Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39312e302f32342d3234203d3e203232383232.roa
File: 3231332e3133392e39312e302f32342d3234203d3e203232383232.roa (raw, json)
Hash identifier: NJjGtUSHvR24duLbUh315hMN2gQCpvq7o19N+8KZtPo=
Subject key identifier: 06:CA:EC:A5:58:AB:58:4A:41:FA:D4:BA:B0:A5:4E:79:E5:5E:AA:8C
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 610B606CF6FDB7CF3E8E2CC7ED44EC4DF11764DA
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39312e302f32342d3234203d3e203232383232.roa
Signing time: Wed 12 Apr 2023 11:27:10 +0000
ROA not before: Wed 12 Apr 2023 11:22:10 +0000
ROA not after: Wed 10 Apr 2024 11:27:10 +0000
asID: 22822
IP address blocks: 213.139.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0b:60:6c:f6:fd:b7:cf:3e:8e:2c:c7:ed:44:ec:4d:f1:17:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Apr 12 11:22:10 2023 GMT
Not After : Apr 10 11:27:10 2024 GMT
Subject: CN=06CAECA558AB584A41FAD4BAB0A54E79E55EAA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:f0:57:2a:c0:7b:ec:e5:ed:68:19:49:16:
91:a1:e2:1e:2a:c4:3a:41:f5:f6:c6:ab:bc:2e:6d:
6b:74:de:53:70:b0:51:06:bc:5f:8b:3a:42:7b:88:
7b:b1:fa:3c:09:90:37:70:40:1b:3f:26:89:ff:5d:
e3:30:7c:06:10:c1:16:8c:96:c2:e8:5d:fa:a3:b0:
dd:91:b4:43:b9:50:d8:37:79:6d:de:32:ca:4b:f5:
2a:58:56:e0:c7:8d:b8:6f:14:5e:69:5a:fc:e8:34:
3e:b1:16:20:d9:af:b6:a1:39:50:f5:60:e9:32:01:
7a:b8:a9:eb:ec:aa:eb:58:9f:a1:b8:0c:97:6c:e4:
66:a0:9c:75:44:d2:71:f9:92:30:56:1c:23:fa:2c:
09:ba:14:0d:40:af:47:73:f9:0a:66:9c:ab:a7:b2:
78:54:74:f6:8f:71:02:de:41:96:80:76:96:b7:51:
88:fe:b7:a2:83:0a:37:9a:04:0f:50:15:f4:57:79:
56:8c:c1:3a:65:ec:78:6d:91:7c:4c:20:03:b1:0b:
c9:55:db:2d:88:ec:10:70:ce:6e:30:15:c9:7d:e4:
40:76:ed:19:e3:65:77:ea:81:b5:f4:75:18:80:78:
7f:2e:26:73:37:d0:d5:98:23:72:d6:f0:93:5e:ea:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CA:EC:A5:58:AB:58:4A:41:FA:D4:BA:B0:A5:4E:79:E5:5E:AA:8C
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39312e302f32342d3234203d3e203232383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.91.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9f:07:1b:3b:4b:a2:f2:93:c6:c0:55:24:c1:67:29:1d:42:
37:6c:7d:9a:43:fc:b3:cf:b3:05:1b:6d:93:cf:12:f6:bd:9a:
4e:d7:30:e6:b8:d6:25:61:06:60:a1:42:5c:10:fa:2c:29:8d:
9d:81:0b:34:3a:c0:6e:df:e9:6f:9d:6a:85:c6:e6:1e:d2:a4:
a2:55:c3:16:85:32:6b:6c:8e:84:05:3f:e2:e9:ac:95:4c:66:
ce:d6:b5:4b:cd:98:e7:0c:eb:17:89:e5:6a:3d:bd:1c:4f:d0:
10:54:1d:b3:25:85:6f:84:a8:ce:a2:58:7b:25:78:ca:ff:81:
0b:5e:d1:b3:6c:29:bd:68:2b:ff:c8:65:23:3c:18:63:87:1f:
02:5b:a7:a5:f3:34:79:df:d3:a5:c7:ca:df:2e:15:0d:b0:79:
ad:e3:ac:f0:04:5a:f9:98:63:6a:60:d1:44:1c:4c:62:68:49:
a0:4a:fd:61:23:57:82:86:b5:b2:02:3c:60:71:af:02:7c:30:
33:b3:6b:a6:6a:11:8e:1d:fa:f7:31:9e:93:5b:a0:37:97:4a:
aa:1a:6c:66:30:64:e7:d1:21:85:2c:b0:f5:e8:da:43:a5:0d:
48:dc:b9:51:24:d9:4c:04:00:ce:0e:06:9c:74:15:12:fc:f6:
bc:11:bc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:30 2025 by rpki-client