Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20323039323630.roa
File: 3139332e3234362e3130322e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: oAWtEsojWgP/hSUGwjQD0o0/cjpKp74Gm3ncZLeMJcc=
Subject key identifier: 91:C2:87:7B:D6:BF:03:29:9C:63:99:C4:59:8B:53:1B:DC:A1:68:DA
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 504D4C95E79613C1928BA9E771918BF187DCD92F
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20323039323630.roa
Signing time: Thu 09 Feb 2023 08:48:53 +0000
ROA not before: Thu 09 Feb 2023 08:43:53 +0000
ROA not after: Thu 08 Feb 2024 08:48:53 +0000
asID: 209260
IP address blocks: 193.246.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:4d:4c:95:e7:96:13:c1:92:8b:a9:e7:71:91:8b:f1:87:dc:d9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Feb 9 08:43:53 2023 GMT
Not After : Feb 8 08:48:53 2024 GMT
Subject: CN=91C2877BD6BF03299C6399C4598B531BDCA168DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:71:6a:1d:06:09:44:03:60:0c:2c:75:86:
f0:67:4e:56:b2:54:b3:cb:33:cc:d3:f4:e1:c8:4d:
2b:79:ed:14:30:1d:96:0e:15:13:98:1d:fe:00:07:
72:bd:a1:b6:31:a9:2c:f6:10:57:b2:55:84:2a:e1:
f8:34:6a:76:28:f7:85:70:07:59:d0:ed:d5:14:96:
71:eb:00:79:52:9e:b6:7b:5d:67:2f:af:56:30:5f:
69:41:57:e4:d3:81:15:39:ad:15:22:6d:85:d1:56:
04:b2:3d:6f:b7:57:1d:d8:74:c3:9b:c2:a2:38:24:
08:48:32:62:1a:aa:f1:20:ed:d6:95:8e:9a:33:0e:
4b:70:63:92:79:e6:b1:cc:ed:42:7d:d0:fc:3a:62:
f7:3b:5f:e4:07:5b:e4:78:07:82:b6:05:e7:7c:24:
e5:22:a8:3e:76:bf:ce:5b:90:0e:f2:e8:36:04:09:
29:3d:23:76:d6:e3:8e:fb:db:ca:25:92:33:b0:41:
1c:de:32:86:39:e3:57:d2:50:c1:4e:30:d5:5a:cf:
ef:bf:55:71:8a:c1:1d:dd:c1:96:ef:e4:d7:7b:44:
44:4a:fc:91:cd:8f:6d:6c:3b:0a:f3:c5:e3:b6:15:
54:78:bd:87:8a:69:48:02:87:0a:c6:b5:2e:6c:37:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C2:87:7B:D6:BF:03:29:9C:63:99:C4:59:8B:53:1B:DC:A1:68:DA
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e3130322e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.102.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:de:c5:6a:92:2d:e5:ff:43:d7:6f:c3:4e:99:e6:25:9b:c4:
45:77:17:85:34:e7:34:b7:5e:22:1f:00:d4:ba:d8:aa:18:fc:
b8:86:e0:2c:ab:53:2b:06:48:2a:a6:b7:c1:eb:8a:6c:14:69:
e5:43:ed:cb:cb:52:e1:5b:cc:b2:76:a0:61:4c:31:f1:ee:7a:
81:12:73:e8:0f:d4:09:5e:a7:7e:43:65:97:24:ca:3d:86:15:
62:fe:2f:71:39:88:cd:2c:68:3e:bf:3f:a6:74:b4:d0:db:b0:
e2:2a:ad:9d:37:d4:c1:29:5b:13:35:20:3b:9a:a3:25:2e:40:
ec:67:85:a7:b9:f3:04:52:79:00:32:b5:a0:c8:dc:76:4f:7c:
07:54:be:50:95:8d:75:1d:47:fd:bf:1b:c4:45:c4:9e:ff:6f:
42:8e:ce:87:a4:f4:e1:b7:8f:51:24:47:58:0a:4e:ab:90:fa:
fe:2b:b2:7a:55:a9:3b:d9:26:d3:f4:44:b3:31:22:83:d4:96:
12:05:fa:84:dc:ac:06:d4:fe:f1:c5:14:d2:3d:49:1b:cd:d9:
4c:c6:9e:91:9e:74:61:d4:a2:62:a6:6d:9c:ad:60:df:90:b3:
e8:42:20:ca:fe:4d:58:dd:be:86:fc:ae:9c:e7:91:aa:8e:7c:
72:f0:89:b1
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUUE1MleeWE8GSi6nncZGL8Yfc2S8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yMzAyMDkwODQzNTNaFw0yNDAyMDgwODQ4NTNaMDMxMTAvBgNV
BAMTKDkxQzI4NzdCRDZCRjAzMjk5QzYzOTlDNDU5OEI1MzFCRENBMTY4REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfnFqHQYJRANgDCx1hvBnTlay
VLPLM8zT9OHITSt57RQwHZYOFROYHf4AB3K9obYxqSz2EFeyVYQq4fg0anYo94Vw
B1nQ7dUUlnHrAHlSnrZ7XWcvr1YwX2lBV+TTgRU5rRUibYXRVgSyPW+3Vx3YdMOb
wqI4JAhIMmIaqvEg7daVjpozDktwY5J55rHM7UJ90Pw6Yvc7X+QHW+R4B4K2Bed8
JOUiqD52v85bkA7y6DYECSk9I3bW447728olkjOwQRzeMoY541fSUMFOMNVaz++/
VXGKwR3dwZbv5Nd7RERK/JHNj21sOwrzxeO2FVR4vYeKaUgChwrGtS5sNzKzAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUkcKHe9a/AymcY5nEWYtTG9yhaNowHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEt
YTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvMzEzOTMzMmUzMjM0MzYyZTMx
MzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTMyMzYzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMH2ZjANBgkqhkiG9w0BAQsFAAOCAQEAud7FapIt5f9D12/DTpnmJZvERXcX
hTTnNLdeIh8A1LrYqhj8uIbgLKtTKwZIKqa3weuKbBRp5UPty8tS4VvMsnagYUwx
8e56gRJz6A/UCV6nfkNllyTKPYYVYv4vcTmIzSxoPr8/pnS00Nuw4iqtnTfUwSlb
EzUgO5qjJS5A7GeFp7nzBFJ5ADK1oMjcdk98B1S+UJWNdR1H/b8bxEXEnv9vQo7O
h6T04bePUSRHWApOq5D6/iuyelWpO9km0/REszEig9SWEgX6hNysBtT+8cUU0j1J
G83ZTMaekZ50YdSiYqZtnK1g35Cz6EIgyv5NWN2+hvyunOeRqo58cvCJsQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org