Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3134342e302f32342d3234203d3e2036383439.roa
File: 33372e35322e3134342e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: 5TIK5u5Jt3DpkigYOC4cwYAyNUerNujUlxx8VMYOiC8=
Subject key identifier: AF:A0:DF:AE:6C:AF:2C:27:48:12:F2:E7:70:92:25:6E:C2:1F:C3:F7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 34E419DF769F1A631AB39905682823BC0061BE4A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3134342e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:39:11 +0000
ROA not before: Tue 20 Feb 2024 14:34:11 +0000
ROA not after: Tue 18 Feb 2025 14:39:11 +0000
asID: 6849
IP address blocks: 37.52.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:e4:19:df:76:9f:1a:63:1a:b3:99:05:68:28:23:bc:00:61:be:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:34:11 2024 GMT
Not After : Feb 18 14:39:11 2025 GMT
Subject: CN=AFA0DFAE6CAF2C274812F2E77092256EC21FC3F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:f1:66:1b:66:65:c4:d4:95:4f:16:3a:1b:
b3:e9:2a:e3:89:3e:4f:d7:bc:5c:76:86:fd:b8:fb:
44:2e:18:3c:36:7e:cf:24:6d:48:9c:14:4f:90:0c:
8e:47:00:f3:0c:94:23:69:1f:50:64:0e:23:64:74:
f2:d6:68:42:64:e7:47:d2:95:5c:83:e7:3d:e3:53:
26:35:3e:02:27:84:b1:c0:4f:92:26:42:a5:04:76:
b7:e5:0c:ec:6c:2b:0a:48:6e:c1:80:3b:00:b5:f0:
28:fa:e8:c8:da:38:15:e7:e0:de:a0:b4:ae:2f:8b:
4c:5d:64:ef:21:91:4b:f8:ee:4e:8d:3b:df:51:5a:
57:a6:44:00:72:bb:60:40:a9:e7:ce:27:10:2a:bf:
ce:fe:49:c5:b4:6b:18:99:5d:85:25:be:19:08:7e:
77:3a:2d:10:12:05:53:00:e4:9b:3b:b0:ad:b4:f9:
f2:25:38:33:6f:88:ce:15:bd:30:9a:13:eb:50:99:
5c:29:0e:7e:f3:4f:90:20:fb:dd:61:f4:69:17:ba:
1b:75:09:4e:68:a0:1d:34:cc:48:f9:f7:36:1b:30:
2c:6d:2e:b2:65:44:46:3e:13:7d:2e:99:01:7c:57:
04:f8:5b:30:c9:ae:4b:37:bb:9f:0c:dd:71:27:07:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:DF:AE:6C:AF:2C:27:48:12:F2:E7:70:92:25:6E:C2:1F:C3:F7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e3134342e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:41:bf:e8:16:ed:87:3b:a5:16:5a:51:a9:cf:d5:01:01:76:
5d:4e:05:40:17:2a:02:75:18:48:77:7c:84:a5:23:58:15:73:
db:0c:86:7b:b6:52:39:fa:6f:0b:26:83:33:f7:2f:19:8d:0a:
ea:bb:4c:d9:68:73:2f:cd:0c:16:e8:d5:24:4f:20:02:12:0a:
3c:72:3e:5a:e4:0f:3d:c7:22:ca:14:2c:9d:1a:a4:06:80:03:
c8:a5:98:ff:e6:89:3a:6b:f4:eb:a4:3c:ea:a6:ec:59:d8:62:
4b:11:e6:e5:41:4d:b0:b9:88:72:c0:23:57:b9:4d:45:16:03:
51:4c:7c:0a:94:1e:5c:92:3d:5e:12:9f:dc:63:a4:2d:42:30:
2f:c0:f5:63:11:78:d3:97:3c:9e:36:a9:c8:5c:96:1d:bb:40:
c8:43:6e:09:dc:6e:42:30:69:1e:1e:c1:58:cc:95:f7:6f:eb:
58:86:da:52:53:9e:67:bb:09:76:bc:b7:b2:ba:74:89:b1:86:
64:a2:76:19:fa:19:dd:db:1a:49:76:d9:d3:73:f9:cd:6b:0f:
21:a1:01:c0:0b:2d:7e:98:42:0d:8e:4c:ff:27:cd:20:a0:9e:
d0:88:bd:a8:6f:e8:41:e6:f7:01:3c:f2:54:bf:26:99:75:fc:
67:20:04:19
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUNOQZ33afGmMas5kFaCgjvABhvkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDAyMjAxNDM0MTFaFw0yNTAyMTgxNDM5MTFaMDMxMTAvBgNV
BAMTKEFGQTBERkFFNkNBRjJDMjc0ODEyRjJFNzcwOTIyNTZFQzIxRkMzRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgUfFmG2ZlxNSVTxY6G7PpKuOJ
Pk/XvFx2hv24+0QuGDw2fs8kbUicFE+QDI5HAPMMlCNpH1BkDiNkdPLWaEJk50fS
lVyD5z3jUyY1PgInhLHAT5ImQqUEdrflDOxsKwpIbsGAOwC18Cj66MjaOBXn4N6g
tK4vi0xdZO8hkUv47k6NO99RWlemRAByu2BAqefOJxAqv87+ScW0axiZXYUlvhkI
fnc6LRASBVMA5Js7sK20+fIlODNviM4VvTCaE+tQmVwpDn7zT5Ag+91h9GkXuht1
CU5ooB00zEj59zYbMCxtLrJlREY+E30umQF8VwT4WzDJrks3u58M3XEnBwEZAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUr6DfrmyvLCdIEvLncJIlbsIfw/cwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUt
NDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThmNmI0LzAvMzMzNzJlMzUzMjJlMzEzNDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzODM0Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlNJAw
DQYJKoZIhvcNAQELBQADggEBAA9Bv+gW7Yc7pRZaUanP1QEBdl1OBUAXKgJ1GEh3
fISlI1gVc9sMhnu2Ujn6bwsmgzP3LxmNCuq7TNlocy/NDBbo1SRPIAISCjxyPlrk
Dz3HIsoULJ0apAaAA8ilmP/miTpr9OukPOqm7FnYYksR5uVBTbC5iHLAI1e5TUUW
A1FMfAqUHlySPV4Sn9xjpC1CMC/A9WMReNOXPJ42qchclh27QMhDbgncbkIwaR4e
wVjMlfdv61iG2lJTnme7CXa8t7K6dImxhmSidhn6Gd3bGkl22dNz+c1rDyGhAcAL
LX6YQg2OTP8nzSCgntCIvahv6EHm9wE88lS/Jpl1/GcgBBk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:01:13 2025 by rpki-client