Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231372e302f32342d3234203d3e20323132383135.roa
File: 38332e3135302e3231372e302f32342d3234203d3e20323132383135.roa (raw, json)
Hash identifier: T+4vzp6fUCw6bsoJjWxJnCJlCPinlH23UXq0B9DrRa0=
Subject key identifier: FE:67:99:55:7D:B1:19:6E:57:79:43:C6:4F:A3:02:C7:80:06:98:44
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 66A09FFF63641F269F98E9700046EA68224BEC2C
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231372e302f32342d3234203d3e20323132383135.roa
Signing time: Thu 05 Jan 2023 16:34:05 +0000
ROA not before: Thu 05 Jan 2023 16:29:05 +0000
ROA not after: Thu 04 Jan 2024 16:34:05 +0000
asID: 212815
IP address blocks: 83.150.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a0:9f:ff:63:64:1f:26:9f:98:e9:70:00:46:ea:68:22:4b:ec:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Jan 5 16:29:05 2023 GMT
Not After : Jan 4 16:34:05 2024 GMT
Subject: CN=FE6799557DB1196E577943C64FA302C780069844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:8b:1e:29:cc:bd:6b:5c:c9:68:e6:a5:c0:
fd:25:86:da:f7:b1:c7:c1:07:37:f1:c0:82:40:6e:
03:6b:b8:2b:e3:15:97:20:ab:33:d5:b5:ae:00:33:
a7:76:6e:9d:03:4f:3e:ea:0a:82:70:a6:86:fd:85:
e3:ff:12:ce:ef:1e:01:70:a8:b8:ab:b0:85:b7:45:
5a:32:65:9f:e1:52:7d:fd:2e:17:39:de:73:fc:15:
db:90:f9:08:7b:b5:a3:d1:71:f9:d3:94:4f:e2:ea:
75:13:d5:36:5b:e5:a7:22:11:9a:7f:ae:75:c6:2d:
57:d4:43:10:eb:f8:c4:7a:6a:72:c7:0a:d7:57:41:
18:54:35:9c:5f:07:c1:23:8d:84:50:da:3d:f4:72:
9d:84:ac:b1:a7:9e:3c:b9:16:2d:39:0d:8a:c2:28:
95:e0:ab:55:5f:f2:99:87:8d:de:a3:5c:a3:68:a9:
5b:c6:b7:cb:a0:cd:cc:a8:69:ca:b5:f6:58:e9:b4:
d3:b0:51:66:eb:56:6c:fb:47:9c:7e:26:78:08:cb:
f5:47:12:f1:20:b0:66:53:0a:13:5b:50:9c:0d:b3:
97:ce:2d:7d:f9:25:ff:b4:68:8c:02:dd:78:22:c0:
0b:01:b3:60:42:2c:f7:04:db:bc:c6:12:82:a0:2c:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:67:99:55:7D:B1:19:6E:57:79:43:C6:4F:A3:02:C7:80:06:98:44
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231372e302f32342d3234203d3e20323132383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:32:4c:0c:77:02:64:c4:44:f2:16:bb:f4:27:ed:d4:c3:71:
34:c2:11:a6:9d:5b:d2:30:9c:40:73:6e:d4:9a:67:4d:f7:db:
f2:dd:3c:33:58:23:a0:a5:70:eb:09:da:c1:c4:09:00:80:85:
23:d0:e3:86:b3:8b:93:ff:30:e9:d6:42:13:91:e2:98:f1:ef:
93:d7:7d:6e:70:2b:15:cf:b9:2b:94:46:b0:a9:90:a2:b4:23:
b9:8b:05:fa:6b:73:6f:cc:9c:e2:dd:16:9c:c2:c6:b8:d8:c9:
44:7a:12:51:33:cc:bb:6d:43:c0:01:3a:60:1a:57:22:a9:96:
ca:df:20:69:4e:01:3a:cd:f7:5a:5d:e2:c6:78:78:e1:29:c2:
e1:89:7c:09:59:56:be:a2:23:37:19:64:9f:59:12:5c:31:a9:
5d:63:17:75:e9:f4:05:e5:4f:69:fb:79:2c:d1:5d:76:04:e2:
b9:fb:76:91:56:7e:a5:9c:8f:42:69:64:5a:e3:72:65:57:74:
11:23:fa:4a:98:00:07:93:d1:a0:1f:63:f4:f6:ec:ac:ab:cb:
7e:99:88:25:c5:3c:fe:87:4c:fc:51:dc:44:5b:70:f4:ae:b0:
0f:b2:a6:11:fa:f0:75:4d:0c:8e:11:3d:a3:e7:5e:b2:c6:c8:
83:43:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:20:34 2025 by rpki-client