Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216394.roa
File: AS216394.roa (raw, json)
Hash identifier: ylb9WOTXLDZ40cPxQvw/MdZ4a9JYzVUjZKROD+GpbqE=
Subject key identifier: 4C:77:9E:4A:EB:29:1E:EF:39:1C:51:05:FA:85:0E:BE:0F:DD:79:68
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3CD1219057969553C66D6B6686FBACE9EBC9130B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216394.roa
Signing time: Tue 26 Sep 2023 19:55:09 +0000
ROA not before: Tue 26 Sep 2023 19:50:09 +0000
ROA not after: Tue 24 Sep 2024 19:55:09 +0000
asID: 216394
IP address blocks: 141.11.202.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d1:21:90:57:96:95:53:c6:6d:6b:66:86:fb:ac:e9:eb:c9:13:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 26 19:50:09 2023 GMT
Not After : Sep 24 19:55:09 2024 GMT
Subject: CN=4C779E4AEB291EEF391C5105FA850EBE0FDD7968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:af:f8:6b:93:24:68:a6:52:41:e0:fc:7a:
e6:54:6a:6e:68:aa:63:c3:c2:12:da:8f:48:9e:80:
56:be:c2:64:85:aa:70:e7:0f:c2:33:40:79:c7:07:
05:d5:f9:1f:97:ac:f6:c2:20:39:64:84:c0:f8:b7:
c9:4c:92:c7:ec:54:b3:0d:62:a8:26:1c:73:89:e0:
e4:a8:3c:02:bc:31:36:4f:95:73:42:4a:69:be:2a:
e2:78:04:cd:af:92:39:13:9b:a4:f4:b0:59:8b:8e:
24:28:b7:b6:fd:45:5f:65:be:8a:b3:45:6b:d1:f7:
e0:b1:01:da:31:43:98:56:c7:29:9a:72:64:4a:ea:
1c:ab:0e:83:a7:bc:8d:de:13:66:17:d3:59:73:b7:
0b:d4:bc:12:39:29:c4:fa:4b:42:da:1b:f9:00:42:
a9:79:35:a9:6f:49:ff:47:93:a7:27:fc:b0:d9:53:
4b:a6:61:50:da:82:3b:7a:11:bb:76:f4:07:41:7e:
ec:f2:e5:0d:29:f1:8e:8b:77:b5:03:d9:26:64:89:
8b:0d:6a:5a:32:aa:51:6e:2b:1b:c6:b3:1b:a4:32:
b6:ca:da:5a:75:ad:4e:68:cc:e1:82:01:3b:43:2d:
df:0a:55:4b:91:a5:d7:6f:5a:c8:80:61:cd:64:50:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:9E:4A:EB:29:1E:EF:39:1C:51:05:FA:85:0E:BE:0F:DD:79:68
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.202.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:04:e5:a0:2a:e7:08:5c:12:4c:f2:8f:4a:19:8c:25:a6:73:
6b:6e:66:51:28:1b:e6:0d:7a:f2:06:93:ff:41:76:5c:ed:ae:
b3:35:9c:e2:03:6b:2f:fa:7b:f3:65:67:e6:37:ef:ce:da:8f:
ba:77:f8:24:d9:8e:fa:44:05:1a:f5:92:ba:3f:4c:1b:d3:aa:
1f:c5:5b:9c:42:a2:8f:d9:12:fa:19:8f:05:02:f7:8b:cf:73:
ef:40:8f:9a:86:06:5a:86:bf:0c:df:f2:13:ad:e5:95:eb:35:
d9:58:67:22:89:4c:99:c6:1d:10:eb:96:af:ac:cb:41:d6:66:
24:a3:64:48:3c:15:2a:ca:05:64:68:1e:7d:88:fb:20:8f:94:
fa:73:c0:86:d8:23:ef:eb:df:4c:08:50:3d:b0:2b:5d:5a:cb:
79:c2:f5:91:32:4a:db:1f:a6:55:7b:8e:2f:3d:65:b1:db:43:
89:63:7f:6f:40:05:58:43:26:af:ab:82:e0:6d:04:dc:13:47:
38:9f:7a:62:af:c1:c9:35:46:cf:ce:62:42:c6:32:ff:c3:f9:
61:69:fc:b3:ed:36:e7:f1:7a:f9:79:e5:69:4e:a0:ea:8d:00:
6c:36:8b:73:cb:58:70:e7:84:03:91:bc:c8:aa:4e:90:31:68:
c2:31:07:7d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUPNEhkFeWlVPGbWtmhvus6evJEwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzA5MjYxOTUwMDlaFw0yNDA5MjQxOTU1MDlaMDMxMTAvBgNV
BAMTKDRDNzc5RTRBRUIyOTFFRUYzOTFDNTEwNUZBODUwRUJFMEZERDc5NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfa/4a5MkaKZSQeD8euZUam5o
qmPDwhLaj0iegFa+wmSFqnDnD8IzQHnHBwXV+R+XrPbCIDlkhMD4t8lMksfsVLMN
YqgmHHOJ4OSoPAK8MTZPlXNCSmm+KuJ4BM2vkjkTm6T0sFmLjiQot7b9RV9lvoqz
RWvR9+CxAdoxQ5hWxymacmRK6hyrDoOnvI3eE2YX01lztwvUvBI5KcT6S0LaG/kA
Qql5NalvSf9Hk6cn/LDZU0umYVDagjt6Ebt29AdBfuzy5Q0p8Y6Ld7UD2SZkiYsN
aloyqlFuKxvGsxukMrbK2lp1rU5ozOGCATtDLd8KVUuRpddvWsiAYc1kUJVpAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUTHeeSuspHu85HFEF+oUOvg/deWgwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjE2Mzk0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjQvK
MA0GCSqGSIb3DQEBCwUAA4IBAQBeBOWgKucIXBJM8o9KGYwlpnNrbmZRKBvmDXry
BpP/QXZc7a6zNZziA2sv+nvzZWfmN+/O2o+6d/gk2Y76RAUa9ZK6P0wb06ofxVuc
QqKP2RL6GY8FAveLz3PvQI+ahgZahr8M3/ITreWV6zXZWGciiUyZxh0Q65avrMtB
1mYko2RIPBUqygVkaB59iPsgj5T6c8CG2CPv699MCFA9sCtdWst5wvWRMkrbH6ZV
e44vPWWx20OJY39vQAVYQyavq4LgbQTcE0c4n3pir8HJNUbPzmJCxjL/w/lhafyz
7Tbn8Xr5eeVpTqDqjQBsNotzy1hw54QDkbzIqk6QMWjCMQd9
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:31 2025 by rpki-client