Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211376.roa
File: AS211376.roa (raw, json)
Hash identifier: BuZxdJNEF1SsTfQs/cu9cSVzkg/DVq67J1Hf7pJgmT0=
Subject key identifier: 3F:B3:94:B0:E8:03:A1:FC:14:89:73:95:D2:7C:5B:81:8D:49:38:8A
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 31779EBE83D0EB110C647458DF13BB3A22F1F2B7
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211376.roa
Signing time: Tue 28 Nov 2023 15:05:05 +0000
ROA not before: Tue 28 Nov 2023 15:00:05 +0000
ROA not after: Tue 26 Nov 2024 15:05:05 +0000
asID: 211376
IP address blocks: 141.11.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:77:9e:be:83:d0:eb:11:0c:64:74:58:df:13:bb:3a:22:f1:f2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 28 15:00:05 2023 GMT
Not After : Nov 26 15:05:05 2024 GMT
Subject: CN=3FB394B0E803A1FC14897395D27C5B818D49388A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:02:6b:bb:5d:2f:d5:50:b0:f0:fd:da:4b:
4f:83:fb:61:12:3c:58:b7:e5:43:18:cc:ff:55:e7:
eb:98:29:48:95:b2:60:5f:36:20:47:3c:07:e5:11:
41:b9:aa:8e:37:2f:32:cd:b0:b1:89:84:a5:a5:28:
96:47:64:9b:2e:ed:8c:9a:f6:ac:fc:73:8e:e2:d7:
c6:48:3a:cd:4f:bb:84:66:d3:2e:af:dd:9e:bb:fe:
3d:67:d7:8a:24:fa:88:4f:73:27:b1:05:d8:30:e7:
1f:79:f3:1b:a8:da:24:bd:ec:46:2e:f2:82:59:a7:
75:95:19:fc:62:29:4e:e6:0a:c1:f2:2d:7c:e4:bb:
fb:74:5c:9c:2e:66:e1:bf:e7:9e:5e:8e:5e:d4:19:
0c:23:84:4f:2b:ae:26:17:8c:48:6d:97:d4:1c:f1:
e7:78:4f:77:ca:3f:9f:11:ee:be:1a:55:4b:9c:ad:
29:fe:37:7f:df:a0:80:fd:cd:98:bb:9a:ea:50:1e:
68:4f:c0:4d:0c:50:6d:61:90:a6:c0:89:51:25:ec:
d6:03:c7:6e:d8:87:5d:41:58:f4:78:9a:f2:53:74:
f1:e3:9d:ca:4d:2a:eb:44:3d:d3:a8:8a:e0:3b:de:
96:81:6e:52:47:0e:c1:87:32:8e:5c:97:6a:63:ad:
0b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B3:94:B0:E8:03:A1:FC:14:89:73:95:D2:7C:5B:81:8D:49:38:8A
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS211376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:fc:bf:d4:cb:99:88:52:48:3b:99:68:64:c4:ff:98:4d:b6:
cd:a6:8d:7f:26:cd:da:96:a0:1f:b6:ba:2b:9f:47:67:15:06:
1c:07:30:dd:48:5b:f0:ca:1a:72:77:33:2e:5f:64:ae:56:92:
22:8e:21:70:e2:09:b0:fe:95:ef:b7:db:8e:f5:f3:f0:f8:1c:
0a:c2:a6:b5:b6:b1:f6:57:f3:fc:14:ed:87:71:ee:b8:0a:9c:
dc:65:e3:d0:06:5d:19:de:3e:e1:0a:84:d1:d6:34:c1:38:26:
24:5c:34:cb:2f:24:37:11:06:cb:d4:88:14:5b:ec:14:ee:7c:
7d:f7:b5:3d:09:42:09:30:9e:57:8a:04:7c:33:30:4c:c4:29:
cd:52:fc:3b:d9:c6:ea:ba:37:55:a9:44:d5:68:c9:5c:89:be:
11:78:89:3b:62:01:e3:7d:9e:ad:4c:81:ea:0c:a2:05:9d:53:
66:20:6c:b8:a0:10:43:03:06:eb:3c:ab:e4:cd:8c:a9:37:bf:
4a:f9:b6:d5:d0:10:61:04:28:aa:d1:e4:83:dd:67:b8:92:4a:
59:7d:b6:bc:9e:b7:8b:bc:fe:9b:dd:d5:cd:92:67:74:e6:79:
50:db:f4:41:c0:61:d7:b8:a0:5c:f4:56:14:1f:fd:99:7f:b7:
f2:47:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:30 2025 by rpki-client