Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e2033333230.roa
File: 34362e3235302e3232342e302f32302d3234203d3e2033333230.roa (raw, json)
Hash identifier: +HGR7sHz9yKjilpwzzcTgz/H1wjQ9CkVnE6L0/mVtKs=
Subject key identifier: 4A:42:49:D5:AD:2B:ED:CD:83:1B:F4:53:C0:AA:2E:CA:35:58:EE:B5
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 34C1773FBD60A6E78494CCB7547A576B73DB633E
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e2033333230.roa
Signing time: Tue 13 Dec 2022 02:29:56 +0000
ROA not before: Tue 13 Dec 2022 02:24:56 +0000
ROA not after: Tue 12 Dec 2023 02:29:56 +0000
asID: 3320
IP address blocks: 46.250.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c1:77:3f:bd:60:a6:e7:84:94:cc:b7:54:7a:57:6b:73:db:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Dec 13 02:24:56 2022 GMT
Not After : Dec 12 02:29:56 2023 GMT
Subject: CN=4A4249D5AD2BEDCD831BF453C0AA2ECA3558EEB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:52:7c:00:16:f9:9e:60:35:c2:85:80:c9:
8b:3b:4d:eb:60:d0:53:94:b1:61:4f:e9:8b:a2:70:
40:d3:df:b3:8c:02:5a:3a:a6:4e:1f:55:08:d5:85:
5b:0e:3a:c4:e3:20:c9:0c:c7:a5:33:d4:c7:df:de:
81:aa:d9:49:21:e1:a2:ea:57:53:eb:bd:2f:fe:5f:
98:6f:8c:a9:bb:7a:f9:e2:7f:d4:78:b5:5b:6d:2a:
c3:62:70:b3:87:40:6a:b8:29:3a:9c:03:aa:21:8b:
4f:86:51:f7:ae:95:de:9f:1d:e4:fd:e1:d9:ee:dc:
01:87:03:8c:26:6a:e5:30:00:4e:72:85:6a:d7:6f:
76:46:6c:62:bf:28:83:9b:76:68:1f:f0:ba:7d:d1:
30:7e:d1:be:fd:e7:77:2c:4c:83:38:72:f2:35:94:
67:d0:e6:7f:90:4b:10:3d:1c:d1:e7:4d:a0:8f:44:
e3:d9:5b:b1:d8:29:95:ed:fb:fb:77:0f:10:48:ad:
15:54:a2:5e:59:7b:fc:4d:c5:5a:de:00:d0:d0:5a:
35:44:64:80:a0:bd:88:dd:eb:a7:80:0b:b6:7b:9d:
53:a4:1f:b1:fb:a4:c3:96:62:1d:15:7d:fd:26:38:
7d:2b:45:8f:ef:6b:13:d5:b4:6a:8e:73:e2:c0:85:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:49:D5:AD:2B:ED:CD:83:1B:F4:53:C0:AA:2E:CA:35:58:EE:B5
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3232342e302f32302d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.224.0/20
Signature Algorithm: sha256WithRSAEncryption
75:1c:55:bc:b2:61:00:0d:1f:cd:3b:c4:95:cc:73:38:ed:99:
a5:c2:33:93:9b:a8:5e:3a:a8:37:1b:03:9d:ee:38:eb:59:70:
e0:44:77:79:2b:67:ea:21:2f:2c:45:0f:ee:4c:25:61:9b:04:
96:5d:78:2e:a3:65:be:90:d3:6c:6b:52:c3:86:26:77:4b:bb:
e8:a7:53:0d:c5:82:ff:16:f6:c6:8d:6a:f5:6e:c9:92:d3:d1:
91:ec:4c:16:eb:b2:42:ba:c1:44:82:af:cf:ce:10:2d:6b:e0:
fd:23:92:52:c3:eb:7e:12:8d:5c:c9:46:ee:22:01:eb:1d:7b:
3b:d6:75:ff:44:23:07:85:7d:1f:df:e7:2e:a0:7e:11:a9:c9:
b2:7a:ed:d8:6b:3c:64:fc:64:23:e0:81:33:8e:77:eb:28:e9:
d7:74:de:23:d0:88:70:cf:a4:0c:16:54:64:29:f7:ac:71:a0:
66:bc:35:a4:92:54:0e:ea:23:33:d3:e2:d7:e3:25:46:84:ce:
b6:a4:fc:e1:07:2e:43:1a:dc:07:0a:bb:a2:25:e8:18:2c:ae:
c6:03:ec:8f:2e:ee:3b:64:3e:11:8b:be:71:5d:21:07:1e:7c:
9a:e2:7a:3c:0a:89:5d:9f:fd:ff:9a:6e:dc:63:b9:88:29:7c:
a8:fd:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org