Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36332e302f32342d3234203d3e20383334.roa
File: 3138352e3133302e36332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +QOYT3SX1QQQZ8nexb7VwaWcn7cx7Y2OrmoT8yEHncI=
Subject key identifier: 73:7C:10:34:BE:A6:4B:17:23:99:7B:DA:65:FC:DA:28:E1:23:B9:B5
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 3000D9C55F53438B55905EF55A895A3F6A40F5E3
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36332e302f32342d3234203d3e20383334.roa
Signing time: Thu 07 Sep 2023 11:00:05 +0000
ROA not before: Thu 07 Sep 2023 10:55:05 +0000
ROA not after: Thu 05 Sep 2024 11:00:05 +0000
asID: 834
IP address blocks: 185.130.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:00:d9:c5:5f:53:43:8b:55:90:5e:f5:5a:89:5a:3f:6a:40:f5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Sep 7 10:55:05 2023 GMT
Not After : Sep 5 11:00:05 2024 GMT
Subject: CN=737C1034BEA64B1723997BDA65FCDA28E123B9B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:c6:b8:ef:58:81:9d:34:44:79:be:cb:90:
be:36:79:72:e8:1c:bd:77:08:1c:cf:db:df:13:0a:
39:1f:d6:54:03:be:42:16:20:27:a6:db:ca:05:77:
05:3f:f6:34:b1:18:e2:8e:02:34:e2:c8:ed:0c:e7:
72:5a:b9:51:9f:d7:31:4a:f9:c2:f1:99:e1:ed:12:
fe:55:ff:38:7b:91:01:ad:35:85:0b:eb:82:6e:24:
60:37:e9:2a:35:37:61:e1:ef:16:a6:3b:42:cb:37:
71:02:c9:f5:1c:89:34:05:6b:af:7e:58:20:43:60:
49:e7:c8:76:d3:b9:0f:b3:d2:27:8b:eb:b5:34:3e:
01:88:1a:ae:61:1b:a7:5f:f2:3a:79:8c:8d:28:04:
6b:d0:b6:85:c0:ac:a9:1c:ef:0b:45:b0:97:49:3e:
06:03:57:30:34:38:0f:e2:81:02:18:3d:91:73:2b:
72:75:51:2c:5d:e4:96:61:83:ba:46:8f:7a:c6:ea:
07:39:fa:28:14:02:3b:ad:e9:41:18:ff:b1:e1:a9:
20:02:02:6c:fe:6c:1c:24:ea:84:59:1f:5f:18:cb:
9b:67:6a:68:88:11:d7:64:da:4b:6d:08:a1:d5:5a:
5d:e3:05:4c:ec:87:1f:e8:c1:86:3c:19:cc:b4:14:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7C:10:34:BE:A6:4B:17:23:99:7B:DA:65:FC:DA:28:E1:23:B9:B5
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3133302e36332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:be:4e:c8:eb:c2:2d:a8:7a:ef:68:f9:23:30:d6:2a:e6:5a:
8c:9b:91:df:bb:c3:57:3a:26:b3:e9:d8:ad:1d:d3:7a:a8:c7:
aa:91:65:61:7a:5e:51:d9:cb:a4:23:ed:3f:fd:e2:ef:65:b2:
43:f2:bb:59:de:b9:83:c1:2a:6a:bc:ad:60:dd:f7:79:08:e2:
e5:3d:4b:29:af:36:c3:73:f2:1b:7d:52:8c:e5:85:de:95:dd:
e9:53:33:2f:6c:ab:74:10:7d:e5:32:24:38:1e:e4:93:1d:7c:
02:2d:28:86:3d:52:d5:24:27:ca:67:12:d9:31:78:d9:e8:ec:
42:9c:0b:51:66:dc:f5:86:b5:12:0d:29:f3:fa:ae:8f:57:ca:
b2:0d:45:e8:49:3f:4b:05:89:0e:65:84:41:30:63:91:ec:43:
48:69:ea:8a:38:e1:8b:ab:47:8c:20:67:72:11:5d:8b:9e:fd:
c3:ab:85:9c:4c:29:50:f8:0f:c7:db:ae:42:99:33:9e:fb:45:
ac:10:36:f8:9c:7b:f6:b3:a2:00:2e:cb:ce:c4:6b:40:33:f8:
76:5a:ab:b0:59:bc:cb:b6:ab:a1:08:33:62:9d:66:43:ac:9f:
86:a6:d5:81:76:6b:be:d8:d7:53:bc:98:d3:6a:98:d6:1a:a7:
8a:5e:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:31 2025 by rpki-client