Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133352e302f32342d3234203d3e20383334.roa
File: 39312e3132342e3133352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: dXIi5VhoxQNqrEc3jaS0tHhd1Nc26Cpr5RLYLoaKmiI=
Subject key identifier: 11:01:A4:C2:AC:31:6B:66:DD:B2:F2:A4:ED:7E:17:E4:02:D1:14:AE
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6BABA610E95AF114A0C96BD55DCD504E264E8E29
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133352e302f32342d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ab:a6:10:e9:5a:f1:14:a0:c9:6b:d5:5d:cd:50:4e:26:4e:8e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=1101A4C2AC316B66DDB2F2A4ED7E17E402D114AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:06:aa:fb:58:18:41:2a:06:01:a6:ef:b5:
9d:a5:a5:d9:33:74:fe:eb:bb:97:04:f5:56:49:c1:
42:38:cc:18:2d:a7:dd:19:e8:ed:1a:8f:60:0c:42:
b7:28:45:8e:cf:0c:89:1f:f5:3a:80:3e:9b:bf:19:
fa:80:10:be:25:29:31:d8:b9:4d:48:fa:81:01:52:
39:7f:4a:62:f3:8b:a2:5c:72:25:b0:b7:07:e8:b4:
2d:e5:cf:0c:6c:70:8b:4c:45:d5:69:36:47:0a:9a:
91:b3:d9:0c:84:15:e5:11:dd:2f:d7:d7:6e:57:3e:
a8:52:52:3e:63:99:bb:5c:8f:d1:78:20:86:22:96:
aa:83:a4:a0:24:c4:7d:c8:19:8a:be:91:d4:2a:37:
bf:ab:fc:49:d2:15:ec:b2:19:f6:35:e7:77:6e:70:
39:d3:e7:e7:39:1f:ee:76:fa:fe:b0:97:48:cd:e6:
14:46:4d:16:e7:10:c4:88:b2:ce:64:f5:f5:3c:04:
10:d8:f1:e7:91:8a:1e:04:f3:91:9f:51:31:7a:3d:
f3:09:1f:9d:5e:39:a9:87:71:82:0f:f9:df:c5:37:
22:e6:6f:39:69:f1:d3:35:d7:92:bb:be:31:79:dd:
a9:fe:60:1c:a8:69:7b:16:18:a4:de:2f:43:06:e9:
12:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:01:A4:C2:AC:31:6B:66:DD:B2:F2:A4:ED:7E:17:E4:02:D1:14:AE
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3133352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:84:26:df:9b:8b:26:cd:5f:ab:f1:4b:45:d7:b4:8a:60:bf:
61:ad:71:cc:ec:31:42:56:1d:8e:e6:d0:4e:ea:5a:c1:56:6d:
20:b4:0a:70:15:66:a8:b5:c2:6e:70:7f:c8:0a:76:6b:a9:ce:
c6:22:7b:8a:05:49:68:43:2f:5d:f0:71:5a:65:e5:90:f9:e0:
58:37:e5:ed:03:1c:f6:8f:2a:33:7c:77:e7:71:1e:56:45:b4:
db:70:e6:77:8d:2e:09:79:57:0a:ae:e8:80:29:e4:55:42:70:
f9:dd:79:a4:d5:05:36:5b:71:cd:8c:ae:4b:db:a9:35:f3:80:
7e:8d:99:5f:2c:2e:0e:c9:90:7f:af:08:46:e4:c7:ad:3b:fb:
2f:20:6b:00:2e:41:07:e8:a9:96:b4:4e:4e:de:58:b2:8b:96:
7f:65:e2:8a:54:29:81:27:06:41:6f:f4:c5:23:95:57:f1:0a:
64:b0:4e:4d:94:d0:4e:08:40:de:62:c2:02:53:d3:c3:94:86:
98:5a:31:06:9a:10:7e:2e:88:a8:6b:19:89:46:24:48:20:34:
f1:39:c7:a0:a3:26:9e:30:f7:00:1b:eb:0d:02:29:1c:bd:c0:
78:43:bc:65:3e:b9:1d:4a:c4:5c:40:7c:dc:10:5c:f6:f9:b9:
70:c4:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:51:13 2025 by rpki-client