Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20313339333131.roa
File: 3138352e3231332e3234332e302f32342d3234203d3e20313339333131.roa (raw, json)
Hash identifier: M8cFHSkWwW28MSv9rjHWL1nyt+t1ug2TSdcIWKkz35g=
Subject key identifier: E9:80:41:53:C7:F2:69:8E:65:19:B5:64:FC:FE:31:7F:63:0A:FF:FE
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 6F805231D6107F352EA2D41DD7F253B605E95FF4
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20313339333131.roa
Signing time: Sat 26 Aug 2023 06:48:18 +0000
ROA not before: Sat 26 Aug 2023 06:43:18 +0000
ROA not after: Sat 24 Aug 2024 06:48:18 +0000
asID: 139311
IP address blocks: 185.213.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:80:52:31:d6:10:7f:35:2e:a2:d4:1d:d7:f2:53:b6:05:e9:5f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Aug 26 06:43:18 2023 GMT
Not After : Aug 24 06:48:18 2024 GMT
Subject: CN=E9804153C7F2698E6519B564FCFE317F630AFFFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:f1:e9:47:9a:31:c3:32:c4:d1:e9:f3:ee:
b2:c6:a9:2c:dd:a5:00:0d:8b:e1:9d:36:67:43:9e:
75:c9:98:b7:9a:29:3b:40:6f:33:d6:40:7f:3b:df:
97:cd:4b:38:49:3f:a1:6e:cc:2c:30:b2:f7:fd:41:
e9:50:63:a1:92:dd:a1:32:da:bd:5a:24:10:77:9f:
74:bf:4d:ce:51:1d:06:92:ca:e6:42:29:bf:87:95:
bf:50:54:21:c6:d5:a4:22:b6:09:2e:d7:e3:06:54:
1e:12:d1:65:b3:29:e7:ea:6e:e6:2f:7b:a5:97:5e:
ba:21:24:6f:f1:a6:df:4b:e6:fd:15:c1:cd:a1:76:
5b:4f:05:39:2c:0d:2d:3c:77:e1:30:27:69:19:c2:
c6:1c:74:f9:3e:c9:96:f7:c3:ac:20:75:fe:73:6e:
dd:93:ee:3e:bf:b6:5f:f6:fb:8d:de:5e:f8:f6:df:
b5:33:cf:8c:87:a6:7b:09:3a:ce:1a:a8:92:e6:3d:
27:2b:d3:b9:56:05:aa:d2:fd:d9:71:62:e6:08:f4:
3a:51:ac:1d:39:45:04:14:d7:0c:ce:c5:f0:cf:85:
e9:ed:2d:30:3c:db:10:43:0a:37:78:49:a6:5c:9c:
97:d4:0d:7f:a0:a0:b7:49:ee:26:1d:67:50:ea:73:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:80:41:53:C7:F2:69:8E:65:19:B5:64:FC:FE:31:7F:63:0A:FF:FE
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3231332e3234332e302f32342d3234203d3e20313339333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.243.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2c:6f:c0:71:c2:de:4c:82:78:3e:b5:c4:af:c7:84:26:d5:
5c:03:c6:01:97:2d:18:dc:7f:ce:5a:d1:2f:34:3b:b4:6c:6e:
b0:c8:b0:c1:ee:57:15:96:a6:38:8b:ee:43:1a:d4:81:58:f4:
da:ff:08:e5:49:93:c3:d3:c1:df:c2:e7:a3:63:fa:c0:5e:3b:
9b:ba:2b:5c:b0:c2:3d:0c:3f:2a:90:aa:fe:08:99:37:51:5d:
52:2b:34:40:9c:e0:c1:a1:5d:87:b5:7c:79:26:5f:94:7d:9c:
ba:77:c4:7c:0b:05:27:28:92:f0:5a:14:4a:47:36:02:c6:17:
bc:25:9b:1d:46:1e:1c:95:f8:9d:ba:17:89:a4:e4:55:5c:db:
d5:20:41:20:6a:10:f0:3b:92:08:0c:e5:64:f9:35:b3:0b:c0:
12:a7:48:06:68:54:eb:3a:16:13:37:77:52:11:42:e2:c2:85:
5e:6c:1a:31:d7:9e:a1:4d:09:de:c3:29:28:80:14:77:77:d1:
de:01:eb:57:6d:66:bf:d4:09:fa:d8:e0:e1:79:7b:d9:ee:11:
a9:04:98:b5:85:fb:79:67:a7:2b:c8:47:8f:58:e8:7a:fa:b9:
6f:56:e6:bd:65:09:c7:68:ea:38:20:db:7b:85:90:36:e4:c0:
23:3a:25:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:16 2025 by rpki-client