45:46:51:24:18:7d:cb:a7:97:93:d1:44:02:57:
90:04:b4:80:f0:33:25:6a:6c:b0:a3:d9:59:f9:99:90:24:3c:
a9:27:37:0f:c8:df:b6:a0:91:8a:bc:cf:9b:ed:20:45:ae:3e:
86:30:fa:26:4c:f8:1d:2e:0d:c6:2e:24:b7:03:99:35:b8:92:
45:8e:65:3c:2d:97:5a:2f:dc:5c:f3:fb:54:a3:d4:2b:71:95:
af:5b:6e:e1:37:85:fc:c1:b4:21:1a:bf:37:44:d7:5a:0f:1a:
f8:6a:2c:2e:88:33:69:ba:d2:d0:bf:97:87:9e:75:0c:23:90:
a8:0a:07:e0:35:a9:e4:06:ca:21:c2:be:a8:75:ca:9d:80:22:
cb:69:76:c2:20:40:7e:0f:eb:33:9a:33:28:60:c0:49:b6:75:
fe:94:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:11 2025 by rpki-client