Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138342e302f32322d3234203d3e20383334.roa
File: 3130392e3131302e3138342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: bqZ5kVRpL7T3UV0vEH+6U7O6FL8sLdKqMiw6W0VRfAs=
Subject key identifier: 8C:CC:6F:A5:4A:01:58:4B:B5:D4:5D:4D:4F:3E:66:7C:9C:A1:3C:95
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 02A494AA008C1F505C0AAF06DEA080FED02D6278
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138342e302f32322d3234203d3e20383334.roa
Signing time: Tue 16 Jan 2024 08:11:58 +0000
ROA not before: Tue 16 Jan 2024 08:06:58 +0000
ROA not after: Tue 14 Jan 2025 08:11:58 +0000
asID: 834
IP address blocks: 109.110.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a4:94:aa:00:8c:1f:50:5c:0a:af:06:de:a0:80:fe:d0:2d:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 16 08:06:58 2024 GMT
Not After : Jan 14 08:11:58 2025 GMT
Subject: CN=8CCC6FA54A01584BB5D45D4D4F3E667C9CA13C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:34:9f:05:bd:e6:04:59:62:dc:8c:b4:4b:
65:38:5c:76:1b:ea:77:43:76:39:9c:28:29:1e:0b:
ff:eb:b3:1a:c6:30:ed:08:1d:17:94:57:89:74:50:
58:bd:aa:64:51:d2:7a:14:98:d2:b2:f2:21:2f:d2:
26:fa:e3:a4:44:4c:6a:b0:4e:8b:bd:8c:14:5f:ee:
6a:38:d0:94:96:e5:5d:6a:1d:07:2c:cf:7e:47:c6:
35:98:ce:3c:29:04:b7:89:f3:87:15:bd:8c:a6:e7:
7e:2b:f1:83:48:08:88:57:c1:b3:14:12:94:81:1d:
27:b0:73:c9:e0:9f:d4:9d:2c:53:20:e9:bc:d4:ea:
39:3c:e9:49:c5:23:95:bc:30:7e:b4:85:65:d1:10:
c6:67:7b:96:8b:d6:d0:39:2a:76:01:1b:0c:3f:1f:
88:61:68:dd:4f:65:55:7d:5a:de:ac:38:79:42:a3:
df:7f:46:9d:d8:8e:f1:a1:39:5d:7f:16:f9:89:68:
71:7c:ed:4a:e2:71:d9:20:e4:05:52:b7:02:10:58:
6b:3a:08:c3:c0:92:59:6d:e3:9a:07:57:b9:de:28:
6c:db:13:65:74:ec:72:06:82:a5:cf:65:dd:13:df:
f1:76:28:ef:91:04:08:8e:da:2c:8f:a4:ae:2e:91:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:6F:A5:4A:01:58:4B:B5:D4:5D:4D:4F:3E:66:7C:9C:A1:3C:95
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.184.0/22
Signature Algorithm: sha256WithRSAEncryption
81:5f:21:76:f5:26:fc:0a:96:33:70:04:85:a8:4c:4e:cc:d5:
20:a2:9e:7a:d0:1c:91:fb:9c:c1:81:ce:87:03:ec:da:40:46:
00:56:3b:1b:00:f5:04:26:a4:d2:9f:7e:e1:be:26:c9:d1:05:
13:03:c1:d4:12:a5:9a:d0:40:d6:64:fd:fe:dc:7c:51:cf:48:
13:7c:c0:0f:98:4f:bb:91:55:66:cb:9b:c4:91:12:13:13:9c:
78:87:67:51:7a:7a:b0:e1:eb:a3:16:a0:f9:b8:dc:d6:4c:4c:
40:9e:3c:2b:e7:ff:7e:bc:bc:ae:e1:a8:bd:82:76:fa:66:4b:
28:c4:29:df:54:2c:8e:f2:e9:87:21:05:97:5b:77:ce:0f:b3:
8c:fc:74:d4:fb:e3:72:ff:c7:99:6b:8f:bd:17:09:52:a8:80:
90:c9:e8:91:34:80:9a:b6:c1:74:1e:fd:bf:51:e6:23:f2:59:
63:6b:3a:fe:d5:2d:43:ab:3d:e8:9d:b0:d9:d1:ea:33:4c:2c:
6d:fa:9a:80:33:01:29:ef:b4:2a:6f:cf:8d:33:ae:69:77:73:
f0:84:b8:c5:62:5c:a3:04:e1:9e:e5:ca:64:2a:a0:39:13:65:
5b:40:0b:11:72:d9:df:8f:e5:8c:ad:f6:77:87:0e:3b:bc:d6:
8e:ea:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:04 2025 by rpki-client