Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32332d3234203d3e20313432353631.roa
File: 3138352e342e3232322e302f32332d3234203d3e20313432353631.roa (raw, json)
Hash identifier: fzMvC5MQ1X5AjP7zYEx5uEHQIS1DcLeJbnqlfId7Q9Y=
Subject key identifier: 7B:F9:31:8B:66:06:0E:8D:B0:A1:53:80:6D:6D:C6:02:65:F0:49:9B
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6A60174AC4E110987AB45EA91E2DF707F88E54CD
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32332d3234203d3e20313432353631.roa
Signing time: Tue 16 Jan 2024 17:22:18 +0000
ROA not before: Tue 16 Jan 2024 17:17:18 +0000
ROA not after: Tue 14 Jan 2025 17:22:18 +0000
asID: 142561
IP address blocks: 185.4.222.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:60:17:4a:c4:e1:10:98:7a:b4:5e:a9:1e:2d:f7:07:f8:8e:54:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 16 17:17:18 2024 GMT
Not After : Jan 14 17:22:18 2025 GMT
Subject: CN=7BF9318B66060E8DB0A153806D6DC60265F0499B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:03:0b:6b:55:a9:6f:c6:34:bd:b2:02:ac:
8b:76:0a:4f:27:bc:f5:8b:76:12:83:fa:1b:45:e7:
c3:53:70:a3:94:16:46:7e:e4:b6:cc:10:09:5e:eb:
fa:4f:16:96:75:c4:aa:c5:fc:b5:ba:21:5f:c7:de:
4d:33:b6:85:67:95:31:96:b5:3f:50:e2:25:7a:82:
97:1a:58:b2:c9:28:86:45:67:ec:9e:65:71:2f:7b:
1a:ea:d6:fa:76:5c:f1:05:1b:a2:3a:d2:a1:a3:cc:
9e:23:34:16:e3:82:13:4c:6b:d1:dc:21:c8:cf:d9:
df:2e:bc:47:5f:0b:96:7b:7e:50:e4:92:7a:16:94:
65:cc:e9:e5:52:3f:a1:22:aa:a0:a7:c5:6b:e4:a1:
72:d0:2c:2e:88:aa:9c:0d:ef:bd:ba:d3:74:d4:86:
4d:56:26:a8:83:f5:2d:8a:af:e7:c0:17:51:13:a6:
02:72:32:e6:dc:09:d4:60:b6:ec:dd:06:4c:4c:ca:
4c:e7:02:e5:13:86:9c:54:6c:e5:45:5f:8e:0e:24:
20:a0:7b:84:e7:21:88:2e:01:07:b6:76:f4:1b:07:
48:5e:da:ee:fa:fd:62:a4:ef:e6:1d:c5:8a:b7:c0:
91:cc:db:d6:e0:1d:4d:48:c6:6c:24:09:81:dd:de:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F9:31:8B:66:06:0E:8D:B0:A1:53:80:6D:6D:C6:02:65:F0:49:9B
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32332d3234203d3e20313432353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.222.0/23
Signature Algorithm: sha256WithRSAEncryption
94:c6:87:53:96:60:f3:da:dd:1c:3e:ef:b6:93:8b:96:00:6a:
61:10:51:c1:e5:02:bc:ff:9a:f1:84:7f:aa:26:38:f2:16:c2:
96:bb:89:db:28:63:ba:90:13:67:11:10:92:ff:16:3b:77:a2:
21:4e:5b:88:aa:93:eb:dc:41:84:2a:bc:5e:54:c8:e5:3a:e6:
48:8b:1b:d1:85:29:2a:56:6b:b1:7a:e1:63:b6:0e:23:b9:ae:
59:93:bc:21:98:fe:12:32:7b:c8:e9:8b:0c:7d:66:2b:83:69:
af:1d:25:95:e2:75:47:83:b8:d0:3d:eb:fc:8a:ae:9a:f6:e9:
47:af:50:87:9b:ef:68:07:08:d7:fd:c7:84:de:45:d3:e5:ee:
ee:f8:94:65:47:85:e7:84:aa:3c:45:72:fd:dd:7b:27:71:5f:
ad:d2:83:e5:ae:50:20:51:73:8a:4f:0b:93:b4:c0:c5:67:05:
14:7b:5e:e9:35:6c:5b:48:d1:62:ba:3c:b0:d9:b6:0d:7a:9d:
56:b4:ce:c7:99:39:04:6b:c6:0b:7c:f7:3d:a5:12:a5:d6:81:
13:18:ee:ad:a5:76:ac:33:70:8e:e8:53:d9:c2:42:d9:d9:38:
02:53:a0:7f:b5:05:8c:a6:9e:c1:0e:f1:ff:af:c1:6a:3f:34:
31:66:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:12 2025 by rpki-client