Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38312e302f32342d3234203d3e20323034383433.roa
File: 3231332e3133392e38312e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: wchmC1gD3sBXvLr6gSQbOxZXx1TRFIqvPzmUSX3SZy0=
Subject key identifier: 7E:BA:A7:D2:B6:8E:52:E0:4C:3C:84:32:22:43:F7:7D:4E:5B:75:DF
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 590E899F2330EF54164C2E8B9010CF9EBC4A08AA
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38312e302f32342d3234203d3e20323034383433.roa
Signing time: Sat 01 Jul 2023 11:14:48 +0000
ROA not before: Sat 01 Jul 2023 11:09:48 +0000
ROA not after: Sat 29 Jun 2024 11:14:48 +0000
asID: 204843
IP address blocks: 213.139.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0e:89:9f:23:30:ef:54:16:4c:2e:8b:90:10:cf:9e:bc:4a:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jul 1 11:09:48 2023 GMT
Not After : Jun 29 11:14:48 2024 GMT
Subject: CN=7EBAA7D2B68E52E04C3C84322243F77D4E5B75DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:b7:6c:8a:46:24:ff:1a:13:8c:86:2a:0a:
61:9d:0f:2d:25:f9:42:5a:5d:44:4f:6f:46:43:15:
66:cb:6f:b3:4a:a5:95:24:48:92:04:d3:54:08:ec:
c8:51:3d:9b:ad:03:c3:f0:75:e1:2d:d9:fa:4a:d3:
2e:55:a0:cb:b2:aa:3f:11:7d:50:ba:44:8b:22:bb:
b4:75:2c:53:ca:c0:fc:e7:4a:5c:47:90:7c:8b:41:
b5:bf:a3:fe:77:81:80:07:ad:03:18:a9:17:02:10:
21:af:58:1e:7a:ce:0c:55:46:e7:53:c0:88:cd:2f:
b3:42:e5:b5:cd:2e:97:43:cb:d0:ac:b5:38:03:3a:
d6:47:c2:57:86:c2:ce:99:67:0e:8b:41:a6:fb:4d:
0a:85:f4:c6:26:b7:e1:27:70:10:8c:07:6a:ce:a0:
af:24:3c:f1:b7:43:43:38:bd:87:c3:0e:2b:55:39:
25:72:7f:66:06:7c:d1:f8:19:56:47:88:30:b0:3d:
8e:9e:53:c9:60:13:29:4e:4d:e9:4d:36:9c:1b:a3:
64:57:a3:dd:7e:47:ad:ea:cd:4e:4d:95:65:c6:9f:
35:73:4b:7d:1f:9b:5d:8a:79:8f:fa:e7:9a:da:37:
2a:92:7f:23:73:8f:d4:f2:ad:e2:8c:5c:7c:bf:3a:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:A7:D2:B6:8E:52:E0:4C:3C:84:32:22:43:F7:7D:4E:5B:75:DF
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38312e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c5:08:79:44:74:1b:81:f0:fa:3a:dd:60:aa:e5:86:cd:4b:
8b:dd:83:58:7e:89:ee:26:80:f5:9b:6a:9e:38:75:88:c6:f1:
e3:f5:80:97:e3:34:41:be:21:2e:b9:9d:d9:7f:45:c5:25:49:
ec:29:a1:6d:2d:34:19:eb:11:04:6d:31:08:f2:57:aa:4b:8f:
04:ef:78:06:80:e1:2c:0c:b9:48:95:69:59:23:26:4c:d0:12:
85:74:a8:a0:3d:85:f2:ad:ad:7d:cb:80:61:65:8d:9c:57:0c:
45:9c:ac:11:fd:1f:4a:a4:f3:4d:46:25:e2:75:17:14:bb:fa:
8c:67:14:53:cf:5c:45:0e:cb:e1:46:33:ec:de:c6:79:10:a1:
53:59:4c:98:a6:98:f4:3c:6c:3f:46:5d:5c:56:0a:cb:5a:0f:
ba:8c:a2:48:5e:b6:6d:7e:9b:24:19:79:bb:e2:3f:3d:97:c0:
02:d0:5b:08:29:10:a8:d7:13:c6:9c:c9:bd:4e:cc:7e:6d:76:
4b:25:01:aa:4d:78:a7:1b:d7:5d:61:0a:d3:ed:8d:ab:58:50:
4c:e5:1e:73:80:42:8c:3c:32:87:a3:de:dc:6d:d0:af:94:0f:
65:58:62:7a:b5:e8:b9:e2:47:fd:e8:6f:81:4a:7f:f4:87:30:
e9:06:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:35 2025 by rpki-client