Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3130392e39352e3234302e302f32312d3231203d3e2035343634.roa
File: 3130392e39352e3234302e302f32312d3231203d3e2035343634.roa (raw, json)
Hash identifier: RCtAfwvjt97Obh6zr9AaEcKR4lOnrPRFFk+g3/f1clo=
Subject key identifier: 4C:60:2C:3C:27:41:E2:57:3C:6C:7B:7F:6B:0B:EA:05:68:EA:D5:EA
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 254CEBDCCC4DD5A85D5CD6DAE109D071B1449D21
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3130392e39352e3234302e302f32312d3231203d3e2035343634.roa
Signing time: Wed 21 Jun 2023 15:19:56 +0000
ROA not before: Wed 21 Jun 2023 15:14:56 +0000
ROA not after: Wed 19 Jun 2024 15:19:56 +0000
asID: 5464
IP address blocks: 109.95.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4c:eb:dc:cc:4d:d5:a8:5d:5c:d6:da:e1:09:d0:71:b1:44:9d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 21 15:14:56 2023 GMT
Not After : Jun 19 15:19:56 2024 GMT
Subject: CN=4C602C3C2741E2573C6C7B7F6B0BEA0568EAD5EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:63:79:2f:ad:e1:a0:25:2f:e0:9e:03:d6:
79:96:ed:6c:fb:4e:6e:e0:80:2d:3b:a2:66:94:5c:
f2:26:45:19:86:39:95:05:47:2c:3e:cd:f9:cf:76:
94:2a:a6:b2:6d:19:45:19:c7:97:52:dc:18:bb:6b:
2b:44:08:77:22:ae:8a:ff:e6:9b:51:bb:72:a2:b7:
1c:d9:d6:a8:96:ec:2b:9f:c4:c0:9e:c1:bf:d0:19:
70:bb:92:3c:c0:4e:d9:08:d0:7e:aa:aa:04:ac:80:
bb:0a:3b:04:18:96:b3:13:49:4e:dd:fc:4c:7b:8d:
c2:b4:7c:ef:57:9d:a7:54:9f:95:81:6c:1b:7f:9a:
54:66:03:8a:2f:e4:9e:f1:8d:8a:22:76:3a:21:53:
58:db:3d:ee:f0:d5:1a:18:b3:90:70:77:69:cb:95:
73:7e:89:47:cd:51:a0:ef:2b:ec:ab:d7:c2:59:0b:
c2:1a:61:f1:a1:c4:d8:10:01:02:4c:b9:4b:e9:56:
1b:ec:0d:0c:2e:48:6f:8b:6c:7a:56:48:06:30:4c:
5f:f4:a4:b5:d3:87:aa:f1:47:0e:e8:48:1e:26:b1:
85:ec:dd:fc:35:a8:a2:d3:87:34:eb:67:ff:be:c3:
c1:d1:ee:9e:b9:63:9f:ec:a2:77:3e:cf:a7:c4:f9:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:60:2C:3C:27:41:E2:57:3C:6C:7B:7F:6B:0B:EA:05:68:EA:D5:EA
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3130392e39352e3234302e302f32312d3231203d3e2035343634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.240.0/21
Signature Algorithm: sha256WithRSAEncryption
11:0d:02:a3:bb:83:ba:c7:69:72:46:fd:f3:04:55:54:3b:00:
51:8f:b3:24:43:26:15:60:a4:d2:f6:a8:e6:e9:ce:ee:35:4d:
22:54:ee:3c:a3:24:6e:e0:08:90:6e:6e:44:42:76:49:1c:3d:
11:fa:93:e4:51:ff:c5:11:97:4e:bf:b1:c7:37:a3:de:c0:f4:
82:03:33:c8:e8:f9:9c:4a:59:3e:7c:72:6c:a7:a4:89:34:9a:
cb:fd:4e:0e:06:25:65:40:2f:77:3c:bd:52:54:3a:39:49:6e:
66:dc:6e:d5:55:b5:3a:9b:c0:2b:c5:1b:17:0c:cc:00:25:67:
13:60:82:fe:a7:9d:4a:83:b7:79:53:b3:c1:b6:29:e1:03:b9:
aa:31:80:1d:72:5e:1f:41:29:f2:14:62:de:6f:f7:60:19:d6:
45:8e:11:62:26:f6:20:a8:6b:ee:f1:02:85:b1:23:d2:08:81:
45:3f:b9:2a:31:f9:47:4e:87:ea:2e:06:73:e2:dd:2c:00:78:
8c:7d:df:e5:e5:dc:55:2d:a8:5c:e6:51:f1:0d:00:b0:8d:f0:
7d:b8:f6:1c:be:b6:b5:93:80:a1:ef:c0:b0:1c:e5:92:ba:81:
db:1d:18:ca:d6:3c:f0:4c:a5:4c:94:10:bc:6b:ed:19:04:c7:
dd:1c:7e:f8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJUzr3MxN1ahdXNba4QnQcbFEnSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yMzA2MjExNTE0NTZaFw0yNDA2MTkxNTE5NTZaMDMxMTAvBgNV
BAMTKDRDNjAyQzNDMjc0MUUyNTczQzZDN0I3RjZCMEJFQTA1NjhFQUQ1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoPGN5L63hoCUv4J4D1nmW7Wz7
Tm7ggC07omaUXPImRRmGOZUFRyw+zfnPdpQqprJtGUUZx5dS3Bi7aytECHciror/
5ptRu3KitxzZ1qiW7CufxMCewb/QGXC7kjzATtkI0H6qqgSsgLsKOwQYlrMTSU7d
/Ex7jcK0fO9XnadUn5WBbBt/mlRmA4ov5J7xjYoidjohU1jbPe7w1RoYs5Bwd2nL
lXN+iUfNUaDvK+yr18JZC8IaYfGhxNgQAQJMuUvpVhvsDQwuSG+LbHpWSAYwTF/0
pLXTh6rxRw7oSB4msYXs3fw1qKLThzTrZ/++w8HR7p65Y5/sonc+z6fE+TO3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUTGAsPCdB4lc8bHt/awvqBWjq1eowHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQt
NDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvMzEzMDM5MmUzOTM1MmUzMjM0
MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTM0MzYzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA21f
8DANBgkqhkiG9w0BAQsFAAOCAQEAEQ0Co7uDusdpckb98wRVVDsAUY+zJEMmFWCk
0vao5unO7jVNIlTuPKMkbuAIkG5uREJ2SRw9EfqT5FH/xRGXTr+xxzej3sD0ggMz
yOj5nEpZPnxybKekiTSay/1ODgYlZUAvdzy9UlQ6OUluZtxu1VW1OpvAK8UbFwzM
ACVnE2CC/qedSoO3eVOzwbYp4QO5qjGAHXJeH0Ep8hRi3m/3YBnWRY4RYib2IKhr
7vEChbEj0giBRT+5KjH5R06H6i4Gc+LdLAB4jH3f5eXcVS2oXOZR8Q0AsI3wfbj2
HL62tZOAoe/AsBzlkrqB2x0YytY88EylTJQQvGvtGQTH3Rx++A==
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:45 2025 by rpki-client