Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32332d3234203d3e20383334.roa
File: 3130392e3131302e3137362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 7mRdSm0aQSfnZ8m40+zWkWHEwPZBaW2hrQO8IQZ5NC0=
Subject key identifier: DA:8B:EB:4B:64:1F:1A:79:8A:33:C3:ED:D3:C1:7C:D0:F0:76:95:99
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 03F30373CC00F51E7B0F99BF59CE8C2EB79C82FB
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32332d3234203d3e20383334.roa
Signing time: Thu 08 Feb 2024 00:01:48 +0000
ROA not before: Wed 07 Feb 2024 23:56:48 +0000
ROA not after: Thu 06 Feb 2025 00:01:48 +0000
asID: 834
IP address blocks: 109.110.176.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f3:03:73:cc:00:f5:1e:7b:0f:99:bf:59:ce:8c:2e:b7:9c:82:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Feb 7 23:56:48 2024 GMT
Not After : Feb 6 00:01:48 2025 GMT
Subject: CN=DA8BEB4B641F1A798A33C3EDD3C17CD0F0769599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:28:2b:5a:b4:b3:c2:8a:0e:5a:f8:d9:45:
f8:c0:50:1c:2c:72:7b:41:31:38:56:db:80:5e:e7:
f1:7e:70:a6:d2:cd:96:07:58:83:a4:35:27:c2:ba:
24:db:cb:88:a4:cb:4e:bf:50:a6:e3:10:ff:a4:c9:
e1:87:8d:53:5d:f3:38:ad:f8:f3:2f:f1:c3:2e:0f:
fd:9e:89:3e:46:f1:f8:b0:5f:3d:00:9c:d2:7a:88:
31:a2:6e:f6:16:fa:63:70:b4:4a:49:ae:6d:8a:f4:
6d:c8:cb:ac:39:08:15:ef:2a:fa:40:b4:f9:59:62:
2f:a4:55:00:78:cd:fa:43:90:63:f6:0f:95:b2:84:
c0:13:df:c9:af:b0:63:61:6e:29:7a:ec:45:a8:6d:
1c:65:33:3f:51:20:1e:b3:5f:08:5e:1a:e4:be:fe:
b9:bc:f3:68:ae:fb:00:06:7a:df:64:14:39:5f:51:
b3:59:f7:d4:00:11:6e:c0:48:4c:4b:f6:01:a6:4d:
83:d7:6e:85:de:3f:fc:a2:d8:b3:b3:b7:7e:48:f5:
c5:db:37:44:e9:63:66:a7:10:2e:e4:4b:3c:0d:37:
84:4e:a3:88:5a:fe:e4:4b:38:ce:84:08:19:67:74:
51:49:8a:b1:10:9d:05:00:ea:d6:95:40:2d:62:cb:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8B:EB:4B:64:1F:1A:79:8A:33:C3:ED:D3:C1:7C:D0:F0:76:95:99
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.176.0/23
Signature Algorithm: sha256WithRSAEncryption
06:0e:c1:7b:08:d0:c5:94:8a:83:df:fe:8f:83:e7:d9:c2:bb:
f9:dc:f6:9f:a0:52:ef:3d:da:6a:4a:8f:2f:c5:1c:7f:7e:0e:
1f:48:03:b5:cf:f1:a4:17:fb:88:46:4b:55:e6:13:b0:37:4d:
65:d8:82:a0:2b:8e:0f:86:71:87:4b:3d:15:a9:52:fc:71:54:
50:dd:19:e0:dd:18:98:bc:41:61:e5:d9:28:eb:67:11:1f:3c:
2b:83:b4:e2:64:23:93:0b:ea:94:2c:a8:81:e9:9d:1e:36:92:
ed:1b:bf:c3:ed:e6:e0:d9:47:26:fe:ab:73:f1:37:fa:fd:e8:
53:72:4d:88:9c:57:32:53:f2:91:8f:24:6d:b8:96:04:69:d2:
d2:db:74:85:cd:b4:8c:0a:da:84:9f:7a:2f:89:2a:87:5d:d4:
ee:cb:76:f0:97:42:ff:3e:70:b7:10:0f:b5:43:ab:b4:ae:09:
24:a8:86:87:80:69:1f:ed:ec:da:82:bd:45:67:b4:01:ac:5a:
2c:c4:47:85:a8:37:a3:a7:bc:2b:84:cb:9e:73:d3:9e:71:05:
32:8d:90:9e:1f:dc:41:46:5a:aa:2d:c5:ac:d7:63:e5:4f:13:
44:cb:d3:c6:6a:f4:fd:23:7f:dc:ad:51:54:81:c1:e0:87:d1:
4d:8e:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:27 2025 by rpki-client