Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20323132323938.roa
File: 3139332e39332e3135332e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier: C25Cl269Xnqwq/M1wi1DdRdU6EKv30mk0oLfYzP+v6U=
Subject key identifier: F5:3D:59:43:1F:C7:02:84:7A:2D:0B:34:F6:06:64:F9:94:D0:78:07
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 46146986810E8DD3A8A0AC7879A86A41711B2753
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20323132323938.roa
Signing time: Tue 04 Apr 2023 16:44:24 +0000
ROA not before: Tue 04 Apr 2023 16:39:24 +0000
ROA not after: Tue 02 Apr 2024 16:44:24 +0000
asID: 212298
IP address blocks: 193.93.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:14:69:86:81:0e:8d:d3:a8:a0:ac:78:79:a8:6a:41:71:1b:27:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Apr 4 16:39:24 2023 GMT
Not After : Apr 2 16:44:24 2024 GMT
Subject: CN=F53D59431FC702847A2D0B34F60664F994D07807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:88:63:25:d1:2e:8f:ed:1f:7d:c4:a9:3a:aa:
7f:91:81:94:12:dd:b3:6c:1c:a1:3d:39:9c:d8:b8:
04:63:43:42:c3:b6:54:5d:82:7c:49:a9:8f:b1:ec:
7a:91:4b:f1:a0:50:37:4e:b6:56:06:49:af:d9:c1:
d2:40:61:39:9c:51:28:e1:8e:6c:2d:ba:88:d3:10:
2b:d6:cd:6d:0f:75:ce:66:27:b8:c5:62:52:e5:e4:
6e:e3:9b:af:83:dd:b4:4c:e1:54:13:ac:d3:2e:18:
33:f9:cd:e6:53:52:1f:fe:0f:c1:ce:62:26:da:44:
61:bd:b6:91:ba:8e:e5:ff:35:18:e7:ba:03:fb:09:
80:f7:35:54:8b:f4:0b:9d:a3:99:27:83:06:22:a2:
a5:a2:2c:b0:2a:05:57:a0:98:1e:46:64:7e:c8:47:
85:f8:da:e8:00:1d:7b:71:11:f3:01:f6:e1:c7:73:
cb:3d:73:13:f8:d8:6a:26:0a:d0:1c:da:98:c7:7f:
80:43:ba:e3:d6:8c:ec:c3:12:3c:b4:db:32:58:81:
42:d0:fe:73:5f:9a:eb:d5:c0:bb:16:24:80:91:59:
fe:b2:e4:75:80:11:65:54:b2:99:4f:58:f6:1b:b0:
07:26:a6:65:68:0e:cb:bc:ad:7b:c3:7c:a4:38:6b:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3D:59:43:1F:C7:02:84:7A:2D:0B:34:F6:06:64:F9:94:D0:78:07
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135332e302f32342d3234203d3e20323132323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.153.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:7f:be:53:71:db:08:19:44:83:97:bc:27:29:45:41:cd:57:
75:46:af:dd:cd:cc:3a:ba:60:dc:2b:d4:aa:68:6a:47:89:0a:
5a:26:a4:30:0c:b0:19:23:b3:ab:7d:1a:c2:91:45:35:f4:ae:
f7:f6:f5:e6:2a:a3:f3:46:cb:ea:49:8c:f0:60:e2:44:81:e8:
86:8b:24:91:0b:26:62:00:cb:27:da:a6:79:e4:74:46:b8:ee:
73:27:3f:04:33:3c:ef:0f:16:33:68:a8:ef:da:5a:87:7c:ca:
36:19:21:b9:14:12:22:b9:81:7b:e0:c9:63:1d:48:a6:40:a1:
76:00:35:68:76:77:b8:cc:78:29:38:02:0e:b4:8b:d0:6b:5d:
e8:d1:3b:fa:97:4e:4e:c8:91:b8:02:d4:af:a0:d5:dd:31:68:
69:67:da:d8:84:1d:5b:83:b0:2f:4e:fb:5c:83:45:2d:fb:6a:
86:02:1a:ee:1e:14:ef:bc:a5:20:2a:30:70:db:fc:16:42:ba:
95:48:c1:82:1f:80:81:32:29:ea:64:58:8a:18:cb:2e:c1:db:
fe:f5:c1:fe:7b:3c:dd:f0:65:33:1d:81:6e:28:5e:77:13:c0:
8b:d8:30:2f:ad:d2:85:78:53:78:2f:b0:be:06:ae:86:16:7e:
c0:dc:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org