Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32332d3234203d3e20323130353432.roa
File: 3138352e342e3232322e302f32332d3234203d3e20323130353432.roa (raw, json)
Hash identifier: bCXL81K2d4Y8eag6WxgS5us2LQOXEFM4u3iZ+kB0/Gk=
Subject key identifier: 67:61:54:42:EE:F3:31:4B:6F:90:E9:97:6C:DB:BB:A7:D4:AC:DF:5C
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 04C632BEB41BD67218C0EC92D306E78EEC15146A
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32332d3234203d3e20323130353432.roa
Signing time: Wed 29 Nov 2023 09:18:05 +0000
ROA not before: Wed 29 Nov 2023 09:13:05 +0000
ROA not after: Wed 27 Nov 2024 09:18:05 +0000
asID: 210542
IP address blocks: 185.4.222.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c6:32:be:b4:1b:d6:72:18:c0:ec:92:d3:06:e7:8e:ec:15:14:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 29 09:13:05 2023 GMT
Not After : Nov 27 09:18:05 2024 GMT
Subject: CN=67615442EEF3314B6F90E9976CDBBBA7D4ACDF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:0e:05:8d:df:88:6d:25:25:cb:d2:60:41:
57:3e:de:0a:2c:ce:4a:dd:12:a5:93:63:68:e3:e8:
d8:18:25:a7:03:b2:31:3f:da:24:34:3c:0d:24:91:
19:1e:dc:63:f8:19:4d:84:87:4b:12:90:e7:d3:ef:
08:73:bd:47:e1:38:d2:4d:4c:f8:d8:01:2b:1c:8c:
e7:ed:ec:55:0c:ed:72:df:b1:1d:1b:cb:10:49:7f:
66:60:0e:52:f6:f3:c7:f7:2a:a0:f4:94:12:c6:9f:
07:06:00:e8:b2:80:c3:aa:6d:37:34:43:64:b9:a3:
07:4b:c6:01:29:7a:27:11:b4:ba:99:d8:a0:3b:73:
a2:f9:2e:c5:50:7b:ee:aa:95:31:eb:78:69:8d:b2:
10:a3:e1:bc:aa:18:e3:57:c3:7c:fb:67:8e:94:ed:
6b:63:09:95:98:a9:a7:ef:5e:2f:93:dc:2b:e3:c3:
52:fa:b2:b2:4f:30:d8:a4:68:ba:52:81:dc:bf:a1:
a2:60:21:67:19:44:1a:97:6a:de:80:cc:b4:c9:7b:
43:8b:c1:ab:66:31:a2:22:a6:83:6b:50:d2:03:88:
68:60:c1:c2:04:59:7f:8d:a8:3d:3c:bf:cd:34:b6:
e8:4e:b5:1d:26:07:30:7e:38:4d:e2:0a:c8:82:4b:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:61:54:42:EE:F3:31:4B:6F:90:E9:97:6C:DB:BB:A7:D4:AC:DF:5C
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32332d3234203d3e20323130353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.222.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:34:e7:5e:4b:72:a9:86:3c:dd:8a:ce:27:31:68:52:e6:69:
2e:3b:53:64:4d:1f:bb:4a:0b:a2:cb:59:aa:d5:4e:ef:ee:cc:
8f:d4:fb:b2:f0:a0:31:0f:4e:26:48:19:8a:d5:32:33:41:1a:
b8:df:1a:3f:bd:bb:50:4c:40:e8:42:da:8b:05:97:c0:d2:52:
f2:8b:0e:f9:83:f2:06:c6:e7:d8:32:19:02:90:75:e1:47:d9:
90:ac:41:57:0e:52:63:89:84:4c:bd:41:c2:c3:b8:92:5a:2d:
aa:7b:7f:e9:ff:0b:b4:eb:bb:3d:02:e3:e1:e2:cd:e1:5e:43:
9a:3b:4c:0e:56:4e:8c:50:3f:d2:24:ab:f3:f2:f0:1f:a0:ad:
8a:1c:8b:df:b3:fe:d9:7f:a1:4d:79:e3:a4:79:87:07:c6:a3:
d2:df:ea:4b:b6:8c:c7:15:6f:d5:e9:91:ca:14:9a:ed:53:66:
4b:7b:f0:5e:00:55:1d:e2:54:75:1f:06:b7:58:38:7e:ff:93:
c2:86:44:61:a0:0a:97:9a:6d:d8:16:4e:6c:b3:73:6a:3d:38:
ef:10:45:74:0b:d4:2f:c5:cd:72:7b:31:91:ba:ea:24:83:86:
64:db:5e:5a:58:03:0e:43:94:3d:91:60:2c:a1:16:06:a3:69:
f4:5b:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:22:47 2025 by rpki-client