Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e2033333536.roa
File: 39332e39352e3131342e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: SB1rUq9ZDpCMDN8YJAj5SUr/Zq0VsYRhWh12B0RxkuI=
Subject key identifier: 86:E4:A7:70:37:EE:68:5E:DA:03:83:96:A2:5C:C2:ED:DC:EE:A4:58
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 752067154E2614CB50C88EB70BD268979CD8472D
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e2033333536.roa
Signing time: Sun 19 Nov 2023 06:17:48 +0000
ROA not before: Sun 19 Nov 2023 06:12:48 +0000
ROA not after: Sun 17 Nov 2024 06:17:48 +0000
asID: 3356
IP address blocks: 93.95.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:20:67:15:4e:26:14:cb:50:c8:8e:b7:0b:d2:68:97:9c:d8:47:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 19 06:12:48 2023 GMT
Not After : Nov 17 06:17:48 2024 GMT
Subject: CN=86E4A77037EE685EDA038396A25CC2EDDCEEA458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:85:00:2d:fe:d4:be:89:ba:9c:3c:86:60:
89:a1:43:32:42:1d:d4:87:18:92:c4:ce:30:9f:e7:
0f:ca:ba:2a:bd:51:2b:08:6d:bf:1d:1a:c3:f3:c3:
4d:4d:64:62:c3:bf:b8:80:15:a3:a6:d9:85:cb:d0:
5f:10:16:4d:db:a0:c8:04:d5:e2:73:64:b8:de:95:
6b:49:83:8e:d2:22:e9:a3:38:2f:6a:8f:66:ee:74:
24:2e:5a:4d:68:f7:92:90:53:b7:00:fc:0e:bf:b3:
4d:93:de:8c:1e:79:16:90:15:63:f3:75:27:3f:c4:
5d:24:cf:cc:4a:6f:f4:c3:bc:62:6a:1b:4e:9b:10:
6b:78:69:4b:7e:17:43:62:72:b3:ae:42:29:56:fe:
41:91:0f:b6:69:b1:82:1e:10:ef:f3:7b:f0:53:17:
a3:ec:7c:bd:7e:9b:d1:65:e6:c0:8d:31:38:0e:66:
d9:5e:40:3b:23:b7:3d:aa:eb:33:fb:52:09:6b:ca:
c1:86:64:bc:10:cb:a6:a1:e3:3c:31:53:eb:54:b3:
03:4c:ca:6a:21:62:a8:25:f7:f7:3f:a1:d3:82:3f:
f9:f5:05:72:2e:f4:18:24:14:bc:72:c0:42:b0:1b:
2b:96:dc:30:4c:be:97:bd:7d:5e:88:43:12:84:1e:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E4:A7:70:37:EE:68:5E:DA:03:83:96:A2:5C:C2:ED:DC:EE:A4:58
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:41:0e:4c:3b:f1:81:9c:4c:ce:ac:23:cb:40:87:28:5c:f0:
3b:a5:f6:f3:c1:6d:e4:d1:93:d3:3e:fe:49:64:6f:26:3c:f7:
2c:97:42:ce:1b:dd:98:cd:b9:0e:d2:fc:46:d8:f4:2b:bd:1b:
09:b8:e6:75:27:53:af:d9:90:ce:fe:da:3f:8d:42:90:f7:9e:
f2:b0:de:ee:5e:a2:a2:06:32:19:dd:06:5a:c8:e9:69:34:9a:
ae:b3:08:69:3f:be:98:59:31:32:2e:67:3b:9a:06:02:2a:66:
d3:73:3d:a0:53:3f:81:46:89:ea:cf:b1:1d:42:85:54:85:37:
f1:21:c1:3e:48:70:e3:80:11:da:0f:d0:13:f0:0a:79:6e:1c:
46:19:24:a6:56:a7:7d:80:8d:94:63:63:b1:c5:be:b8:b8:e3:
76:4e:1b:dd:7e:c4:60:02:b6:6a:12:5e:22:b0:21:5b:4c:57:
3e:98:b9:dc:5b:b6:c6:61:0e:ca:8b:e1:cb:34:18:bd:ca:dd:
0b:74:1a:0e:fe:3d:ef:43:97:da:d0:83:98:f0:3a:c2:06:7d:
c3:0c:2e:60:52:87:d3:ce:01:e0:40:0a:c6:61:57:63:a8:95:
8e:55:4d:88:0e:22:47:c9:ef:a4:c8:21:87:d0:7e:a1:01:0b:
dd:0c:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:05 2025 by rpki-client