Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e20383334.roa
File: 36322e3131322e3134342e302f32302d3230203d3e20383334.roa (raw, json)
Hash identifier: HGJeaFaHCixnO2oD5CkD1NQ/itthN7s2deNuE/wcwNg=
Subject key identifier: 60:7C:E8:B4:6D:81:38:88:03:98:1A:42:E6:0B:D9:88:39:2B:01:EA
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 27922EB1B0C108D9434A48EDD7646EB20D4BEB23
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e20383334.roa
Signing time: Wed 21 Jun 2023 08:10:54 +0000
ROA not before: Wed 21 Jun 2023 08:05:54 +0000
ROA not after: Wed 19 Jun 2024 08:10:54 +0000
asID: 834
IP address blocks: 62.112.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:92:2e:b1:b0:c1:08:d9:43:4a:48:ed:d7:64:6e:b2:0d:4b:eb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Jun 21 08:05:54 2023 GMT
Not After : Jun 19 08:10:54 2024 GMT
Subject: CN=607CE8B46D81388803981A42E60BD988392B01EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:45:75:0a:be:da:ce:da:7e:c5:46:fb:c3:8f:
9e:1e:58:9f:16:a0:d3:8d:72:cd:6c:62:b8:62:7e:
b2:24:81:f4:8c:31:9d:be:31:7d:b4:a7:da:a7:2d:
71:06:f9:09:02:c7:dd:a2:b6:a3:23:29:8b:e8:2d:
32:d1:5f:00:89:43:f5:d0:af:f4:a4:4a:8d:fa:04:
e9:cb:f5:55:c8:f3:af:6d:b5:80:90:b1:18:ce:12:
d2:3e:e0:b6:b4:0d:b6:ed:04:58:f5:5b:16:56:12:
8d:c3:55:f2:05:59:2d:06:37:1e:54:5a:6b:af:69:
b8:66:8b:66:36:7a:36:c1:5e:7f:0e:22:80:f5:ed:
3d:f4:5e:71:36:52:a9:5a:47:64:11:cb:44:b3:ee:
02:27:59:7d:fe:8c:f1:cd:46:8e:06:d7:ad:b4:8f:
4e:e6:bd:d1:b5:52:2f:0e:6f:46:e9:d0:90:36:73:
85:60:39:83:92:88:03:44:c5:d1:46:d2:86:5a:83:
29:8d:f2:22:f9:1f:de:a6:8a:5c:db:30:26:1b:5a:
ea:49:61:e8:e5:21:e6:be:d8:b1:fd:ec:e9:1f:43:
e1:6d:92:c2:e5:8e:8f:cd:80:5c:6b:76:0d:13:ca:
d4:69:18:b1:b5:86:44:b1:6c:bd:db:5a:dc:53:03:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7C:E8:B4:6D:81:38:88:03:98:1A:42:E6:0B:D9:88:39:2B:01:EA
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3230203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.144.0/20
Signature Algorithm: sha256WithRSAEncryption
60:3b:75:c9:e0:37:7f:93:7c:bd:b7:bc:69:a8:b6:3b:fc:26:
24:f5:50:49:ab:5d:42:48:05:c1:0d:3c:bb:12:4d:20:4a:2c:
78:3f:53:fa:cb:0e:7f:d5:01:25:56:ad:9b:b0:9a:87:57:5c:
9e:e3:22:e3:e1:1d:7c:84:d2:dc:2d:ef:2e:1c:93:27:96:c7:
ca:d4:92:fc:ce:30:5f:5e:e8:58:6d:ef:5e:c4:a8:b4:90:d7:
8d:df:2c:da:63:57:08:99:16:1a:49:e8:3f:bf:b7:42:4d:9e:
f2:6d:56:b5:74:c2:9c:e5:0a:ea:39:45:06:8d:2a:83:75:c0:
fb:77:a4:ec:65:92:ae:0e:d2:2d:61:3b:36:ec:22:0c:ba:c7:
7f:82:78:b8:67:b4:26:99:e4:87:14:65:90:f8:83:8a:07:7c:
f7:de:a7:52:54:28:9b:b6:9b:45:76:9a:7c:ed:22:e0:98:37:
f2:72:42:3a:78:bc:bd:60:0a:ed:09:c2:50:e4:92:14:74:b0:
24:3b:40:86:1b:7f:13:01:a7:ab:b0:47:83:cb:0e:47:26:bc:
0b:0e:25:4f:84:68:12:7e:81:cc:9e:25:a9:11:c1:e0:fa:cb:
7c:f0:c3:76:27:86:bb:ae:28:b7:b5:ff:c1:97:eb:c3:c4:bf:
db:dc:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:52 2025 by rpki-client