Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3233203d3e203631333137.roa
File: 3138352e322e3136322e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier: tVTgyAU38+z6PpFQ7rTs3mKCFYmqpNZOQ9fGf7Aa16E=
Subject key identifier: B1:3B:DB:76:50:85:B8:2F:ED:40:64:7C:2E:0D:F6:77:25:31:97:E6
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 4ABAF547B9A207E6296AE19C3A5541E5D43862B7
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3233203d3e203631333137.roa
Signing time: Wed 21 Jun 2023 15:20:51 +0000
ROA not before: Wed 21 Jun 2023 15:15:51 +0000
ROA not after: Wed 19 Jun 2024 15:20:51 +0000
asID: 61317
IP address blocks: 185.2.162.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ba:f5:47:b9:a2:07:e6:29:6a:e1:9c:3a:55:41:e5:d4:38:62:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 21 15:15:51 2023 GMT
Not After : Jun 19 15:20:51 2024 GMT
Subject: CN=B13BDB765085B82FED40647C2E0DF677253197E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f1:5c:08:af:71:00:94:03:73:47:28:35:7c:
3a:02:c4:ef:e2:17:dc:67:08:d7:31:eb:e8:c4:4e:
45:82:79:54:32:ba:d3:f2:52:6e:ca:bb:0e:0f:b8:
fe:4d:5b:9f:3a:41:f1:2a:64:29:b9:db:b7:46:45:
86:1e:49:80:05:55:7b:d7:dd:ad:42:95:67:42:8a:
a4:86:07:fc:7a:ad:9b:e0:93:e9:46:5d:b1:2e:cc:
2c:54:48:45:da:77:69:25:bf:a7:83:59:8f:b3:0f:
53:3b:12:fe:47:f7:09:a2:9a:ed:85:01:e6:c8:1d:
40:84:a4:eb:0d:23:25:de:b3:24:fd:b6:4d:de:cc:
0a:31:b4:65:ea:f9:05:c0:74:b4:39:08:ea:22:00:
66:ad:a0:0b:98:77:7c:4e:8a:8d:8a:93:04:04:3c:
87:f0:0e:5e:ab:bf:1f:c8:1d:10:29:53:64:34:2e:
8a:22:e8:fe:a2:66:d7:19:82:c9:c3:a5:87:e3:fc:
e0:cd:d1:f8:80:ce:f1:55:ad:ff:a1:55:a2:00:8d:
9f:0c:35:7c:99:dc:21:78:93:48:a3:b2:ea:a2:29:
8b:b0:bb:b7:b5:a1:be:db:dd:ec:4d:2d:de:54:48:
4c:b2:6b:24:1f:74:59:e1:1c:1b:6e:9e:05:f1:49:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:DB:76:50:85:B8:2F:ED:40:64:7C:2E:0D:F6:77:25:31:97:E6
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136322e302f32332d3233203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.162.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:bd:8d:21:71:2c:a9:b6:2d:13:31:e8:61:df:87:81:06:e0:
f9:e9:03:bd:ba:8b:f2:5f:90:13:28:0b:20:b8:97:ba:e4:31:
89:fe:b1:55:4a:15:36:96:0e:f5:58:b4:01:6d:9e:95:c3:0e:
b3:9b:86:4b:87:2d:23:8b:fb:c5:37:e8:b4:9a:ec:87:da:b4:
90:7d:44:b8:7e:8d:84:01:61:34:91:ce:ca:33:da:77:f3:02:
b3:4e:a2:11:98:e0:c0:03:32:8a:cd:cc:16:e5:c5:64:de:c6:
0a:38:ec:7b:1c:00:25:a5:6e:7c:a5:c4:af:6d:29:75:fc:3c:
e9:48:c9:2a:93:35:b8:f6:16:f9:aa:37:a6:12:28:3b:98:66:
33:eb:5a:ad:82:b4:c6:45:fb:a0:5a:c6:ea:42:93:3f:ca:e8:
e4:42:1e:8e:b4:9e:62:41:63:04:4e:cb:58:26:5f:b8:79:13:
9f:72:ad:3b:6b:fe:24:43:00:87:a9:7b:88:63:69:40:8a:0d:
2a:c9:7b:f0:57:a8:76:bf:c9:15:f5:19:b1:b5:78:c5:d7:02:
d4:3d:d8:28:22:0a:b3:49:e9:92:16:c9:2c:dc:96:79:69:e9:
7f:83:c0:a8:5f:9f:fd:6e:36:06:3c:74:73:a9:c8:2e:09:f9:
4f:ea:60:17
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUSrr1R7miB+YpauGcOlVB5dQ4YrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yMzA2MjExNTE1NTFaFw0yNDA2MTkxNTIwNTFaMDMxMTAvBgNV
BAMTKEIxM0JEQjc2NTA4NUI4MkZFRDQwNjQ3QzJFMERGNjc3MjUzMTk3RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8VwIr3EAlANzRyg1fDoCxO/i
F9xnCNcx6+jETkWCeVQyutPyUm7Kuw4PuP5NW586QfEqZCm527dGRYYeSYAFVXvX
3a1ClWdCiqSGB/x6rZvgk+lGXbEuzCxUSEXad2klv6eDWY+zD1M7Ev5H9wmimu2F
AebIHUCEpOsNIyXesyT9tk3ezAoxtGXq+QXAdLQ5COoiAGatoAuYd3xOio2KkwQE
PIfwDl6rvx/IHRApU2Q0Looi6P6iZtcZgsnDpYfj/ODN0fiAzvFVrf+hVaIAjZ8M
NXyZ3CF4k0ijsuqiKYuwu7e1ob7b3exNLd5USEyyayQfdFnhHBtungXxSbc5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUsTvbdlCFuC/tQGR8Lg32dyUxl+YwHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQt
NDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvMzEzODM1MmUzMjJlMzEzNjMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbkC
ojANBgkqhkiG9w0BAQsFAAOCAQEAa72NIXEsqbYtEzHoYd+HgQbg+ekDvbqL8l+Q
EygLILiXuuQxif6xVUoVNpYO9Vi0AW2elcMOs5uGS4ctI4v7xTfotJrsh9q0kH1E
uH6NhAFhNJHOyjPad/MCs06iEZjgwAMyis3MFuXFZN7GCjjsexwAJaVufKXEr20p
dfw86UjJKpM1uPYW+ao3phIoO5hmM+tarYK0xkX7oFrG6kKTP8ro5EIejrSeYkFj
BE7LWCZfuHkTn3KtO2v+JEMAh6l7iGNpQIoNKsl78Feodr/JFfUZsbV4xdcC1D3Y
KCIKs0npkhbJLNyWeWnpf4PAqF+f/W42Bjx0c6nILgn5T+pgFw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:37 2025 by rpki-client