Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3233322e302f32312d3234203d3e2033333230.roa
File: 34362e3235302e3233322e302f32312d3234203d3e2033333230.roa (raw, json)
Hash identifier: 4IN1958EpnEjZ/WatfhzpcaoMBGjZP31OXPnkFkCS50=
Subject key identifier: F8:95:61:CA:E3:5F:BC:39:5F:4B:44:E1:C1:5D:F8:2B:1C:B2:40:44
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 5477132F36F818D1A4664BD7151FB0FB53673CAF
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3233322e302f32312d3234203d3e2033333230.roa
Signing time: Wed 14 Dec 2022 12:23:20 +0000
ROA not before: Wed 14 Dec 2022 12:18:20 +0000
ROA not after: Wed 13 Dec 2023 12:23:20 +0000
asID: 3320
IP address blocks: 46.250.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:77:13:2f:36:f8:18:d1:a4:66:4b:d7:15:1f:b0:fb:53:67:3c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Dec 14 12:18:20 2022 GMT
Not After : Dec 13 12:23:20 2023 GMT
Subject: CN=F89561CAE35FBC395F4B44E1C15DF82B1CB24044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:77:14:bb:46:4f:52:7a:ed:cf:a2:7c:fd:a3:
da:d6:2a:56:f1:50:92:5c:1e:c7:9f:9c:1b:8d:34:
48:6f:ca:ee:9f:9d:b0:14:10:73:4c:db:1e:30:6f:
0a:1f:9c:ad:25:9b:4f:ab:b4:74:04:0e:4f:95:5d:
97:cf:0d:04:18:6c:08:90:2d:a0:65:02:41:f6:d5:
4a:15:23:06:77:c5:2f:c2:29:80:fc:b3:21:fe:1c:
06:a3:13:1d:0b:3a:33:d9:ee:49:9e:4d:f4:22:cb:
df:13:fa:b7:46:ff:4e:d4:28:a5:a5:1e:e2:0c:52:
cd:5c:2d:13:d4:4b:dd:da:f5:55:69:53:ef:2a:1a:
a2:98:c7:c5:17:46:0d:a7:ca:a7:e5:d0:10:49:a3:
27:f2:fe:75:fe:eb:ab:d2:f4:94:58:12:71:f0:d3:
ba:d3:86:f9:a8:ce:16:04:5f:55:76:7a:ad:5e:28:
70:f7:1b:91:e9:70:b7:97:1e:07:0d:20:77:d7:1f:
23:d7:e7:7f:d1:6e:a8:2a:93:22:02:25:b0:e6:a7:
df:0c:ae:fc:af:d7:19:bc:e3:f4:7b:3c:ce:c4:fc:
17:29:47:64:f5:60:29:05:54:ef:aa:af:37:58:75:
dd:87:2d:2d:2c:a7:53:d3:c4:57:ae:05:85:25:21:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:61:CA:E3:5F:BC:39:5F:4B:44:E1:C1:5D:F8:2B:1C:B2:40:44
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3233322e302f32312d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.232.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:b2:4d:8b:1f:8f:94:5e:88:b8:cc:0a:78:aa:1e:dd:ed:53:
1d:8e:06:f8:53:26:a7:1f:74:0b:14:df:9f:b7:8a:6e:90:41:
2d:76:14:46:d6:bc:61:bf:f0:2b:ec:76:86:5a:2b:98:de:39:
ad:b2:1b:e6:6c:0b:96:b5:69:8a:09:a2:89:29:36:ef:ee:77:
b7:f7:c3:6a:6c:73:2e:aa:5e:3e:f9:e2:77:79:88:36:a2:5e:
2f:98:36:40:fa:e9:68:cc:c4:6d:b4:77:65:a8:8c:bb:bc:ea:
c5:b5:a7:26:57:82:35:f5:74:cb:68:33:4e:f8:7e:41:b8:0b:
e5:80:99:66:5b:ef:98:ac:73:f3:53:bf:73:6c:58:84:8f:3f:
db:70:cf:4c:b2:ea:27:c4:68:d1:3b:32:48:9c:41:ed:84:79:
84:da:75:22:10:05:75:be:e7:f2:6c:d7:7e:1c:a1:eb:22:71:
f7:ef:43:ff:6b:d0:90:a5:68:50:2f:22:45:b1:b1:ea:e3:d6:
43:21:f5:4a:30:96:8a:ac:e3:af:9c:66:e6:55:bf:a0:01:fb:
95:e6:29:51:b3:c2:f6:06:35:17:39:6c:0f:a5:3f:65:76:91:
2d:05:d3:63:b2:69:d7:49:95:b1:66:0f:b0:49:8b:a7:08:25:
e2:25:46:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org