Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213316.roa
File: AS213316.roa (raw, json)
Hash identifier: zt2Jy6obfnfd/1bQ4fPonD4/AmeTNU+gdrwz3ShgDLA=
Subject key identifier: 99:8D:D2:66:4D:B0:99:7C:75:4A:95:45:25:17:38:50:71:DB:06:74
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6E57C51D9C57CB2E6C7DE8CF50F2F6C98E35E6D7
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213316.roa
Signing time: Sun 12 Feb 2023 09:23:40 +0000
ROA not before: Sun 12 Feb 2023 09:18:40 +0000
ROA not after: Sun 11 Feb 2024 09:23:40 +0000
asID: 213316
IP address blocks: 141.11.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:57:c5:1d:9c:57:cb:2e:6c:7d:e8:cf:50:f2:f6:c9:8e:35:e6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 12 09:18:40 2023 GMT
Not After : Feb 11 09:23:40 2024 GMT
Subject: CN=998DD2664DB0997C754A95452517385071DB0674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:be:2b:32:5c:50:0c:35:a3:59:d7:62:06:
34:bb:2e:8d:ab:05:65:b3:50:7d:7b:c1:e0:55:25:
88:1c:9e:0c:73:46:c5:da:9c:2f:e8:1d:80:2b:3f:
c3:cd:f9:0d:6f:08:4c:81:63:a8:26:37:aa:c2:bd:
bd:00:e0:bd:20:74:9f:6a:2d:2c:68:7b:fc:64:d3:
f2:a9:cb:20:8e:e5:84:d7:f8:bd:14:15:59:63:99:
7e:84:ab:a8:16:c1:42:aa:56:f8:a7:57:62:12:39:
fa:0f:a1:ef:a6:67:7a:2b:2a:92:3e:e3:09:05:4e:
03:be:50:ef:25:9c:84:52:3a:62:40:5e:d1:f1:1c:
37:8f:3a:4d:d4:a3:de:2d:11:02:e5:82:74:54:e6:
72:9f:af:89:cd:3f:36:0e:39:04:53:fa:e6:f6:e3:
13:f6:fd:8a:63:e7:00:8b:d0:69:5d:9b:9a:8f:56:
5e:1e:eb:89:8d:a0:61:6c:fa:13:a9:d9:8c:40:61:
a2:a2:45:b0:6a:c1:89:b4:66:58:fe:a8:22:88:f8:
ad:75:25:86:29:a3:96:1f:46:fb:74:b3:90:54:cb:
dd:41:75:cb:2e:25:03:5b:35:67:68:5d:16:6e:fd:
78:e5:a1:be:24:ba:4a:08:7b:48:c9:45:9e:fd:0c:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8D:D2:66:4D:B0:99:7C:75:4A:95:45:25:17:38:50:71:DB:06:74
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS213316.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.0.0/24
Signature Algorithm: sha256WithRSAEncryption
52:28:1f:cb:1b:fc:14:f7:83:cb:68:d4:5a:f6:8f:b8:df:6b:
0a:b6:00:62:5b:33:45:1e:65:f1:1b:eb:ef:cd:19:c8:8f:63:
2a:10:ad:8c:d2:a3:ba:1a:7f:45:ac:b3:3e:de:23:c3:6a:ea:
84:78:89:2b:89:58:cb:08:14:e7:31:c6:5d:c6:da:80:31:b2:
c5:38:72:9e:0e:ec:b5:76:af:c9:cd:af:ff:66:9e:cf:5b:c3:
e4:61:47:b6:5c:97:a2:a1:84:86:d9:f0:1c:e3:69:7e:aa:56:
0d:e5:d5:b8:3a:25:bd:77:94:50:c8:0d:d7:2e:0b:7a:02:43:
ab:e1:5e:1d:26:0b:37:5b:c9:e8:f8:3c:2c:ab:95:f0:de:1d:
fa:e8:65:9a:2e:7e:5f:70:22:00:dc:f6:d6:a4:80:65:9c:4d:
ed:1e:37:00:10:3c:fc:67:40:04:64:15:13:9c:8f:0a:a1:fa:
4f:b2:ad:42:96:17:bf:23:a3:c9:db:e9:cf:0a:5c:e8:52:a2:
89:e4:4d:fe:ce:03:1c:ba:00:e5:c6:54:38:10:2b:b9:ee:b9:
20:88:52:67:53:76:3b:3d:a6:78:72:e5:46:9f:94:da:ab:ac:
c2:5b:be:b0:5e:c7:0b:ff:57:a6:f2:27:e3:be:35:34:48:47:
96:87:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:51 2025 by rpki-client