Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3234302e302f32302d3234203d3e20323131393336.roa
File: 34362e3235302e3234302e302f32302d3234203d3e20323131393336.roa (raw, json)
Hash identifier: IjfPGRRSl5V9g4+wAUkzbP9Vl6TTksxmsX85El40MoI=
Subject key identifier: 26:0A:98:A0:AC:F1:D1:4A:6C:EF:DA:5C:14:DF:34:94:C3:21:8D:31
Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Certificate serial: 23E170A8330D74F383461EC99A63F8581443BAF5
Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3234302e302f32302d3234203d3e20323131393336.roa
Signing time: Sat 17 Dec 2022 04:34:16 +0000
ROA not before: Sat 17 Dec 2022 04:29:16 +0000
ROA not after: Sat 16 Dec 2023 04:34:16 +0000
asID: 211936
IP address blocks: 46.250.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e1:70:a8:33:0d:74:f3:83:46:1e:c9:9a:63:f8:58:14:43:ba:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad
Validity
Not Before: Dec 17 04:29:16 2022 GMT
Not After : Dec 16 04:34:16 2023 GMT
Subject: CN=260A98A0ACF1D14A6CEFDA5C14DF3494C3218D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:d4:2f:f1:6b:a1:3d:ea:99:4a:7f:46:7c:
7a:19:e3:99:05:73:42:61:f9:4a:76:4c:80:f5:42:
d9:91:4c:03:e4:45:7f:7a:0f:04:61:95:b9:6b:57:
83:92:de:b6:0d:1f:88:7d:99:2c:59:13:81:7b:c1:
40:ad:de:ae:6e:a8:47:d9:f3:10:4b:ed:23:d7:56:
d1:d4:64:56:3d:49:ec:e5:da:35:7a:91:c4:e4:db:
3b:fd:22:33:bb:79:17:7c:c2:44:b1:09:6f:f4:99:
37:40:69:ce:14:fd:d4:ec:99:f0:77:d9:a3:6e:6a:
69:f0:a4:50:1e:cd:9a:6b:70:be:3c:dd:fc:4f:64:
12:1a:28:a6:4c:c2:48:ed:a0:1e:d4:fd:4c:98:77:
81:00:83:50:26:e5:21:13:36:9c:88:47:5a:a8:39:
a1:d0:a7:9d:86:92:01:a5:a2:9e:1e:14:e4:10:cf:
0b:d1:0d:3d:e1:3f:39:63:6f:01:47:ed:4f:b6:c2:
1e:e3:98:fb:fb:de:89:8d:5b:26:39:fb:d7:fd:54:
4d:a3:f1:3f:d6:e9:96:a1:e4:5c:d6:88:33:fa:ff:
54:22:1a:bb:55:22:4d:e6:11:76:b0:56:50:99:95:
7f:3d:78:d7:fc:0c:18:25:25:16:2c:67:3f:a1:13:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0A:98:A0:AC:F1:D1:4A:6C:EF:DA:5C:14:DF:34:94:C3:21:8D:31
X509v3 Authority Key Identifier:
keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/34362e3235302e3234302e302f32302d3234203d3e20323131393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:92:8d:94:6e:fa:1a:8b:09:f6:e6:88:06:6b:ea:6f:79:3f:
25:c0:1b:01:8d:b5:3a:ef:74:05:6c:ac:e6:0f:86:c4:ac:28:
5f:22:d8:89:51:a3:5f:67:9d:4f:fe:1e:e7:06:98:1d:d3:0e:
01:82:8a:0b:4b:2f:b8:80:f9:42:e2:9f:f3:3d:68:83:5d:65:
4a:30:c5:f3:fb:2a:11:d9:da:d3:d3:b7:4b:3f:ad:a1:d5:44:
3b:89:0b:aa:04:1e:06:f5:6d:07:63:9c:82:85:06:70:b6:7d:
2d:05:a5:17:20:db:6b:db:d8:7d:59:87:6e:84:d0:d1:7d:34:
f1:a6:e8:81:94:70:df:c0:a3:73:4a:8f:8d:df:2d:91:c0:3a:
b6:b2:16:29:d2:1c:d6:9d:c1:24:5a:7e:c3:aa:2f:ca:43:9a:
e0:32:d0:b2:3a:44:1b:19:b3:b3:6b:9d:5f:52:76:35:ed:98:
72:23:c2:00:df:7e:d9:d5:c5:34:25:3c:b4:fe:82:49:8e:4f:
ea:a1:d1:ea:25:cb:75:88:2c:aa:8f:d0:b0:0d:73:6c:62:ce:
2c:0b:42:1c:fb:d2:c4:ca:f0:aa:76:fc:04:73:24:c1:46:f6:
7b:3e:ba:3d:e4:4e:05:b2:1a:ab:11:af:fa:e2:86:f0:61:9b:
de:2a:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org