Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233322e302f32342d3234203d3e20383334.roa
File: 34362e3130322e3233322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HOGJp7Bl8EkyM2SOQmxkbg9p5QSZFNt+q6PQU8BUL8M=
Subject key identifier: 59:12:54:27:21:71:0A:79:8C:34:40:AF:33:71:C4:DB:B7:E8:52:06
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 4941B357937BFA32189769025180D51A6CE9C729
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233322e302f32342d3234203d3e20383334.roa
Signing time: Wed 25 Oct 2023 00:00:08 +0000
ROA not before: Tue 24 Oct 2023 23:55:08 +0000
ROA not after: Wed 23 Oct 2024 00:00:08 +0000
asID: 834
IP address blocks: 46.102.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:41:b3:57:93:7b:fa:32:18:97:69:02:51:80:d5:1a:6c:e9:c7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Oct 24 23:55:08 2023 GMT
Not After : Oct 23 00:00:08 2024 GMT
Subject: CN=5912542721710A798C3440AF3371C4DBB7E85206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c4:8a:fd:99:38:38:5a:51:c3:80:23:b6:64:
10:6a:24:c9:1c:6c:5c:3e:de:30:b3:ba:ab:d4:0c:
c9:06:2e:b6:2c:f7:1b:16:3a:02:04:51:ed:71:9c:
61:ec:9e:0a:c5:a9:39:ae:62:1b:0f:7d:e5:f9:1d:
d1:5f:a9:82:23:a4:c6:61:f5:c7:1c:f6:00:78:a1:
11:1c:a9:41:df:46:3c:05:5e:7a:a9:ef:11:8b:a1:
37:da:a0:7f:e0:fa:34:4b:6d:12:e6:ad:e1:c5:59:
9a:73:90:08:e8:e9:00:0d:5c:2a:11:c8:8f:82:de:
5c:b2:7f:48:af:1c:07:72:7e:4c:43:7a:18:4d:4a:
e9:ab:cb:01:41:13:69:5b:47:5c:f4:d6:80:49:9e:
51:ec:02:ea:c1:1c:64:bf:43:9d:66:13:20:92:07:
73:98:4b:63:03:45:bd:5a:26:79:31:85:4d:5c:89:
b2:7b:67:ce:9e:15:3f:d9:af:d9:9c:e0:4e:7a:5e:
5c:3e:d0:43:00:fe:25:e3:82:40:63:a9:af:48:33:
71:52:0c:2d:4d:93:f0:2e:b8:e4:3c:0a:4f:02:0d:
91:0f:76:26:f3:45:5a:ca:94:f9:12:54:bd:90:ac:
7a:96:31:8f:0a:83:ee:a8:af:65:41:1e:57:c9:30:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:54:27:21:71:0A:79:8C:34:40:AF:33:71:C4:DB:B7:E8:52:06
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/34362e3130322e3233322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.232.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1e:53:8e:35:2d:3c:24:64:56:aa:4c:4b:ab:6e:de:14:0e:
53:a1:0e:ff:bb:dc:10:df:42:67:0e:1e:1c:29:70:6a:3e:59:
01:0c:7e:1a:a3:09:02:07:51:0d:28:1e:25:76:5c:b3:44:ec:
00:91:e7:9f:ba:75:ab:b5:42:09:b8:e2:be:b3:f5:7c:93:34:
a8:76:26:8b:e8:40:55:10:1a:4c:a1:d0:5f:cb:e7:98:01:7d:
a0:92:0b:34:87:09:be:a5:07:fc:8b:00:e6:63:ef:e0:6e:21:
9a:a5:4d:f1:48:cc:89:df:8a:c7:4e:d2:6e:ef:2b:2b:94:c8:
f0:6d:95:c9:58:7e:2f:69:cd:1f:e7:9c:98:bd:ad:26:39:cf:
6d:9d:55:ef:dd:f9:9a:57:4d:68:b7:41:11:39:d2:b4:07:71:
d9:c5:30:07:bc:12:ea:73:63:21:8b:e3:2c:ed:2e:dc:d2:f3:
a0:46:e8:22:39:17:3b:80:24:66:28:cb:aa:24:f7:0f:e4:00:
96:29:62:65:40:81:48:6c:d0:da:9b:83:e3:8d:63:fe:90:21:
02:25:93:21:42:64:9d:fd:39:62:93:2a:9c:1a:72:47:52:18:
51:88:ef:e9:cd:67:68:b5:8b:31:b8:9c:82:92:16:2b:2b:8d:
4c:1b:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:21 2025 by rpki-client