Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e203239383032.roa
File: 36322e3131322e3132382e302f32302d3234203d3e203239383032.roa (raw, json)
Hash identifier: RfBCU5z6Bv7YZDP880cMHvFwAUUSwvwiERQG4/6JCv4=
Subject key identifier: 21:EE:CE:51:E2:8A:1C:DB:D9:15:ED:43:83:F2:9F:53:21:89:34:96
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 0440EB4B34A0B24A4DE5234A79558D0E03313E44
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e203239383032.roa
Signing time: Mon 20 Nov 2023 05:11:48 +0000
ROA not before: Mon 20 Nov 2023 05:06:48 +0000
ROA not after: Mon 18 Nov 2024 05:11:48 +0000
asID: 29802
IP address blocks: 62.112.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:40:eb:4b:34:a0:b2:4a:4d:e5:23:4a:79:55:8d:0e:03:31:3e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Nov 20 05:06:48 2023 GMT
Not After : Nov 18 05:11:48 2024 GMT
Subject: CN=21EECE51E28A1CDBD915ED4383F29F5321893496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:4e:6d:87:a1:de:82:78:2f:a5:c6:39:1e:
4a:fd:69:9f:80:57:cc:a4:3d:49:9b:68:5e:07:f5:
9e:8c:ac:08:dd:58:e1:18:e2:79:cd:00:16:1a:82:
86:0b:89:76:ce:5c:aa:af:cb:3e:7c:d9:59:1c:f0:
0c:62:3f:25:4a:a8:78:c2:0f:80:bf:46:da:01:bc:
bb:67:43:4d:18:42:ae:c6:b5:d6:50:4a:59:4a:e4:
ff:00:46:77:44:97:b0:8e:85:5c:5a:a6:5a:d6:d0:
03:26:27:07:a8:8b:d1:0b:a2:16:f4:f8:0b:37:de:
fd:f6:88:c7:6c:ea:a4:a4:6a:bc:eb:70:d5:c3:79:
b3:bf:d3:40:1e:61:60:a9:0a:93:8d:9a:a4:e2:38:
41:92:ea:6a:68:b9:c0:1c:3d:67:c8:43:85:69:d7:
01:26:15:f5:1a:df:63:6e:50:ac:01:24:cb:7a:26:
4d:f7:6c:08:e9:c6:ff:0d:15:3b:8b:20:3e:ee:44:
49:54:e4:87:b6:8b:a2:03:c2:be:fc:b5:b2:4e:3f:
a9:82:5d:3c:5f:77:7c:5d:fb:ef:02:13:4b:ab:1d:
1d:a1:91:50:b8:03:4b:d8:62:6b:82:c8:c0:1b:db:
60:37:08:e1:db:a5:76:97:f4:77:82:39:fa:75:7e:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:CE:51:E2:8A:1C:DB:D9:15:ED:43:83:F2:9F:53:21:89:34:96
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3132382e302f32302d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:27:5b:62:23:e9:78:e5:de:bc:13:00:f9:00:bf:66:23:15:
50:c1:07:c0:4b:81:1d:92:50:cc:b7:e5:37:06:c0:2d:80:3b:
6b:f2:12:e2:22:f1:e8:75:d7:8f:47:1c:38:a1:83:ea:45:91:
b2:f7:69:cf:07:4d:a0:32:89:25:86:e2:23:a2:fb:0e:d2:04:
3c:84:77:c2:cf:55:66:e1:e9:96:94:39:90:08:98:19:a2:10:
7a:4f:3d:af:ef:dd:2c:59:32:13:64:d0:c3:ae:6e:76:cd:57:
53:1d:10:f5:91:fc:a2:f5:c5:a5:42:82:c2:af:65:8a:95:7c:
89:96:47:06:fc:8f:d2:21:bb:c5:95:34:8e:76:12:a7:7b:33:
b6:8e:bf:d7:c2:17:1c:e9:26:ab:3c:29:bd:e7:d0:bd:59:92:
ae:1d:11:00:b0:6d:c4:58:75:c8:23:88:16:55:87:81:8a:17:
a1:1a:aa:04:79:c7:ac:ce:50:ef:83:40:2d:08:b3:8a:05:62:
44:0e:14:62:24:c5:1d:48:72:1c:65:a8:bc:f1:c3:31:ed:43:
e5:3f:ea:72:19:b2:eb:8d:0a:b6:c6:25:0a:85:22:11:25:1a:
4b:58:31:a5:cb:75:65:7f:e2:95:59:89:31:e4:96:2f:a6:57:
c8:1f:81:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:33 2025 by rpki-client