Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e20323031353735.roa
File: 39332e39352e3131392e302f32342d3234203d3e20323031353735.roa (raw, json)
Hash identifier: jXk8ellaGOcN0EcbCv7ePPg1oQv0vvWweWlAH1JL7qs=
Subject key identifier: 9F:20:CC:4D:0A:4F:DE:52:E6:E5:AF:7C:AF:5A:48:DF:2B:7D:A9:67
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 4D8827A9F7C7F29ABA2E33C265EA16120968F6DE
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e20323031353735.roa
Signing time: Thu 21 Dec 2023 09:46:27 +0000
ROA not before: Thu 21 Dec 2023 09:41:27 +0000
ROA not after: Thu 19 Dec 2024 09:46:27 +0000
asID: 201575
IP address blocks: 93.95.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:88:27:a9:f7:c7:f2:9a:ba:2e:33:c2:65:ea:16:12:09:68:f6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Dec 21 09:41:27 2023 GMT
Not After : Dec 19 09:46:27 2024 GMT
Subject: CN=9F20CC4D0A4FDE52E6E5AF7CAF5A48DF2B7DA967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:7b:5d:b7:79:ef:15:8f:47:86:50:6a:ed:
fa:8d:ce:b6:00:3f:c6:e2:ec:4d:16:22:9d:a4:91:
cb:d9:5d:cc:0d:aa:45:94:a6:cf:bb:dd:ba:9e:8c:
4b:98:3f:69:df:d6:8d:19:75:80:a5:5a:77:b8:4d:
79:52:c4:2b:44:3b:49:2f:cc:66:0c:04:b0:bd:bd:
fb:bf:58:c4:3d:e1:a6:c1:6a:34:ad:6b:9c:c8:45:
91:87:ae:69:ca:32:9c:5c:9c:22:da:69:23:58:7a:
33:5e:1a:00:ce:cd:92:53:34:e4:d3:1d:0b:30:24:
28:c1:cb:67:23:8b:a9:79:84:c2:81:cb:bf:00:68:
2f:e5:09:f3:c2:3b:45:cc:7a:74:1f:b2:05:ea:09:
02:06:e3:62:4a:df:46:ac:0c:58:03:9d:78:fa:52:
6c:e6:c2:64:2f:9c:99:9c:58:6f:eb:2c:1d:22:26:
38:92:e2:69:ed:75:37:5e:29:d6:ef:86:62:05:f2:
95:73:09:09:46:ae:b1:5a:9e:da:ac:1b:73:c1:e9:
68:40:38:e1:c9:bf:ed:4a:38:6b:e7:a2:0c:9c:4a:
74:5e:f3:80:c3:07:fe:20:19:66:09:fd:d0:67:bf:
68:9a:28:2f:a7:43:90:f1:a3:14:5f:4d:01:a1:ec:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:20:CC:4D:0A:4F:DE:52:E6:E5:AF:7C:AF:5A:48:DF:2B:7D:A9:67
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e20323031353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1a:51:5d:1b:75:7b:e3:0d:c1:04:f5:a7:5b:07:62:b0:88:
4f:2e:f2:ba:12:87:51:3b:cc:2b:e2:8a:76:64:8a:56:78:af:
9e:ba:7b:20:9b:5b:69:52:26:aa:af:65:39:ef:11:7b:ed:83:
1a:9b:ef:e1:d6:26:be:1a:38:20:4a:e6:28:a6:26:ae:e1:19:
03:9c:70:58:1c:96:f7:e1:8d:ef:18:b6:85:09:7a:e0:37:47:
57:4f:95:0d:28:0f:c6:f8:31:5a:49:8d:4e:29:36:cd:51:ed:
46:4a:f5:b0:8e:ec:c0:5f:32:39:20:c5:e6:5f:4d:03:6c:80:
9f:06:18:70:60:93:0a:f2:0e:e2:49:dc:2e:0b:27:3c:99:71:
d7:2a:6a:09:dc:ef:31:ef:35:9c:cd:f6:10:70:23:66:4c:b5:
90:47:17:94:85:8f:b1:03:f4:a1:d3:fe:44:29:63:c9:f3:cb:
e7:ce:9a:a6:39:4d:c6:0a:8f:74:b4:6d:53:48:f4:c6:b5:1a:
66:89:04:34:ff:2d:06:4b:0e:42:54:20:81:20:89:7c:4b:6b:
96:1e:24:4a:a0:11:d1:49:1a:54:3f:9d:00:1b:35:c5:e1:d0:
3b:ea:c1:75:36:e5:15:15:f5:9f:e2:36:c6:cc:2d:16:dc:65:
22:5f:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:54 2025 by rpki-client