Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32342d3234203d3e203439393939.roa
File: 3231332e3133392e38322e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: TuUPpcr1gwCryHFYqT/m0gJsxzKvCH8L1OY5PTZOdMs=
Subject key identifier: AE:C4:A3:EA:F0:51:D2:26:D8:6F:F8:04:CC:CB:BE:6C:A6:A0:46:8F
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 7A8DDDD10E729CE3DC5AD06D4AA50D2E57901C5D
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32342d3234203d3e203439393939.roa
Signing time: Wed 25 Jan 2023 13:01:51 +0000
ROA not before: Wed 25 Jan 2023 12:56:51 +0000
ROA not after: Wed 24 Jan 2024 13:01:51 +0000
asID: 49999
IP address blocks: 213.139.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8d:dd:d1:0e:72:9c:e3:dc:5a:d0:6d:4a:a5:0d:2e:57:90:1c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jan 25 12:56:51 2023 GMT
Not After : Jan 24 13:01:51 2024 GMT
Subject: CN=AEC4A3EAF051D226D86FF804CCCBBE6CA6A0468F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ad:e1:a3:b3:fc:a9:69:3b:c8:77:3b:83:78:
e7:e0:6b:34:dc:91:57:37:0d:6f:49:77:72:8d:0e:
e1:94:bd:f9:0e:a8:fd:7a:54:9c:a3:bc:73:d9:98:
74:4e:7e:6f:f6:27:81:d3:76:4d:07:0c:9f:e6:4b:
8e:09:3a:56:fb:73:56:67:50:c0:91:71:01:5b:d4:
af:df:2d:f8:56:a0:ea:58:b5:c6:d2:a0:23:0b:cc:
e8:12:0f:4e:71:ed:49:3a:9b:3a:a5:c9:31:90:82:
91:60:d0:03:36:9a:54:75:76:09:59:b8:bd:9f:d8:
e4:c6:cd:ec:33:85:78:8c:a5:25:08:43:10:27:fb:
a5:21:e8:7e:08:0b:97:3b:4e:f1:5a:f2:03:12:42:
c8:37:c5:54:95:92:37:36:a9:69:1b:3e:64:18:82:
84:3e:26:51:d9:50:cf:ef:06:df:43:a5:4d:89:d3:
8e:fb:29:ce:c2:54:19:c0:38:7a:fe:02:0c:c6:01:
16:68:5b:cd:70:68:ee:7d:12:86:97:b7:fb:2d:b6:
9a:73:3d:86:50:c2:56:64:de:ed:46:bc:b7:eb:ef:
1e:a0:e0:8d:a6:2d:28:6b:5b:05:9b:8e:0b:62:48:
a7:a8:d3:a4:51:2c:eb:d2:cf:91:17:51:15:1b:45:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:A3:EA:F0:51:D2:26:D8:6F:F8:04:CC:CB:BE:6C:A6:A0:46:8F
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38322e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.82.0/24
Signature Algorithm: sha256WithRSAEncryption
73:95:d3:62:59:2e:e4:c1:71:57:d3:a7:df:88:e6:79:9b:6a:
8e:c3:d0:93:7b:35:72:0e:fc:92:d1:a0:86:4b:e9:af:23:b2:
3d:c5:16:16:c5:e0:f7:66:f5:ba:a7:7e:35:db:cb:7b:c1:cb:
35:c7:58:74:00:49:3e:42:88:83:4e:0a:8a:d8:37:2c:43:4e:
43:31:40:2a:55:78:a9:c3:cd:ce:24:35:29:97:87:70:0b:70:
db:a8:88:66:be:de:33:3c:85:9c:4c:e4:eb:f6:c2:9d:c4:51:
10:9d:8e:84:13:11:fe:93:da:ab:7f:23:27:50:df:f1:c5:78:
71:bd:44:8f:00:28:9a:33:e2:3a:75:23:57:85:8f:c9:e1:68:
f8:9a:d9:5d:b9:c3:80:53:04:c9:5a:c3:14:c1:4c:b1:f6:88:
f6:6c:ff:a3:61:c5:36:dc:56:eb:2a:82:4f:21:39:c0:c3:4c:
5b:39:5b:5f:f2:ff:19:d9:af:88:0f:56:dd:6e:29:a4:36:53:
1a:db:8c:a1:c2:60:53:76:80:12:3a:cb:b7:4a:98:d5:dd:75:
5e:7f:13:23:3d:82:2c:cf:e0:78:4b:0c:e3:38:be:48:7a:43:
2c:d2:97:87:1e:78:ea:95:55:5b:0a:a3:32:1a:72:dc:7a:22:
bd:63:4d:b5
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeo3d0Q5ynOPcWtBtSqUNLleQHF0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjY4M2YyZWI1MGM1OTk5YTc3NDU2ZTg4MjY4MzE2MDlk
NDhjN2QzZTAeFw0yMzAxMjUxMjU2NTFaFw0yNDAxMjQxMzAxNTFaMDMxMTAvBgNV
BAMTKEFFQzRBM0VBRjA1MUQyMjZEODZGRjgwNENDQ0JCRTZDQTZBMDQ2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMreGjs/ypaTvIdzuDeOfgazTc
kVc3DW9Jd3KNDuGUvfkOqP16VJyjvHPZmHROfm/2J4HTdk0HDJ/mS44JOlb7c1Zn
UMCRcQFb1K/fLfhWoOpYtcbSoCMLzOgSD05x7Uk6mzqlyTGQgpFg0AM2mlR1dglZ
uL2f2OTGzewzhXiMpSUIQxAn+6Uh6H4IC5c7TvFa8gMSQsg3xVSVkjc2qWkbPmQY
goQ+JlHZUM/vBt9DpU2J0477Kc7CVBnAOHr+AgzGARZoW81waO59EoaXt/sttppz
PYZQwlZk3u1GvLfr7x6g4I2mLShrWwWbjgtiSKeo06RRLOvSz5EXURUbRSEpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUrsSj6vBR0ibYb/gEzMu+bKagRo8wHwYDVR0j
BBgwFoAUtoPy61DFmZp3RW6IJoMWCdSMfT4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmItYjY2MC00ODlkLTllOWYtOTQwMmU5ZTJj
MmUyLzAvQjY4M0YyRUI1MEM1OTk5QTc3NDU2RTg4MjY4MzE2MDlENDhDN0QzRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3RvUHk2MURGbVpwM1JXNklKb01XQ2RT
TWZUNC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTAxYzE0ZmIt
YjY2MC00ODlkLTllOWYtOTQwMmU5ZTJjMmUyLzAvMzIzMTMzMmUzMTMzMzkyZTM4
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM5MzkzOTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
1YtSMA0GCSqGSIb3DQEBCwUAA4IBAQBzldNiWS7kwXFX06ffiOZ5m2qOw9CTezVy
DvyS0aCGS+mvI7I9xRYWxeD3ZvW6p34128t7wcs1x1h0AEk+QoiDTgqK2DcsQ05D
MUAqVXipw83OJDUpl4dwC3DbqIhmvt4zPIWcTOTr9sKdxFEQnY6EExH+k9qrfyMn
UN/xxXhxvUSPACiaM+I6dSNXhY/J4Wj4mtlducOAUwTJWsMUwUyx9oj2bP+jYcU2
3FbrKoJPITnAw0xbOVtf8v8Z2a+ID1bdbimkNlMa24yhwmBTdoASOsu3SpjV3XVe
fxMjPYIsz+B4SwzjOL5IekMs0peHHnjqlVVbCqMyGnLceiK9Y021
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:49 2025 by rpki-client