Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: iziIETJwR0Ens86M1/mW1z6nTyvbXDarqdhbD/J51DA=
Subject key identifier: 02:F2:14:47:7D:AF:0B:59:C0:6A:89:70:8D:39:51:72:7C:9C:8B:F2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 55EFF330F7D91259951C2BD67BFA999785DC9C1F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS2914.roa
Signing time: Tue 27 Dec 2022 14:44:38 +0000
ROA not before: Tue 27 Dec 2022 14:39:38 +0000
ROA not after: Tue 26 Dec 2023 14:44:38 +0000
asID: 2914
IP address blocks: 141.11.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ef:f3:30:f7:d9:12:59:95:1c:2b:d6:7b:fa:99:97:85:dc:9c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 27 14:39:38 2022 GMT
Not After : Dec 26 14:44:38 2023 GMT
Subject: CN=02F214477DAF0B59C06A89708D3951727C9C8BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:fe:fc:76:e1:3c:da:8c:90:3d:77:c6:cd:
e5:b1:60:fb:d1:13:64:17:9d:a8:f9:45:7b:c9:41:
e6:45:88:b2:28:c2:35:f7:88:5b:38:06:fb:a6:bf:
c6:fc:c7:59:46:b4:4f:cf:26:42:85:f3:a6:d6:05:
f9:22:8d:6f:15:3f:57:9b:17:00:29:1b:16:2b:12:
a5:09:35:1b:37:09:4b:02:00:4e:3e:27:a2:7b:3e:
5c:44:a5:4c:3f:cc:58:b5:49:1b:02:f3:fc:60:92:
65:85:79:f1:e2:d2:26:5c:43:08:68:16:ce:09:fb:
2d:20:47:93:0e:7b:c7:9f:e6:45:52:28:81:82:28:
82:6e:c7:16:f8:b8:c7:b7:a1:0b:c3:69:8c:fb:12:
f4:ec:18:28:a2:b2:03:e1:2b:75:66:3d:97:a1:cb:
43:42:fa:cf:45:8c:0e:b5:ef:16:eb:db:42:1d:fe:
00:fa:71:7b:e1:a3:dc:71:a7:c4:1d:9c:28:63:49:
68:ca:1f:26:a2:85:0a:5d:0f:1b:7c:6b:09:bb:c9:
10:c0:20:2c:fa:7d:15:23:27:b0:2b:0f:35:6f:08:
3a:c9:00:d3:bf:f8:31:65:f5:8d:56:44:eb:71:8c:
ef:97:db:4b:bd:16:e8:01:96:38:5a:f2:2f:6c:81:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F2:14:47:7D:AF:0B:59:C0:6A:89:70:8D:39:51:72:7C:9C:8B:F2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.22.0/24
Signature Algorithm: sha256WithRSAEncryption
41:68:ce:20:bb:2e:09:30:e2:01:32:70:6b:a4:69:7d:1f:62:
a2:cd:b9:ac:64:75:48:62:ee:d3:14:d3:a9:dc:9f:43:77:97:
fb:2b:92:a9:76:be:cd:b5:f0:99:17:7e:de:8c:45:54:48:df:
48:08:4d:a1:82:9a:86:99:1e:a0:f0:55:aa:8a:46:60:a9:33:
06:bb:95:f2:2e:3f:f9:5c:45:bb:f4:7f:12:d4:e2:4c:6a:b1:
c0:02:18:20:45:64:e6:d4:dd:6e:98:ec:72:3e:d9:2b:c3:6d:
2b:f8:bf:1d:c1:96:5e:9d:26:6c:89:8d:41:d6:5f:b3:96:05:
f3:02:bc:b5:0c:36:bf:e2:e5:0a:73:4e:29:75:3a:1b:76:91:
d4:17:26:2e:1d:f2:58:ac:92:76:33:46:f6:5d:0c:73:c4:97:
82:cb:21:f0:8c:b7:34:fb:82:8f:a4:05:ee:2c:a4:13:f2:f0:
24:3d:0b:44:de:cd:dc:cb:d5:34:44:dc:43:64:dc:2e:d8:5b:
ce:9b:96:1b:63:ec:c1:e2:f7:45:c5:6f:d2:9d:56:f1:4f:a4:
0f:25:2f:7b:36:a9:86:8e:96:dc:3c:02:2a:79:df:ba:91:35:
a6:b5:fd:88:2c:6f:db:21:c3:f4:f6:66:fa:51:41:a8:9c:69:
2e:15:d1:1f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUVe/zMPfZElmVHCvWe/qZl4XcnB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMjEyMjcxNDM5MzhaFw0yMzEyMjYxNDQ0MzhaMDMxMTAvBgNV
BAMTKDAyRjIxNDQ3N0RBRjBCNTlDMDZBODk3MDhEMzk1MTcyN0M5QzhCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCz/78duE82oyQPXfGzeWxYPvR
E2QXnaj5RXvJQeZFiLIowjX3iFs4Bvumv8b8x1lGtE/PJkKF86bWBfkijW8VP1eb
FwApGxYrEqUJNRs3CUsCAE4+J6J7PlxEpUw/zFi1SRsC8/xgkmWFefHi0iZcQwho
Fs4J+y0gR5MOe8ef5kVSKIGCKIJuxxb4uMe3oQvDaYz7EvTsGCiisgPhK3VmPZeh
y0NC+s9FjA617xbr20Id/gD6cXvho9xxp8QdnChjSWjKHyaihQpdDxt8awm7yRDA
ICz6fRUjJ7ArDzVvCDrJANO/+DFl9Y1WROtxjO+X20u9FugBljha8i9sgTWFAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUAvIUR32vC1nAaolwjTlRcnyci/IwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LFjAN
BgkqhkiG9w0BAQsFAAOCAQEAQWjOILsuCTDiATJwa6RpfR9ios25rGR1SGLu0xTT
qdyfQ3eX+yuSqXa+zbXwmRd+3oxFVEjfSAhNoYKahpkeoPBVqopGYKkzBruV8i4/
+VxFu/R/EtTiTGqxwAIYIEVk5tTdbpjscj7ZK8NtK/i/HcGWXp0mbImNQdZfs5YF
8wK8tQw2v+LlCnNOKXU6G3aR1BcmLh3yWKySdjNG9l0Mc8SXgssh8Iy3NPuCj6QF
7iykE/LwJD0LRN7N3MvVNETcQ2TcLthbzpuWG2PsweL3RcVv0p1W8U+kDyUvezap
ho6W3DwCKnnfupE1prX9iCxv2yHD9PZm+lFBqJxpLhXRHw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:43 2025 by rpki-client