Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e203232373831.roa
File: 36322e3131322e3134342e302f32302d3230203d3e203232373831.roa (raw, json)
Hash identifier: xKBvReQIVuawnI+g7Z0ZCOFlz/f/54IAtfGZLQIH8oY=
Subject key identifier: C7:28:FD:CC:EA:9A:A4:6F:1B:B5:15:18:51:BC:C5:31:3D:58:1C:8A
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 7663794E29268D991CED3AF4A210FFDF9F557911
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e203232373831.roa
Signing time: Thu 16 Nov 2023 22:01:15 +0000
ROA not before: Thu 16 Nov 2023 21:56:15 +0000
ROA not after: Thu 14 Nov 2024 22:01:15 +0000
asID: 22781
IP address blocks: 62.112.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:63:79:4e:29:26:8d:99:1c:ed:3a:f4:a2:10:ff:df:9f:55:79:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Nov 16 21:56:15 2023 GMT
Not After : Nov 14 22:01:15 2024 GMT
Subject: CN=C728FDCCEA9AA46F1BB5151851BCC5313D581C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:ff:db:4b:8f:5c:b7:98:e1:30:a8:f0:33:
95:84:1d:4a:56:29:47:1c:af:9d:a0:20:42:03:c5:
70:fd:b2:f0:dd:06:6e:44:68:8b:bf:d7:18:48:ff:
00:e0:46:03:31:b4:83:0d:2f:97:42:91:78:b6:e5:
88:b9:b3:ee:e4:48:1c:07:37:93:55:4d:ec:3e:34:
d5:a6:26:cc:4e:46:ce:95:7b:1f:e5:26:6b:58:58:
7e:d3:c9:87:59:6a:ca:1b:c6:2a:6b:17:75:9c:1e:
e0:5c:3b:8d:a6:b8:12:43:ae:6a:88:3b:7b:a5:cc:
1e:b0:57:73:45:00:b3:75:ec:1c:8a:28:2f:cf:68:
67:b6:c1:6b:04:8a:6f:df:00:fa:84:94:9b:fa:ec:
6b:43:d4:26:4e:ae:b9:6b:c3:ab:2e:7e:cd:37:a6:
9b:d3:72:aa:1f:e8:9c:27:85:46:19:4c:7b:94:07:
1c:43:9f:65:db:72:2b:3d:34:1e:d5:b1:21:50:c6:
52:71:64:c5:16:95:d5:ad:7e:db:99:b2:64:fe:62:
96:5c:32:7c:a7:e3:5e:28:fd:2c:0e:eb:27:ec:0b:
a3:3a:aa:3e:34:61:82:e1:38:40:51:69:e6:49:37:
9d:99:75:0d:f7:f4:59:e1:b6:59:ba:78:b5:24:a1:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:28:FD:CC:EA:9A:A4:6F:1B:B5:15:18:51:BC:C5:31:3D:58:1C:8A
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e203232373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.144.0/20
Signature Algorithm: sha256WithRSAEncryption
36:28:9e:8e:81:91:e8:ce:34:55:f8:cd:b0:66:a8:ce:f8:a5:
04:5e:7f:54:6c:c4:98:dd:d7:c7:5d:85:e3:94:39:c0:70:98:
b7:fb:6b:fa:6d:91:64:a5:57:62:ac:19:50:86:82:76:e8:9a:
8f:8d:7d:b2:97:ad:ef:a6:63:ce:4a:fc:ce:70:93:1a:9c:b3:
5d:42:ef:36:7e:c7:e6:85:52:fc:94:8e:c4:1d:a5:9c:a3:b2:
a4:e2:cb:01:a2:a0:dd:e7:a3:22:89:62:69:39:c7:07:05:60:
10:6b:d0:b9:b9:bd:83:b8:53:df:c2:a7:69:96:8e:91:12:e7:
79:21:2b:d9:dc:87:0a:35:f4:0a:d7:da:26:74:0b:c3:6a:7e:
e3:ff:f5:8f:59:35:4c:45:8f:48:70:1b:81:10:16:28:10:28:
2d:c1:68:af:cd:84:01:7b:12:06:29:aa:91:11:fe:a9:c5:50:
31:01:b3:e9:95:84:d7:f9:8c:9a:e7:57:1c:44:69:6a:51:f3:
03:e3:e5:f2:24:8e:ff:06:74:17:f7:af:bb:21:d7:75:84:a9:
ff:5a:8c:3c:86:4a:f6:ca:63:24:85:1d:70:ca:d5:6a:a1:ee:
dd:c7:80:2f:aa:a6:45:52:75:ca:8a:1e:3b:11:00:ff:cd:d8:
75:05:0f:43
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdmN5TikmjZkc7Tr0ohD/359VeREwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yMzExMTYyMTU2MTVaFw0yNDExMTQyMjAxMTVaMDMxMTAvBgNV
BAMTKEM3MjhGRENDRUE5QUE0NkYxQkI1MTUxODUxQkNDNTMxM0Q1ODFDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxf/bS49ct5jhMKjwM5WEHUpW
KUccr52gIEIDxXD9svDdBm5EaIu/1xhI/wDgRgMxtIMNL5dCkXi25Yi5s+7kSBwH
N5NVTew+NNWmJsxORs6Vex/lJmtYWH7TyYdZasobxiprF3WcHuBcO42muBJDrmqI
O3ulzB6wV3NFALN17ByKKC/PaGe2wWsEim/fAPqElJv67GtD1CZOrrlrw6sufs03
ppvTcqof6JwnhUYZTHuUBxxDn2Xbcis9NB7VsSFQxlJxZMUWldWtftuZsmT+YpZc
Mnyn414o/SwO6yfsC6M6qj40YYLhOEBRaeZJN52ZdQ339Fnhtlm6eLUkoYm/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUxyj9zOqapG8btRUYUbzFMT1YHIowHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQt
NDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3ODEzLzAvMzYzMjJlMzEzMTMyMmUzMTM0
MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjMyMzczODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
PnCQMA0GCSqGSIb3DQEBCwUAA4IBAQA2KJ6OgZHozjRV+M2wZqjO+KUEXn9UbMSY
3dfHXYXjlDnAcJi3+2v6bZFkpVdirBlQhoJ26JqPjX2yl63vpmPOSvzOcJManLNd
Qu82fsfmhVL8lI7EHaWco7Kk4ssBoqDd56MiiWJpOccHBWAQa9C5ub2DuFPfwqdp
lo6REud5ISvZ3IcKNfQK19omdAvDan7j//WPWTVMRY9IcBuBEBYoECgtwWivzYQB
exIGKaqREf6pxVAxAbPplYTX+Yya51ccRGlqUfMD4+XyJI7/BnQX96+7Idd1hKn/
Wow8hkr2ymMkhR1wytVqoe7dx4AvqqZFUnXKih47EQD/zdh1BQ9D
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:07 2025 by rpki-client