Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20323130343339.roa
File: 3139332e3234362e352e302f32342d3234203d3e20323130343339.roa (raw, json)
Hash identifier: +jjSJjgqN853WuTLrSzISLZ+pprDFo63zZg6NrLEwU8=
Subject key identifier: BC:F6:BF:ED:AC:FE:4D:19:9A:37:7B:77:D7:4F:76:57:41:BA:C5:6B
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 3A50654D68844A847AADE021117365D2CC3C9307
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20323130343339.roa
Signing time: Thu 09 Feb 2023 08:48:58 +0000
ROA not before: Thu 09 Feb 2023 08:43:58 +0000
ROA not after: Thu 08 Feb 2024 08:48:58 +0000
asID: 210439
IP address blocks: 193.246.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:50:65:4d:68:84:4a:84:7a:ad:e0:21:11:73:65:d2:cc:3c:93:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Feb 9 08:43:58 2023 GMT
Not After : Feb 8 08:48:58 2024 GMT
Subject: CN=BCF6BFEDACFE4D199A377B77D74F765741BAC56B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:22:22:aa:dd:78:a9:dd:a4:72:15:f7:b9:
34:78:16:ad:c2:95:d7:ac:4a:02:94:0d:30:6b:db:
7b:75:6b:ec:52:55:ac:a2:53:13:73:9c:de:2f:11:
aa:56:24:d5:4c:b8:f1:6c:de:41:47:6c:13:66:64:
47:97:17:87:84:93:a1:28:21:c5:cb:99:12:02:7c:
18:c0:e0:66:ad:0f:f6:d2:12:10:45:4a:87:7d:4c:
40:fc:1e:36:2c:5f:2f:d8:03:74:6e:5f:ad:f7:96:
6d:eb:91:8f:9d:a4:54:b4:0a:49:8d:08:32:dc:43:
f3:4f:dc:62:6e:19:e9:25:89:7a:df:6a:f5:7a:ab:
4a:01:f5:d1:3e:b6:2a:1b:88:90:38:1b:6a:dd:b4:
4a:a8:00:e0:73:a5:60:27:73:44:8f:fd:80:b0:3c:
34:73:b4:d6:3b:19:39:02:d6:1a:39:ce:22:24:e1:
42:5c:24:4e:57:cc:58:ec:f7:bf:d8:4c:c3:05:db:
a6:6e:ed:c2:a9:75:3b:ec:b6:eb:eb:21:7c:60:ff:
1a:59:d9:21:25:50:a8:ce:15:a9:68:1e:3e:6a:aa:
aa:82:f1:79:8e:58:76:d2:69:1c:8f:e2:7c:48:16:
68:a9:27:dc:99:39:cd:42:e4:25:1d:ae:71:34:60:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F6:BF:ED:AC:FE:4D:19:9A:37:7B:77:D7:4F:76:57:41:BA:C5:6B
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3139332e3234362e352e302f32342d3234203d3e20323130343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.5.0/24
Signature Algorithm: sha256WithRSAEncryption
09:05:1d:79:8f:81:1b:8d:2e:5c:ce:65:88:9a:a2:01:bd:75:
bd:50:e8:70:15:12:93:72:a7:3b:26:14:91:28:2e:70:f2:ea:
40:64:1f:3b:f7:57:60:9b:7f:2d:a8:e8:35:c9:8e:49:48:ca:
29:40:3d:71:b2:42:56:b8:15:e5:74:47:b1:07:d7:6e:82:28:
29:9a:2b:08:10:82:f7:c3:05:ae:fb:3a:d6:1a:fb:86:15:48:
39:ba:bd:7d:7f:9d:df:36:53:87:60:5d:0e:40:e2:ea:34:bb:
fc:e0:b5:db:58:a5:ae:c3:4e:3b:f0:d1:64:34:db:ce:ae:8d:
77:19:c1:54:0c:9b:e0:e4:c6:62:69:48:56:c0:d7:94:12:ba:
4b:64:38:5b:d7:07:5f:db:f3:27:8e:cd:7d:ff:c7:fc:77:29:
ea:cc:a8:24:8a:75:a9:a1:00:f3:ab:de:82:64:db:f3:93:93:
2b:15:b6:ca:da:1c:93:c3:e8:96:7c:1c:d1:76:a8:4c:07:e7:
e2:fb:aa:d4:de:e2:6b:87:81:95:2a:6e:52:1c:c2:fa:4a:d9:
26:e9:1e:84:a6:99:ff:34:7a:68:b7:64:7e:46:c8:08:9b:45:
53:0e:d0:a2:45:2f:37:10:5a:4b:1d:51:90:07:cc:e6:b8:68:
04:fc:13:f8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOlBlTWiESoR6reAhEXNl0sw8kwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yMzAyMDkwODQzNThaFw0yNDAyMDgwODQ4NThaMDMxMTAvBgNV
BAMTKEJDRjZCRkVEQUNGRTREMTk5QTM3N0I3N0Q3NEY3NjU3NDFCQUM1NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkSIiqt14qd2kchX3uTR4Fq3C
ldesSgKUDTBr23t1a+xSVayiUxNznN4vEapWJNVMuPFs3kFHbBNmZEeXF4eEk6Eo
IcXLmRICfBjA4GatD/bSEhBFSod9TED8HjYsXy/YA3RuX633lm3rkY+dpFS0CkmN
CDLcQ/NP3GJuGekliXrfavV6q0oB9dE+tiobiJA4G2rdtEqoAOBzpWAnc0SP/YCw
PDRztNY7GTkC1ho5ziIk4UJcJE5XzFjs97/YTMMF26Zu7cKpdTvstuvrIXxg/xpZ
2SElUKjOFaloHj5qqqqC8XmOWHbSaRyP4nxIFmipJ9yZOc1C5CUdrnE0YHCbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvPa/7az+TRmaN3t31092V0G6xWswHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEt
YTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvMzEzOTMzMmUzMjM0MzYyZTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMwMzQzMzM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
wfYFMA0GCSqGSIb3DQEBCwUAA4IBAQAJBR15j4EbjS5czmWImqIBvXW9UOhwFRKT
cqc7JhSRKC5w8upAZB8791dgm38tqOg1yY5JSMopQD1xskJWuBXldEexB9dugigp
misIEIL3wwWu+zrWGvuGFUg5ur19f53fNlOHYF0OQOLqNLv84LXbWKWuw0478NFk
NNvOro13GcFUDJvg5MZiaUhWwNeUErpLZDhb1wdf2/Mnjs19/8f8dynqzKgkinWp
oQDzq96CZNvzk5MrFbbK2hyTw+iWfBzRdqhMB+fi+6rU3uJrh4GVKm5SHML6Stkm
6R6Eppn/NHpot2R+RsgIm0VTDtCiRS83EFpLHVGQB8zmuGgE/BP4
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org