Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20343030343032.roa
File: 3139332e3230312e37332e302f32342d3234203d3e20343030343032.roa (raw, json)
Hash identifier: qOXaRTuln/VLSYIbIKlfaDxOPbK/kFQnMk+PCdzKWcc=
Subject key identifier: 17:23:0F:6A:EF:20:64:CB:13:AC:70:9A:8D:66:15:58:51:8C:72:07
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 6A77F301695F78FFC3CD130179DEAB1F200B32AB
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20343030343032.roa
Signing time: Sat 16 Sep 2023 02:06:49 +0000
ROA not before: Sat 16 Sep 2023 02:01:49 +0000
ROA not after: Sat 14 Sep 2024 02:06:49 +0000
asID: 400402
IP address blocks: 193.201.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:77:f3:01:69:5f:78:ff:c3:cd:13:01:79:de:ab:1f:20:0b:32:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Sep 16 02:01:49 2023 GMT
Not After : Sep 14 02:06:49 2024 GMT
Subject: CN=17230F6AEF2064CB13AC709A8D661558518C7207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:c1:5a:a7:80:f3:d8:cf:1f:06:1a:44:39:
97:89:5f:b2:2f:f8:1f:29:3b:b9:58:c1:6b:92:22:
e6:b2:c2:eb:71:1f:35:dc:76:3f:f5:83:72:5c:57:
5f:8f:cb:59:3c:a2:aa:e1:fe:61:63:14:9b:50:2c:
8b:3e:7e:c2:ec:e5:a5:95:80:0e:f0:a7:a5:d2:dc:
17:80:0d:4a:f3:80:30:25:ab:25:f0:0e:20:60:fa:
94:c2:29:72:53:bf:83:38:df:67:c6:70:6b:25:c1:
05:88:1f:f5:4a:a4:09:cd:60:d7:b0:6e:d7:9f:a1:
19:1d:ce:51:b8:f0:64:b5:c6:38:59:60:87:3a:01:
75:77:4e:71:7e:c3:1b:ad:98:df:69:13:16:d4:d8:
bb:7f:d5:84:0e:90:0d:e7:3f:4f:9b:81:85:2b:b0:
89:23:b3:68:96:aa:10:d5:f0:e8:01:1d:a2:8b:8e:
ab:cb:2b:45:a2:12:00:97:ed:fb:a1:31:22:e0:d4:
fa:f9:0f:fb:10:45:1c:03:65:ce:2b:7a:8a:69:fd:
e0:8d:e0:61:bd:77:a7:85:e6:4a:95:cc:c6:4d:2e:
72:7c:f0:95:8a:9d:96:1c:43:a5:db:0b:08:d4:18:
6d:f7:37:9d:f0:83:80:1a:b5:04:11:ab:ef:48:cb:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:23:0F:6A:EF:20:64:CB:13:AC:70:9A:8D:66:15:58:51:8C:72:07
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20343030343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.73.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7e:4e:8f:aa:93:f7:75:6c:7f:19:35:39:d1:37:b8:45:a8:
ed:76:16:28:15:01:8f:0d:8a:45:c5:ee:3b:0b:6b:b2:43:86:
60:c9:28:b6:d8:2a:84:67:05:35:a1:09:07:33:69:25:22:22:
55:76:04:48:24:67:f2:b0:df:15:8b:c1:eb:76:6a:3f:4c:69:
2b:f5:b8:7f:72:79:94:ff:6b:93:52:06:6f:6d:32:0c:88:01:
a5:ec:75:6b:88:92:90:1a:9b:ec:2b:a7:2f:af:5a:8b:47:a4:
8e:9b:5f:47:33:12:50:fa:01:41:ef:e5:60:08:7f:28:5f:db:
23:2b:c9:ce:1c:0e:e2:62:91:ea:36:63:04:bc:26:17:26:18:
2b:82:16:73:4c:20:4e:b8:b1:e7:e6:0c:d7:14:25:ad:91:17:
87:fb:3d:4c:45:2e:57:bc:6b:6f:ea:18:0b:6c:51:be:32:fe:
10:dc:26:8f:64:62:4f:73:d0:9d:ce:da:a8:9b:5a:39:33:33:
ce:b9:ee:c0:8c:90:36:71:47:dd:de:a4:e4:52:06:ab:3f:90:
98:f1:50:dd:de:94:f4:44:5d:33:9e:b8:8a:72:be:ec:82:9b:
37:68:85:b6:fc:0a:cc:3b:b0:f7:e5:c0:62:92:fe:22:df:d4:
14:43:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:15 2025 by rpki-client