Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e20333937323730.roa
File: 39312e3233352e3230352e302f32342d3234203d3e20333937323730.roa (raw, json)
Hash identifier: dj1tc45mnfjAFLnhBZvDOFnsBoT5ZVzFiLwyMlRBwT0=
Subject key identifier: 58:D7:C5:E4:BD:49:03:6F:34:02:A1:02:3D:5E:72:56:B4:CA:93:44
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 4A38F9BD76578F702E94E085837241A11C5EB4F0
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e20333937323730.roa
Signing time: Tue 06 Jun 2023 13:41:32 +0000
ROA not before: Tue 06 Jun 2023 13:36:32 +0000
ROA not after: Tue 04 Jun 2024 13:41:32 +0000
asID: 397270
IP address blocks: 91.235.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:38:f9:bd:76:57:8f:70:2e:94:e0:85:83:72:41:a1:1c:5e:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Jun 6 13:36:32 2023 GMT
Not After : Jun 4 13:41:32 2024 GMT
Subject: CN=58D7C5E4BD49036F3402A1023D5E7256B4CA9344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ce:fe:f8:c5:35:5b:04:34:e5:0a:78:4f:3e:
a0:59:58:de:5f:ad:6f:07:c6:58:f3:ff:72:f7:52:
7b:28:67:64:5c:0b:b9:3f:e0:12:2c:1e:fb:c0:3d:
11:8a:be:57:c2:07:96:68:bb:31:23:ce:35:22:5f:
3b:82:fe:b9:5f:e9:79:fa:7a:27:20:77:d8:3a:14:
75:a9:5d:f7:d1:2f:ea:73:81:0f:30:fa:be:59:0a:
49:3a:90:02:d9:bd:34:16:3c:2e:57:88:0c:82:12:
56:89:1e:8b:ac:74:d9:2d:4f:f5:a9:24:c8:81:08:
33:b0:b9:54:a7:dc:64:03:ca:8c:2d:35:e7:90:d9:
72:d9:8a:49:d1:e7:43:17:db:68:78:44:af:bf:ce:
b7:fc:66:05:d5:84:f5:4e:f9:dd:6b:5f:95:4b:01:
39:79:ea:34:ab:23:fd:dd:fa:a4:92:e1:c0:21:f9:
ad:69:32:2f:80:a3:a3:51:e6:e1:eb:3c:0c:e1:63:
88:62:1e:06:3d:e6:b5:10:66:0c:de:70:52:ce:78:
1c:65:ea:a9:84:b2:09:1d:3a:41:a0:55:74:1e:4d:
c3:e9:34:49:6d:57:91:ce:c6:6e:d1:bd:19:b0:32:
77:cd:84:ea:3a:2b:ba:30:c7:b6:d1:1a:ec:35:f7:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:C5:E4:BD:49:03:6F:34:02:A1:02:3D:5E:72:56:B4:CA:93:44
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e20333937323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.205.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ef:d7:77:61:ce:a3:68:cc:14:40:f9:cc:e8:f9:9c:f5:ef:
a5:09:67:c2:79:5e:39:2f:b4:28:2b:82:2e:01:61:1d:b1:65:
0e:b2:4e:82:9c:fe:73:dd:f7:39:00:4e:46:e7:81:1b:ca:a6:
21:3e:95:9e:be:06:df:56:a9:e2:ba:e1:a8:44:ad:51:73:18:
f8:90:aa:a0:66:83:0f:06:c8:a2:b1:ee:82:15:70:27:fa:5e:
d4:ee:ac:ad:f2:f6:c9:5a:0e:a8:0e:01:a3:69:ae:de:8b:ee:
20:48:3c:53:d3:70:00:cf:01:6f:55:20:5f:63:7e:c5:ba:7f:
69:47:ae:ae:98:1c:72:4e:48:fa:23:20:e6:a4:d4:e0:e1:ce:
12:81:80:35:4d:fe:04:6c:b8:d9:f8:e1:6e:02:cc:79:24:db:
17:35:02:8d:47:8e:f8:9f:22:15:56:47:9f:0c:2a:8a:9a:f2:
b0:f3:5c:51:59:c7:88:3f:16:b7:00:8f:f9:a3:e3:d1:9d:43:
2d:bc:a2:2d:97:75:f5:0e:ef:97:16:04:56:bc:e4:5f:f8:39:
89:71:f3:1e:fb:6d:ac:86:53:64:dd:9e:b9:06:4a:08:ce:a8:
58:f8:02:c2:d6:86:31:20:b0:1b:2f:d5:29:0d:42:05:7a:71:
a3:8b:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:30 2025 by rpki-client