Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32342d3234203d3e203232383232.roa
File: 3231332e3133392e38322e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier: 8h+bWJ6/DX/bNvs+ok7mzZxcqZVAzp+hPM/UGX+j9Mo=
Subject key identifier: A6:F2:71:F9:84:1D:1C:2D:DB:99:1A:52:DA:0C:1F:42:BA:20:3E:ED
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 5023256953FAE9461C0517E3067A83E1F7218079
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32342d3234203d3e203232383232.roa
Signing time: Wed 12 Apr 2023 11:27:10 +0000
ROA not before: Wed 12 Apr 2023 11:22:10 +0000
ROA not after: Wed 10 Apr 2024 11:27:10 +0000
asID: 22822
IP address blocks: 213.139.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:23:25:69:53:fa:e9:46:1c:05:17:e3:06:7a:83:e1:f7:21:80:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 12 11:22:10 2023 GMT
Not After : Apr 10 11:27:10 2024 GMT
Subject: CN=A6F271F9841D1C2DDB991A52DA0C1F42BA203EED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:29:bc:b1:72:21:ff:3f:93:b9:fb:0c:26:1d:
0f:56:43:08:f8:65:13:70:8f:ba:b5:9f:28:36:6e:
7d:0a:28:66:d0:52:85:27:b9:70:16:1d:93:19:9b:
84:20:74:e5:38:93:9b:d4:08:46:01:31:83:ec:39:
02:73:f6:23:69:36:7b:e5:6a:36:fa:f7:cf:4c:b1:
15:7c:9c:cd:e3:8f:d7:b0:89:19:6d:a9:f5:de:8c:
29:41:e8:5d:5b:cc:c0:43:2d:8d:c6:d5:68:90:22:
6c:cd:21:15:3f:b6:7d:4a:37:4e:e2:04:e3:25:a6:
c9:dc:61:f5:b4:cd:ea:91:6c:3e:64:3a:75:23:9d:
a7:0c:f4:57:66:32:78:2b:68:1b:94:3c:33:3f:a2:
0d:45:ee:e4:1c:18:a3:96:bf:36:71:94:88:93:c9:
ad:87:6d:1f:b9:82:83:2d:1d:89:43:be:0a:37:19:
9e:89:1c:39:f4:ec:80:f8:e5:c9:3a:94:e0:24:a0:
98:bb:47:79:2a:0b:1b:31:13:92:d9:61:3a:62:d7:
73:cc:41:3c:fb:65:f0:49:f8:51:57:0d:1b:14:06:
2f:19:fd:df:69:74:35:99:e0:4b:ca:ee:87:9a:50:
82:c8:b1:8d:f6:57:ba:da:f0:23:64:a3:58:3d:b8:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F2:71:F9:84:1D:1C:2D:DB:99:1A:52:DA:0C:1F:42:BA:20:3E:ED
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32342d3234203d3e203232383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.82.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:6f:1a:e7:64:44:2a:f9:c1:c2:f9:83:85:96:ec:8a:c3:71:
4e:53:13:87:92:cb:e2:61:1e:da:2d:97:82:89:20:48:a2:1f:
b9:af:70:03:a9:f6:d0:bc:1e:6b:8c:ec:aa:46:27:db:ed:cb:
22:b2:af:31:ab:e9:b7:e1:30:d5:c7:0a:48:27:7a:26:de:3e:
d8:f7:bc:27:c9:0d:d3:cf:2a:80:1a:c8:55:6d:3e:53:23:b8:
a9:a8:26:59:c2:7c:f3:20:7a:cd:e8:e6:cb:d8:54:57:ab:23:
d9:4c:1e:3d:ef:87:31:31:fb:f7:aa:e6:52:ca:16:18:39:1d:
14:66:c7:10:d0:e1:8d:06:b2:3d:06:69:31:ea:5b:e7:11:0c:
d1:44:7d:8c:c4:fe:38:b2:c4:d2:aa:95:4a:82:8e:2b:c3:13:
31:db:89:ff:44:b3:b8:fb:32:90:6a:7a:77:a9:dd:5f:3d:a1:
2e:41:13:85:33:65:43:42:1d:23:f9:c9:4b:ad:07:84:6f:64:
52:74:5e:60:14:8b:fe:a2:37:71:20:3b:d5:b3:c9:20:99:28:
d7:4c:1c:27:7f:3f:c2:7d:42:f5:3d:f8:79:ef:6c:d2:cb:13:
11:86:21:f5:0e:e9:e9:0b:b6:5c:62:05:98:29:1b:6e:29:ac:
90:35:b9:d0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUUCMlaVP66UYcBRfjBnqD4fchgHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yMzA0MTIxMTIyMTBaFw0yNDA0MTAxMTI3MTBaMDMxMTAvBgNV
BAMTKEE2RjI3MUY5ODQxRDFDMkREQjk5MUE1MkRBMEMxRjQyQkEyMDNFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4KbyxciH/P5O5+wwmHQ9WQwj4
ZRNwj7q1nyg2bn0KKGbQUoUnuXAWHZMZm4QgdOU4k5vUCEYBMYPsOQJz9iNpNnvl
ajb6989MsRV8nM3jj9ewiRltqfXejClB6F1bzMBDLY3G1WiQImzNIRU/tn1KN07i
BOMlpsncYfW0zeqRbD5kOnUjnacM9FdmMngraBuUPDM/og1F7uQcGKOWvzZxlIiT
ya2HbR+5goMtHYlDvgo3GZ6JHDn07ID45ck6lOAkoJi7R3kqCxsxE5LZYTpi13PM
QTz7ZfBJ+FFXDRsUBi8Z/d9pdDWZ4EvK7oeaUILIsY32V7ra8CNko1g9uEBfAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUpvJx+YQdHC3bmRpS2gwfQrogPu0wHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM4
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzgzMjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1YtSMA0GCSqGSIb3DQEBCwUAA4IBAQCubxrnZEQq+cHC+YOFluyKw3FOUxOHksvi
YR7aLZeCiSBIoh+5r3ADqfbQvB5rjOyqRifb7csisq8xq+m34TDVxwpIJ3om3j7Y
97wnyQ3TzyqAGshVbT5TI7ipqCZZwnzzIHrN6ObL2FRXqyPZTB4974cxMfv3quZS
yhYYOR0UZscQ0OGNBrI9Bmkx6lvnEQzRRH2MxP44ssTSqpVKgo4rwxMx24n/RLO4
+zKQanp3qd1fPaEuQROFM2VDQh0j+clLrQeEb2RSdF5gFIv+ojdxIDvVs8kgmSjX
TBwnfz/CfUL1Pfh572zSyxMRhiH1DunpC7ZcYgWYKRtuKayQNbnQ
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:48 2025 by rpki-client