Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32342d3234203d3e20323034383433.roa
File: 3231332e3133392e38302e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: qjjIlppGUgATYTTHzLAN7ceik3FaVfcaYe0rvFPtir0=
Subject key identifier: B6:66:6C:A0:E0:86:E4:BC:32:8A:9C:BD:3F:2C:60:BF:70:C6:18:EB
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 0875BC6CBF2D221D1BFA14FA45FE465F106C8DAA
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32342d3234203d3e20323034383433.roa
Signing time: Wed 25 Jan 2023 13:02:51 +0000
ROA not before: Wed 25 Jan 2023 12:57:51 +0000
ROA not after: Wed 24 Jan 2024 13:02:51 +0000
asID: 204843
IP address blocks: 213.139.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:75:bc:6c:bf:2d:22:1d:1b:fa:14:fa:45:fe:46:5f:10:6c:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 25 12:57:51 2023 GMT
Not After : Jan 24 13:02:51 2024 GMT
Subject: CN=B6666CA0E086E4BC328A9CBD3F2C60BF70C618EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:fd:3f:53:a3:d5:c8:e4:18:49:35:0d:89:
f1:21:3f:02:6b:08:13:55:96:f0:e7:35:10:7b:c4:
71:44:8a:16:e7:68:45:1e:1c:d3:6e:2f:c9:f2:cc:
d7:61:2c:fe:a5:71:1b:e4:c7:3c:fe:ed:d0:08:dd:
05:c3:28:02:7e:54:e4:f5:bf:d5:bc:f9:0d:29:f5:
80:3c:95:bb:1e:63:36:f9:da:7a:63:7a:22:6e:85:
5d:0f:0e:90:71:be:8b:50:e3:f5:77:6d:74:35:07:
02:22:3b:3a:72:5b:a3:c0:08:8b:97:eb:e2:5d:7b:
5a:c0:7d:83:d1:b7:0b:9f:77:86:ea:92:e7:6e:07:
29:d7:25:ba:c7:db:1c:56:75:70:5a:4e:05:39:30:
b6:45:68:f6:60:64:e4:6f:f4:9c:17:11:f4:40:01:
6a:4f:ce:d3:38:f1:5d:21:ca:03:80:27:6c:3a:ab:
47:6a:58:53:4e:2f:ba:eb:f5:9b:b5:87:54:45:ed:
b5:0e:b0:a4:bc:7b:99:92:bb:77:19:67:f8:94:37:
ba:aa:05:6c:f9:42:61:4b:1b:80:ff:f0:4a:52:e2:
e7:76:c7:99:a8:54:48:a6:b4:62:52:71:37:3d:92:
a8:c2:2e:f3:64:9a:b4:73:13:9c:cf:88:0e:62:16:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:6C:A0:E0:86:E4:BC:32:8A:9C:BD:3F:2C:60:BF:70:C6:18:EB
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.80.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fe:29:74:67:fd:0e:1a:36:ac:77:13:c6:5a:28:5c:90:c5:
61:c9:91:bc:41:06:38:8a:a3:a2:f4:25:d3:93:76:e2:52:d7:
56:0d:9a:97:35:cc:31:aa:ba:d7:69:21:ef:f9:89:d6:44:d6:
1b:4b:a7:21:02:8e:40:6f:9e:17:08:de:e3:be:c4:1e:05:73:
7c:d2:35:f7:a6:57:b0:82:fe:5d:49:fa:a2:8e:62:05:ae:c1:
1e:60:04:fa:b8:4a:47:9f:86:12:ae:8c:8f:7e:20:81:54:78:
ec:50:64:38:39:98:55:ef:84:f5:af:e9:90:60:34:16:f7:10:
f1:4b:c5:3b:00:2a:8e:27:0c:39:6f:7e:00:9a:86:68:f1:c2:
be:4b:85:3c:5f:6a:64:77:a4:f6:2b:a7:b3:7f:b9:27:45:dc:
72:f8:1f:51:ed:e5:b8:ea:25:d6:30:c5:92:6e:67:f6:64:82:
d6:18:d7:d1:aa:97:9f:f5:bc:c5:4a:d4:de:02:bf:c7:a5:24:
df:87:f5:b2:49:23:fe:11:68:7e:13:43:cc:54:4b:4a:c8:2a:
2f:f3:30:9d:c3:05:8f:77:d3:63:fa:cb:7f:98:60:39:29:6d:
84:0d:df:13:fb:dd:bf:b7:cb:2c:04:3f:66:fb:f3:85:d5:58:
dc:28:64:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:56 2025 by rpki-client