Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198767.roa
File: AS198767.roa (raw, json)
Hash identifier: BLYT5wjlSCmguTNqZtSYLNjhoiu7ABPgwPmvmldWqgU=
Subject key identifier: 77:5D:61:EC:2A:2C:51:1F:E3:BC:C6:A7:BB:BC:D4:BC:C5:EF:32:97
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 438FACD81FDAFCAE1286D41F4AD3B56879471254
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198767.roa
Signing time: Mon 08 May 2023 09:33:24 +0000
ROA not before: Mon 08 May 2023 09:28:24 +0000
ROA not after: Mon 06 May 2024 09:33:24 +0000
asID: 198767
IP address blocks: 141.11.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8f:ac:d8:1f:da:fc:ae:12:86:d4:1f:4a:d3:b5:68:79:47:12:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 8 09:28:24 2023 GMT
Not After : May 6 09:33:24 2024 GMT
Subject: CN=775D61EC2A2C511FE3BCC6A7BBBCD4BCC5EF3297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:6c:18:eb:2d:7b:ea:5c:12:e9:97:3f:a1:
bb:d9:df:84:a9:d7:09:06:27:66:36:96:ab:bb:6d:
0b:0c:2c:e4:bf:44:2d:6b:84:a0:91:18:fb:00:ca:
dc:31:da:30:3b:33:db:c3:65:1d:43:b5:3a:1a:9f:
4e:54:e3:5d:c7:68:30:c6:16:b6:48:c9:ed:45:93:
a7:71:99:d5:f7:25:3b:ee:89:fa:4e:21:5a:ee:9d:
3d:f6:17:82:3d:bb:c3:a8:e1:5c:56:50:50:65:f0:
b0:9c:d1:8a:8f:ef:f1:36:69:71:72:86:df:44:38:
87:e1:31:dc:48:f8:63:57:c1:62:32:d2:be:0b:81:
73:7d:ba:e4:e7:38:7b:56:9a:3c:d9:8f:b6:52:42:
a0:9d:92:1a:01:d0:93:f5:88:48:19:b9:9a:1d:84:
b1:f5:ea:5f:70:e2:37:41:02:f8:e0:c0:90:99:04:
ab:10:4d:e9:ff:8d:75:05:c3:bf:aa:5d:e4:ff:88:
87:7d:d5:09:34:3b:3d:12:e1:e5:d0:a1:63:de:8d:
c1:5b:1f:84:db:d9:61:ea:04:9d:65:b2:54:a0:c8:
97:5c:cc:b3:81:52:14:4d:2c:e1:37:1e:5d:61:98:
e2:4f:b0:47:5d:bb:95:87:36:5a:31:31:e6:a2:be:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:61:EC:2A:2C:51:1F:E3:BC:C6:A7:BB:BC:D4:BC:C5:EF:32:97
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS198767.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.242.0/24
Signature Algorithm: sha256WithRSAEncryption
90:60:bb:6e:7f:43:54:5f:5d:49:8a:61:8f:33:5b:62:bd:d3:
4e:c1:13:0b:11:f5:5e:53:51:da:b4:48:2c:bf:ef:cf:ec:2e:
1a:62:5d:e3:3f:f8:62:3f:17:9a:da:64:0d:b3:5b:4f:3a:5e:
49:37:73:5a:ec:07:0b:62:62:62:35:4d:89:aa:26:69:8b:48:
36:de:da:c1:2c:bf:88:6d:90:27:60:b1:e6:4b:28:e9:c0:e4:
ea:71:7b:ff:2b:c5:4a:95:f6:8e:a6:3b:f8:41:96:fa:30:a3:
3c:fe:b4:2f:66:52:2e:44:4d:34:73:8b:70:95:b2:6f:77:f8:
b3:50:06:9a:48:e6:9f:b1:3a:88:2b:5d:0b:8c:7a:d8:5c:7c:
39:98:b7:71:b9:cc:26:76:c2:d8:49:e0:41:5e:93:bc:47:10:
4b:fb:dc:99:6d:93:6a:aa:fc:e7:0c:8c:cf:2f:3a:ca:94:82:
90:35:ef:59:33:bd:b2:b4:97:cb:6b:8e:14:58:ed:d9:1b:e8:
40:e0:35:7b:71:b0:be:c8:0b:0a:3c:2d:04:81:11:6b:08:f6:
9e:92:50:9c:74:e9:e1:72:4b:eb:a5:ef:c0:3a:20:5e:7b:e8:
57:8f:cc:d6:10:87:97:55:c6:a6:20:82:77:95:3a:7c:91:24:
65:d5:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:07 2025 by rpki-client