Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e20383334.roa
File: 39312e3233352e3230352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6ef7z3JzuY4YN2UZZHh/z0dKiCNsDKeGE/MEBPDnxZg=
Subject key identifier: DB:D2:26:68:1F:BE:BA:F7:76:EA:8A:BA:95:A2:99:BE:D6:52:A1:61
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 5AEC5CBBC4B31E98892D970A1F904FAB2EC58FE3
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e20383334.roa
Signing time: Tue 06 Jun 2023 12:59:32 +0000
ROA not before: Tue 06 Jun 2023 12:54:32 +0000
ROA not after: Tue 04 Jun 2024 12:59:32 +0000
asID: 834
IP address blocks: 91.235.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ec:5c:bb:c4:b3:1e:98:89:2d:97:0a:1f:90:4f:ab:2e:c5:8f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Jun 6 12:54:32 2023 GMT
Not After : Jun 4 12:59:32 2024 GMT
Subject: CN=DBD226681FBEBAF776EA8ABA95A299BED652A161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:e4:d7:7f:00:d3:75:16:5d:7f:f7:06:e8:
bb:cc:9a:03:59:9e:f1:76:b3:56:f8:82:94:e3:8f:
97:60:af:68:f2:72:a7:37:6a:8e:4b:a6:19:c0:17:
64:2c:71:11:94:d5:fa:92:08:48:c2:78:fc:df:57:
d9:75:22:c2:31:b2:8a:a0:2e:86:6f:13:e1:96:39:
6f:68:ab:77:7e:76:68:73:7b:16:1a:b7:c3:8e:01:
a3:95:64:49:71:39:72:79:b6:86:60:72:fa:95:7c:
1e:e1:b9:4c:96:0f:31:b0:0a:3f:00:49:58:a7:b6:
36:d2:e2:d2:0b:38:08:54:4a:b4:1b:e5:96:06:88:
69:62:18:3f:6c:24:45:67:ef:68:b4:79:c9:94:5e:
cd:ea:f9:42:af:d4:0f:7c:bd:37:af:9c:a6:7f:a8:
f6:77:9a:cf:d3:b0:f0:2e:8b:35:b6:d9:c5:2f:7c:
68:4c:29:62:d2:b0:be:a1:f8:50:7d:b4:fb:66:90:
81:b3:49:88:53:1f:b9:50:5e:92:6b:3d:a4:9a:9e:
78:71:ca:9d:ee:a6:c4:b7:65:e8:34:64:35:1c:cf:
92:2f:be:32:d5:79:59:e0:f0:70:0d:11:f8:aa:dc:
df:02:60:8d:8c:62:45:a8:8f:26:1f:60:34:9e:93:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D2:26:68:1F:BE:BA:F7:76:EA:8A:BA:95:A2:99:BE:D6:52:A1:61
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.205.0/24
Signature Algorithm: sha256WithRSAEncryption
96:13:b7:96:30:ca:b8:f6:07:63:dc:f7:84:07:3b:af:5f:72:
63:4a:44:a0:15:3e:85:a8:0d:35:70:ae:7e:6e:f6:ed:36:04:
17:98:6e:7b:d4:ca:46:c6:46:a3:8f:39:11:82:1f:7f:86:fe:
a5:c3:f9:f2:60:60:7b:6f:49:89:d3:cf:a4:44:4f:a5:9f:2d:
73:2c:a3:5b:3f:75:5f:a1:1c:85:dd:f9:c8:de:60:e0:56:8a:
ab:f9:2f:f2:19:e8:62:e6:60:4a:1b:42:9c:90:7a:d2:86:d5:
52:bd:2e:8b:5e:10:24:da:02:e5:de:8d:25:d5:ad:fd:9d:37:
f9:5b:d6:c4:5c:45:0c:27:16:42:2d:25:84:5d:76:ed:4e:d4:
5b:d7:c7:77:94:3f:2b:2f:b1:2b:c8:65:b4:0d:45:2e:5e:7a:
18:da:0a:44:26:94:bd:b3:da:b9:a8:38:b8:49:e9:1d:7b:0e:
23:70:c3:10:e7:68:61:c2:1d:ed:ba:51:00:b1:51:a2:2f:85:
83:73:6d:90:c0:dd:92:8c:aa:77:a8:6c:19:8c:be:d9:dc:b2:
eb:ce:4d:3a:1f:d8:9f:a1:84:cb:e8:1c:a9:87:f4:55:33:d8:
5a:ee:e2:d1:e4:5a:d2:fa:d8:6f:0b:7a:95:17:58:45:ae:ef:
d4:07:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:05 2025 by rpki-client