Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e20383334.roa
File: 39312e3233352e3230352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WMR+UkTQYKBYl0N8lq6l4xOu/RDUTtEV8BH9Zko/jzs=
Subject key identifier: 19:D0:C6:DC:72:64:EE:A7:96:51:E5:74:7E:B5:2F:EB:D4:0B:A2:D3
Certificate issuer: /CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Certificate serial: 462EA9C662A8ABD20CBF8C5243D057B8E92338DC
Authority key identifier: E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e20383334.roa
Signing time: Mon 03 Jul 2023 09:30:22 +0000
ROA not before: Mon 03 Jul 2023 09:25:22 +0000
ROA not after: Mon 01 Jul 2024 09:30:22 +0000
asID: 834
IP address blocks: 91.235.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:2e:a9:c6:62:a8:ab:d2:0c:bf:8c:52:43:d0:57:b8:e9:23:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92d148583a4642d90d4c4bc47b4504e180ea0c3
Validity
Not Before: Jul 3 09:25:22 2023 GMT
Not After : Jul 1 09:30:22 2024 GMT
Subject: CN=19D0C6DC7264EEA79651E5747EB52FEBD40BA2D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:cf:05:06:2a:af:48:79:f8:24:a5:78:72:
15:05:40:88:20:29:fd:77:a9:0b:21:6e:3e:7d:b2:
00:5c:0c:72:c6:b7:a3:a9:00:be:7e:9a:7c:96:c8:
a6:dd:87:e4:6d:34:bc:5f:e6:73:2d:4d:26:d0:e1:
67:77:38:0b:54:48:1a:3e:aa:57:5e:ed:6c:d2:6c:
a5:47:b5:04:53:3a:2d:5f:c6:ca:3a:d0:21:e3:3a:
80:39:68:18:ac:a5:c4:a4:17:ad:ad:9a:c1:3d:9f:
7e:cd:c2:82:37:32:c8:c4:3f:53:d4:45:8b:a5:6f:
17:99:81:36:2d:c0:18:8f:28:00:84:ac:00:53:c4:
4d:61:be:c1:22:0c:0b:81:83:0f:ba:3c:5e:3b:eb:
6d:27:5e:14:10:3a:cc:83:3b:e3:42:44:e1:37:d2:
0c:99:90:a4:4c:4c:0b:a5:e8:fe:c2:cf:7f:2f:12:
84:01:2f:aa:56:c9:43:08:74:91:00:ba:f9:c8:17:
a9:00:9b:a9:e3:38:48:f6:d3:e7:d0:9c:31:40:1a:
74:39:5c:f9:06:f3:85:c4:d7:0c:7d:1b:6c:84:42:
27:a8:5d:61:f5:2f:79:c8:cd:9e:6f:29:e7:96:e8:
8f:33:34:78:5f:8a:1a:58:e5:58:1c:9a:a1:e4:d3:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D0:C6:DC:72:64:EE:A7:96:51:E5:74:7E:B5:2F:EB:D4:0B:A2:D3
X509v3 Authority Key Identifier:
keyid:E9:2D:14:85:83:A4:64:2D:90:D4:C4:BC:47:B4:50:4E:18:0E:A0:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/E92D148583A4642D90D4C4BC47B4504E180EA0C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S0UhYOkZC2Q1MS8R7RQThgOoMM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab83a38a-7a39-4397-b588-edb9fbb62817/0/39312e3233352e3230352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.205.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4d:90:c5:06:37:69:38:c9:ca:d8:db:c2:55:ca:93:f6:34:
bc:1c:00:00:6a:b6:b1:d5:66:dc:5c:90:19:e6:ce:79:5a:2e:
a8:81:21:4c:42:25:ec:c9:a1:19:e9:9b:f0:b9:82:64:3e:d0:
36:7f:ce:f4:d0:a1:61:91:d6:d0:53:66:8f:aa:01:64:2e:0c:
cb:7d:d3:0d:f4:8d:39:13:a5:cc:4e:22:03:bb:83:52:93:27:
53:b0:fb:ae:51:91:40:f7:12:dc:ba:56:ca:84:8a:8a:3a:99:
e8:0a:5f:cd:ce:ad:2a:9f:9f:46:3f:6d:2e:46:1d:a2:7e:b8:
51:59:aa:60:f1:8e:b9:04:31:60:42:b1:06:3c:75:57:c9:4a:
62:b9:b4:ea:ee:c0:64:96:b3:47:d9:c7:bd:63:92:e0:67:69:
b3:64:34:f7:e0:c2:a4:b4:ff:ed:8b:66:be:5f:13:17:b9:2d:
11:83:4f:89:1e:ef:61:31:47:7d:67:4d:6b:d5:84:5f:ec:fe:
71:10:89:ee:b7:5c:d4:3d:04:af:ac:e0:a0:95:77:db:3e:4a:
0f:3e:d9:46:6f:75:5b:2c:67:73:98:43:1f:7e:19:e8:df:e2:
4d:a1:99:6d:50:8b:ac:bb:87:ec:e1:d4:12:0d:f5:58:0c:20:
a6:8c:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:59:30 2025 by rpki-client