Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e203631333137.roa
File: 3137312e32322e37392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 45kCKq8d+9s0/B+QuugjdZVQQM0WBBp/8U83CP7P6Dk=
Subject key identifier: F3:7F:C3:B8:6E:89:68:0E:5F:B1:28:4A:BE:4A:BF:4E:A9:57:31:27
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 590288A96181026089E6EAA93A4DEFC87E49B1FB
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e203631333137.roa
Signing time: Sun 18 Jun 2023 12:49:16 +0000
ROA not before: Sun 18 Jun 2023 12:44:16 +0000
ROA not after: Sun 16 Jun 2024 12:49:16 +0000
asID: 61317
IP address blocks: 171.22.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:02:88:a9:61:81:02:60:89:e6:ea:a9:3a:4d:ef:c8:7e:49:b1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 18 12:44:16 2023 GMT
Not After : Jun 16 12:49:16 2024 GMT
Subject: CN=F37FC3B86E89680E5FB1284ABE4ABF4EA9573127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:4d:ac:f3:92:e7:87:01:a5:57:96:7d:b9:
3d:0b:fc:7b:57:27:84:9b:a1:96:fb:4b:d3:ea:03:
ec:3b:7f:52:87:7b:7c:fd:0c:97:17:ea:2f:9b:b1:
36:24:17:e8:39:02:50:f8:13:b7:94:98:ef:ae:9d:
0c:89:0c:db:b3:c5:06:e7:83:18:47:ab:5b:43:48:
ac:22:92:ed:3f:78:cb:e7:41:f0:a6:0c:27:85:58:
86:88:12:e6:78:e9:4d:1c:c4:f1:d4:c9:6e:3c:da:
d3:d1:c2:be:95:84:97:85:c6:01:85:f6:0a:d2:03:
89:70:d6:73:96:ed:3c:85:0f:2b:37:e2:0a:38:07:
4c:20:d4:ad:5e:fe:7c:f2:ff:63:69:fe:ff:f1:82:
86:c8:22:1b:8d:eb:82:60:b5:38:f5:f1:f8:a8:e0:
2b:d6:84:0c:70:5c:6c:71:b7:7f:aa:6d:be:a4:5e:
b2:ca:54:34:3d:56:cb:4e:05:20:cf:48:46:85:47:
47:28:73:13:f5:74:c6:0c:8a:7f:90:07:34:45:62:
c7:c9:9e:d5:11:9c:a1:60:cb:24:39:f9:1b:94:d5:
6e:f2:02:be:75:44:27:65:a2:f4:0e:59:49:ca:dd:
dc:58:2b:a6:71:cc:6c:76:66:a2:0d:cb:13:c9:52:
00:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:C3:B8:6E:89:68:0E:5F:B1:28:4A:BE:4A:BF:4E:A9:57:31:27
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3a:ae:0a:4b:48:1c:3b:be:df:06:ca:b0:a7:d7:31:50:b4:
7e:80:e4:3a:77:7d:a1:af:ea:21:fc:c5:39:26:5a:b8:1b:29:
5c:7a:cb:11:b2:a3:86:91:6f:08:b7:53:43:07:45:a3:fe:df:
ad:9c:bd:dc:e4:c4:47:61:15:03:4d:be:67:c1:cb:64:68:ef:
08:84:8e:63:b3:d0:e8:cf:aa:88:e4:47:17:49:32:ca:3a:6f:
58:44:68:c1:e9:9a:d2:53:8a:4c:f8:4f:3c:10:ff:06:b7:d7:
45:54:f7:1a:6d:8e:7a:a4:33:7e:8e:1b:19:bc:a6:8d:98:67:
63:69:35:77:07:2a:80:d4:08:42:25:7f:f8:84:e1:6c:e3:7e:
66:3d:cc:4e:d2:83:97:24:a6:55:50:7c:ec:f7:61:2d:88:a2:
6b:74:bc:af:8b:60:cb:95:76:6c:69:cf:0c:3d:df:d9:93:c7:
72:bf:58:e3:e3:77:e5:68:4a:17:10:78:1f:ba:51:84:e2:a5:
69:dd:78:0a:d3:04:37:2c:31:38:1a:93:a2:62:dc:a3:22:fd:
72:21:25:34:66:59:ce:95:e5:4a:7d:1f:3d:aa:88:8a:9a:e2:
a3:38:ee:9c:f0:21:93:0f:44:a2:61:3f:17:bc:15:92:4c:7f:
d1:e4:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:54 2025 by rpki-client