Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3234203d3e203434343435.roa
File: 34352e3135342e362e302f32332d3234203d3e203434343435.roa (raw, json)
Hash identifier: fP0ORwQKRfhbevArt55Qqiq+Lbz/d/2swX++l1bkDpE=
Subject key identifier: B7:58:45:9E:7D:62:44:20:54:E0:BB:62:F8:5A:AB:28:DC:E7:BD:26
Certificate issuer: /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial: 74FDB901F6559F1628D4B9D8781310793F02549B
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3234203d3e203434343435.roa
Signing time: Wed 28 Dec 2022 20:06:47 +0000
ROA not before: Wed 28 Dec 2022 20:01:47 +0000
ROA not after: Wed 27 Dec 2023 20:06:47 +0000
asID: 44445
IP address blocks: 45.154.6.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fd:b9:01:f6:55:9f:16:28:d4:b9:d8:78:13:10:79:3f:02:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
Validity
Not Before: Dec 28 20:01:47 2022 GMT
Not After : Dec 27 20:06:47 2023 GMT
Subject: CN=B758459E7D62442054E0BB62F85AAB28DCE7BD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9b:ac:2c:d9:8b:82:fa:0a:29:4a:54:8e:de:
00:ec:bc:85:ee:f3:ec:61:2c:1a:d2:67:57:8d:0e:
dd:53:8f:97:a7:e0:af:79:02:1b:71:af:8d:af:80:
17:fd:b7:76:c6:f6:87:3f:bb:03:e0:41:bc:76:29:
f7:26:0f:82:e9:b4:7d:ba:77:7c:d7:25:aa:3d:c2:
5a:50:fa:4d:a6:2e:ab:d6:39:c7:53:2e:e6:97:26:
1c:e1:6b:96:75:ca:f5:08:98:90:fe:19:12:dc:fb:
f1:88:f8:f4:52:18:8a:4e:d7:68:83:a8:e4:84:8a:
68:ca:1f:98:77:08:8e:28:10:b7:14:5a:c8:a3:cd:
bc:c1:64:d8:ac:64:66:8d:12:42:a2:aa:bc:ca:7e:
b4:d5:ac:86:ac:a7:56:8d:a1:72:c3:61:40:92:c2:
b6:d4:84:98:33:a6:db:10:74:c0:4a:67:10:d3:1c:
dc:de:66:61:0d:ee:cd:32:54:da:0d:69:75:d0:cf:
dd:23:d3:66:e3:ee:ed:6d:10:1c:bc:55:c9:36:53:
03:81:34:c9:23:67:6b:a7:1d:e3:f2:e8:21:71:f0:
89:88:73:7b:85:5f:4e:70:0c:f3:e6:ac:f2:75:24:
01:be:b1:23:2c:07:dd:d6:06:aa:7d:64:ff:ad:6c:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:58:45:9E:7D:62:44:20:54:E0:BB:62:F8:5A:AB:28:DC:E7:BD:26
X509v3 Authority Key Identifier:
keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e362e302f32332d3234203d3e203434343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.6.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:62:87:87:b8:4b:01:6a:27:6b:f8:dc:d2:49:70:95:8f:33:
75:21:b5:02:43:e3:6b:ad:3a:0b:36:9e:bb:4d:47:cd:b6:0d:
c0:69:46:ae:65:f1:ae:59:fa:1c:78:67:b0:e8:4d:67:49:17:
f1:23:d8:3a:0c:e1:30:aa:7e:bb:4d:78:94:95:41:99:ff:29:
54:02:ee:83:01:35:3d:b8:db:d7:9d:86:cb:ef:5d:da:40:1c:
fb:b1:e1:b2:ff:61:28:b3:f8:69:12:8c:10:78:a1:d2:0e:79:
92:72:e8:2c:13:2d:7e:3b:3b:9d:55:07:fb:3a:5e:34:e4:7f:
92:ee:26:ba:c0:8c:4d:78:f9:99:37:4a:a1:ea:2e:04:33:84:
b5:ce:ac:3f:0b:18:7f:da:44:0f:64:60:a9:4e:53:44:a0:8c:
ab:3e:84:53:59:31:66:a9:61:15:07:2e:2f:48:9e:6c:0e:12:
d5:fc:2f:eb:16:e6:c2:67:05:ba:d0:ce:e9:b6:e3:6e:8b:7e:
cb:4f:8c:d4:fa:7e:f9:59:0e:a2:8b:44:11:da:37:aa:eb:90:
ff:2c:15:92:70:2c:0e:86:ce:69:dd:14:8d:50:83:ba:19:9a:
87:26:e3:84:34:d1:dc:da:4e:3d:03:99:8b:6d:c1:e3:21:b6:
89:a3:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org