Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e2033323537.roa
File: 39332e39322e32322e302f32332d3234203d3e2033323537.roa (raw, json)
Hash identifier: Cmxe1RE50Ocaqcpjr3i+M1T2uIZzbGGyWktXKMe72e0=
Subject key identifier: ED:81:92:37:9D:FE:36:A3:46:36:9C:DF:29:2E:19:EF:44:0B:FC:A1
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 6FA7C541C522C4BB4EEEE08F9DC056DFFFE24240
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e2033323537.roa
Signing time: Wed 14 Jun 2023 20:30:18 +0000
ROA not before: Wed 14 Jun 2023 20:25:18 +0000
ROA not after: Wed 12 Jun 2024 20:30:18 +0000
asID: 3257
IP address blocks: 93.92.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a7:c5:41:c5:22:c4:bb:4e:ee:e0:8f:9d:c0:56:df:ff:e2:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Jun 14 20:25:18 2023 GMT
Not After : Jun 12 20:30:18 2024 GMT
Subject: CN=ED8192379DFE36A346369CDF292E19EF440BFCA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:48:38:2c:3d:4a:b2:f7:6c:86:28:2d:7e:5b:
b5:14:ca:f4:c9:fa:1d:ee:a2:8c:6b:3b:fd:e6:43:
7e:2a:f6:01:34:8d:e0:96:ab:8f:41:4b:ad:39:e9:
7a:bb:ab:ec:5f:fa:46:7c:a1:20:a6:a8:8d:c5:71:
83:b3:8e:e8:d0:85:c6:a6:b0:3a:a1:83:1b:d7:4c:
86:44:40:29:04:36:18:d5:b0:92:7a:33:ee:26:3d:
77:66:49:04:2f:09:b2:5c:19:43:83:9d:1e:17:45:
2b:b8:59:e1:4a:5a:3a:e0:53:17:01:b6:b1:47:b7:
2a:ec:54:87:f5:20:88:b9:c4:13:f6:85:c7:c3:94:
0d:e5:3a:52:81:eb:73:b8:34:09:98:69:b3:62:4b:
58:29:ce:0d:ac:a2:7f:78:cb:38:1e:4a:e3:97:6a:
a2:db:38:82:7b:b6:4f:53:13:28:f0:7a:23:17:66:
77:66:a7:ff:86:3f:36:46:89:e1:75:83:65:14:39:
c6:ec:cb:10:68:bc:c0:57:45:0f:d6:cf:23:0f:a0:
81:7d:fe:20:9e:5c:79:a2:5e:04:aa:1b:56:03:e2:
8a:fa:14:de:8e:de:8f:02:12:b6:eb:5b:0d:44:1a:
eb:3a:f5:2a:b8:11:0c:a9:33:0d:fa:25:d3:db:72:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:81:92:37:9D:FE:36:A3:46:36:9C:DF:29:2E:19:EF:44:0B:FC:A1
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32322e302f32332d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.22.0/23
Signature Algorithm: sha256WithRSAEncryption
07:34:37:f2:6a:cb:fc:5c:9a:5d:0a:1d:48:7e:29:e3:4d:3b:
b9:de:a2:ad:bb:b6:18:6b:cd:52:ea:57:dc:b9:3f:80:8f:37:
9d:02:6e:35:ae:d4:5c:a8:89:19:c4:d3:d1:fc:54:c6:b2:52:
0d:4c:1e:08:d3:56:00:eb:a8:1f:10:cf:be:0e:b1:e4:11:2c:
ff:ab:dd:16:7b:50:29:27:56:d1:75:40:e1:a2:bb:28:98:fc:
bc:28:ba:13:66:09:e0:81:a3:de:6d:a5:d0:d0:b1:70:58:15:
e1:e8:74:07:d2:ae:cc:59:ae:8b:4c:38:7f:c6:61:eb:f8:9d:
10:7a:bb:40:1d:97:0c:08:00:a9:73:0e:6d:d1:7a:61:fb:70:
f5:1d:4c:d5:98:f0:48:22:64:c0:e5:7b:ef:3a:17:7d:a0:1c:
e8:4f:28:33:23:95:d9:e8:c2:7b:17:dc:26:44:dc:08:90:f9:
5a:6e:06:f8:76:04:01:94:32:a3:a2:2a:85:fe:44:60:cf:c1:
68:0c:03:0a:93:6c:00:1e:ea:45:f3:7c:9c:47:be:23:7e:34:
00:b7:ac:68:dc:5c:9c:41:6e:2b:4d:c6:3b:e8:87:5c:d4:4f:
6b:4d:aa:3c:3a:92:44:96:8e:8b:cc:86:bf:76:17:65:63:30:
0a:4f:94:da
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUb6fFQcUixLtO7uCPncBW3//iQkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm
YWRhMzQ0NDAeFw0yMzA2MTQyMDI1MThaFw0yNDA2MTIyMDMwMThaMDMxMTAvBgNV
BAMTKEVEODE5MjM3OURGRTM2QTM0NjM2OUNERjI5MkUxOUVGNDQwQkZDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6SDgsPUqy92yGKC1+W7UUyvTJ
+h3uooxrO/3mQ34q9gE0jeCWq49BS6056Xq7q+xf+kZ8oSCmqI3FcYOzjujQhcam
sDqhgxvXTIZEQCkENhjVsJJ6M+4mPXdmSQQvCbJcGUODnR4XRSu4WeFKWjrgUxcB
trFHtyrsVIf1IIi5xBP2hcfDlA3lOlKB63O4NAmYabNiS1gpzg2son94yzgeSuOX
aqLbOIJ7tk9TEyjweiMXZndmp/+GPzZGieF1g2UUOcbsyxBovMBXRQ/WzyMPoIF9
/iCeXHmiXgSqG1YD4or6FN6O3o8CErbrWw1EGus69Sq4EQypMw36JdPbcrtJAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU7YGSN53+NqNGNpzfKS4Z70QL/KEwHwYDVR0j
BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5
NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y
YU5FUS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYt
NjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5NDMxLzEvMzkzMzJlMzkzMjJlMzIzMjJl
MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXVwWMA0G
CSqGSIb3DQEBCwUAA4IBAQAHNDfyasv8XJpdCh1IfinjTTu53qKtu7YYa81S6lfc
uT+AjzedAm41rtRcqIkZxNPR/FTGslINTB4I01YA66gfEM++DrHkESz/q90We1Ap
J1bRdUDhorsomPy8KLoTZgnggaPebaXQ0LFwWBXh6HQH0q7MWa6LTDh/xmHr+J0Q
ertAHZcMCACpcw5t0Xph+3D1HUzVmPBIImTA5XvvOhd9oBzoTygzI5XZ6MJ7F9wm
RNwIkPlabgb4dgQBlDKjoiqF/kRgz8FoDAMKk2wAHupF83ycR74jfjQAt6xo3Fyc
QW4rTcY76Idc1E9rTao8OpJElo6LzIa/dhdlYzAKT5Ta
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:15 2025 by rpki-client