Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e20323132363639.roa
File: 3231332e3133392e36342e302f32342d3234203d3e20323132363639.roa (raw, json)
Hash identifier: SwOFXut7U2r+ZtkTT/0a4QuFXgg3+hXAc4O4vDJVuIQ=
Subject key identifier: 0B:81:E7:48:4C:91:A4:BB:CD:16:79:4A:87:E6:4C:1C:20:33:13:30
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 39E203C36FC8ADEA400F1E453514D6C592F2726A
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e20323132363639.roa
Signing time: Wed 25 Jan 2023 13:03:06 +0000
ROA not before: Wed 25 Jan 2023 12:58:06 +0000
ROA not after: Wed 24 Jan 2024 13:03:06 +0000
asID: 212669
IP address blocks: 213.139.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e2:03:c3:6f:c8:ad:ea:40:0f:1e:45:35:14:d6:c5:92:f2:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 25 12:58:06 2023 GMT
Not After : Jan 24 13:03:06 2024 GMT
Subject: CN=0B81E7484C91A4BBCD16794A87E64C1C20331330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:5c:b3:f8:b1:8c:b0:e9:9a:70:5e:f0:39:
f3:4d:24:fb:ba:f4:30:8b:82:b4:b1:ca:c9:87:a4:
51:9f:de:a6:4b:b7:88:4a:ee:d6:58:9f:be:31:5a:
3f:c1:51:f5:fd:8c:83:d7:2a:79:08:9f:03:23:fe:
9d:4f:52:4e:12:fd:90:d3:ce:eb:05:e4:a2:b3:19:
4e:59:04:12:88:a1:30:49:ce:df:87:3e:d1:bf:24:
05:db:bc:7c:f9:21:9d:48:78:96:42:9f:43:c9:33:
f3:1d:18:5d:7b:19:31:8b:43:07:e9:53:e3:01:92:
c0:41:ba:b2:03:bb:8c:24:65:01:8b:79:dd:ec:35:
8f:08:4e:02:e8:ef:59:6a:70:e1:20:8d:be:aa:88:
fa:dc:e5:bc:dc:c5:ea:1c:ec:91:78:a1:8d:14:ac:
12:38:c6:30:4b:28:4d:2d:28:9e:06:fe:d1:d0:1f:
6d:45:90:66:7c:01:c5:28:c4:89:bb:7c:14:02:8e:
5e:87:6e:d4:98:ef:13:4a:8d:f2:b4:27:84:c1:2d:
d0:bb:8e:5d:10:75:3f:07:b6:b4:a9:2f:58:1a:60:
9c:93:7d:de:0d:01:df:07:e6:fd:cd:92:35:9c:8f:
d5:72:d3:f1:aa:66:77:c4:e0:eb:36:64:f7:60:ca:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:E7:48:4C:91:A4:BB:CD:16:79:4A:87:E6:4C:1C:20:33:13:30
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36342e302f32342d3234203d3e20323132363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.64.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c2:e8:df:e9:af:6b:1e:d5:5e:75:4d:7b:74:8b:54:1a:13:
59:b8:3b:63:d5:a2:cf:90:6a:26:96:4c:fa:e8:bd:22:22:58:
b9:3b:35:da:30:d6:75:6b:ac:e4:c6:af:f4:f4:b8:d6:66:78:
a0:67:4c:a0:85:67:bd:67:66:2d:b7:e9:93:21:fe:51:c0:86:
12:e5:f9:08:fe:c9:be:f3:fe:6f:7f:ae:10:de:b2:09:ea:0a:
9c:98:eb:ef:a0:bc:28:b3:28:ed:26:f7:e4:a8:40:9a:56:85:
0d:bc:07:d7:65:16:84:58:31:4f:b3:9b:58:ff:3c:67:54:84:
e8:a9:3f:30:a3:3b:c9:83:4c:bd:b5:e3:10:8f:60:f1:42:57:
58:b9:27:bf:78:42:82:52:e4:76:54:db:e9:a0:d6:5f:96:5b:
09:7c:a8:52:f1:98:d0:7b:99:ff:57:a4:10:c1:18:1e:4e:f6:
34:28:9e:27:21:f6:05:be:41:db:40:21:a3:4d:9a:0a:b6:06:
cb:a3:0e:37:61:09:7a:80:9b:22:fc:4b:f4:76:f2:ac:b2:17:
78:be:90:ba:e9:60:c2:14:58:14:21:09:e6:61:82:a8:44:90:
e2:e7:d9:e6:65:8b:d1:68:d4:19:5a:4c:bd:e7:ea:e0:09:21:
1b:63:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:44 2025 by rpki-client