Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e2036303739.roa
File: 33362e3235352e39342e302f32332d3234203d3e2036303739.roa (raw, json)
Hash identifier: yX0M1j76fdvYlR3a/gyC3zJdzFIpVHb1mNPafS+Ho8k=
Subject key identifier: AA:25:9F:AF:2B:6A:55:0F:02:42:1C:08:66:0B:68:8D:37:1F:95:2B
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 2D439D53A09CD5EBCA8D4850577DA0152C80AE5C
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e2036303739.roa
Signing time: Fri 23 Jun 2023 15:33:00 +0000
ROA not before: Fri 23 Jun 2023 15:28:00 +0000
ROA not after: Fri 21 Jun 2024 15:33:00 +0000
asID: 6079
IP address blocks: 36.255.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:43:9d:53:a0:9c:d5:eb:ca:8d:48:50:57:7d:a0:15:2c:80:ae:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Jun 23 15:28:00 2023 GMT
Not After : Jun 21 15:33:00 2024 GMT
Subject: CN=AA259FAF2B6A550F02421C08660B688D371F952B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:33:dc:d5:70:f9:19:d5:bf:60:59:36:32:70:
22:e6:2f:53:19:6f:e8:00:a6:74:f8:4a:fe:ad:2e:
68:cd:7e:2b:90:09:59:c5:60:1f:79:67:f0:c3:8c:
39:7f:9f:9c:65:51:69:44:88:fd:06:b9:4b:70:14:
fc:a5:3f:9a:f8:3e:8a:fc:08:92:36:7f:00:42:1a:
e7:a7:44:88:41:96:a7:37:f4:ac:b8:e6:63:88:55:
ba:1d:b7:df:ad:1d:f4:e0:1b:49:4f:81:57:81:dd:
d3:54:76:ed:61:51:55:62:81:4d:97:0a:47:80:54:
cb:31:af:54:e4:d9:60:5f:c8:f0:66:e1:f2:c5:66:
b7:f8:b9:e5:5a:16:75:ff:d0:63:4b:cf:41:27:ad:
a3:75:9b:a0:6a:e3:0b:79:68:4e:52:4a:ee:35:ac:
ff:f2:a0:9d:10:24:18:91:ab:38:24:3e:69:5e:48:
db:0d:8c:66:1d:bd:63:ee:24:da:57:fd:42:48:28:
fb:10:29:e7:29:a7:8e:d1:b7:5d:63:72:30:eb:97:
a9:b2:59:8a:22:96:ff:df:0b:5a:83:29:3a:b0:bc:
b6:71:92:e9:67:e3:1d:5e:3c:82:89:dc:11:34:8a:
9e:aa:a5:14:bd:18:8d:04:65:cb:c6:84:4f:b7:9c:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:25:9F:AF:2B:6A:55:0F:02:42:1C:08:66:0B:68:8D:37:1F:95:2B
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/33362e3235352e39342e302f32332d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:cc:bf:03:d1:b2:8d:41:aa:c0:e0:43:1f:b8:81:f0:92:8a:
53:1f:68:c2:32:94:e6:13:1b:37:71:06:8d:88:c7:13:1a:0f:
6e:85:36:10:d7:cb:47:20:e5:02:ed:4f:8a:3b:e8:b8:6c:30:
b2:5a:2b:6c:c5:a7:c6:c5:23:cf:e1:ce:23:66:2f:d2:f2:7d:
9f:c9:ea:b4:cc:b3:10:3d:80:29:c8:66:b6:b7:41:ed:99:f1:
2b:1f:8b:8d:5c:07:11:50:09:31:53:5c:9d:cb:a6:41:76:90:
3b:14:20:56:75:cb:de:bd:92:69:dd:1b:f8:32:14:88:bd:0b:
2f:db:ba:3c:13:1b:23:65:c4:c6:f0:53:e7:35:18:ba:ed:96:
38:1d:13:98:23:a4:c8:5c:79:96:fd:7e:f8:c4:fd:0b:a2:46:
38:70:6d:e3:29:59:2e:38:86:de:1b:51:1f:ec:14:fe:ee:47:
80:9c:df:de:c7:5c:eb:db:c3:de:f3:37:f1:69:6b:03:3e:48:
e4:4c:2f:c5:9d:d9:1e:7a:9f:b5:e6:37:54:b0:a5:59:fa:6f:
0f:d3:c1:51:5e:84:8a:79:0e:56:04:37:71:14:69:e6:e9:a2:
7a:ce:b1:95:e7:53:82:3f:61:57:87:9f:32:5d:b2:60:b6:1c:
dc:7b:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:37 2025 by rpki-client