Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3234203d3e203339363030.roa
File: 36322e3131322e3134342e302f32302d3234203d3e203339363030.roa (raw, json)
Hash identifier: FEHP6ilpYKEWRhG0IrPUHZLDhp7S9I5SCISGa7mOrbc=
Subject key identifier: 53:F0:D3:A7:B2:7A:E0:39:09:7B:1B:B0:38:96:15:F5:9D:44:63:AF
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 6F4F043D6056C922E2649F6834C410BF2046BBE5
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3234203d3e203339363030.roa
Signing time: Fri 06 Oct 2023 15:18:41 +0000
ROA not before: Fri 06 Oct 2023 15:13:41 +0000
ROA not after: Fri 04 Oct 2024 15:18:41 +0000
asID: 39600
IP address blocks: 62.112.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4f:04:3d:60:56:c9:22:e2:64:9f:68:34:c4:10:bf:20:46:bb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Oct 6 15:13:41 2023 GMT
Not After : Oct 4 15:18:41 2024 GMT
Subject: CN=53F0D3A7B27AE039097B1BB0389615F59D4463AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:e7:9f:9d:e9:f9:d9:e0:0e:f8:6f:7f:26:
59:16:29:72:30:61:62:e2:bc:fe:d8:5a:80:5c:71:
c1:86:bd:34:ef:15:d4:89:b9:be:25:1e:a1:e3:6e:
54:61:26:bc:9f:fd:dd:a0:6b:7c:ff:af:dd:33:de:
d3:2e:1a:72:d6:07:19:cb:ad:af:4d:1f:ee:fa:37:
d9:d4:34:53:fa:8e:d3:5c:9f:9c:ff:ed:7e:54:13:
c1:47:6b:20:d9:a3:95:a0:7b:70:c7:74:2a:88:16:
dc:8f:9d:58:81:71:3f:c6:82:06:1d:60:ba:d1:87:
17:e2:2b:60:53:f5:a8:82:00:60:d6:43:4a:b5:61:
94:e0:f4:51:52:bb:8f:7b:0e:3c:85:66:bf:71:d3:
3f:c4:6f:68:4d:96:05:38:1b:94:0c:49:cf:b2:6c:
62:69:7d:b0:f1:87:62:e0:6c:4d:22:2a:85:a6:86:
c4:0d:72:8d:71:a3:59:d2:23:9b:de:01:d2:2e:0e:
89:ed:38:51:f6:af:14:27:d9:d8:9d:61:cc:ea:e0:
19:cc:96:ec:e4:9b:75:5a:eb:21:08:66:4d:a0:2e:
71:b2:f2:e0:fc:08:8c:0d:e8:a7:2c:9b:29:99:1b:
9b:b5:1b:15:0d:a1:c7:31:02:e0:c3:eb:96:61:05:
32:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:D3:A7:B2:7A:E0:39:09:7B:1B:B0:38:96:15:F5:9D:44:63:AF
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/36322e3131322e3134342e302f32302d3234203d3e203339363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.144.0/20
Signature Algorithm: sha256WithRSAEncryption
46:d6:02:dc:fe:7f:6c:8f:53:12:fa:79:98:47:89:8c:64:49:
0a:f1:cd:74:6f:94:db:38:11:08:af:a0:03:9d:dc:36:a8:a1:
bc:3a:7a:4a:d7:f0:2a:4f:78:9c:00:62:94:e5:89:21:a4:09:
22:29:17:ee:4b:fb:0e:e4:77:ed:0e:dc:ce:c8:90:fc:8d:6e:
1c:1c:40:f9:ea:81:3a:bb:d5:64:58:d2:35:bc:12:99:9c:d8:
0e:3f:f0:43:70:bc:e8:1e:5d:22:80:51:9d:46:8e:8f:ae:a2:
51:63:1f:44:c4:51:84:23:da:ef:df:db:ed:d8:9d:d9:ff:b9:
ee:b2:7c:bf:82:6a:89:71:9d:53:9e:ea:f4:12:6c:5f:46:42:
82:2e:dd:c6:95:02:9a:22:8a:39:c6:de:50:5d:6a:67:98:22:
a9:41:53:9f:e7:ea:ca:ab:ff:98:d8:d4:d4:f1:5a:4a:f7:0e:
83:e6:bc:67:a8:d1:67:c4:f8:31:27:08:5a:1f:e1:88:e2:ba:
05:50:74:10:8b:08:9e:63:92:09:e5:e6:43:de:d8:70:53:f6:
a9:9e:d1:59:32:52:25:51:1f:78:96:fe:62:5b:d8:ae:a4:dd:
89:7a:91:ed:06:61:55:e8:7f:8d:70:f7:60:70:59:7b:6b:ee:
5e:ce:b0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:37 2025 by rpki-client