Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133372e302f32342d3234203d3e203439343638.roa
File: 37372e38312e3133372e302f32342d3234203d3e203439343638.roa (raw, json)
Hash identifier: di1iJCMV8vuGeWfgY4/eg2y3rs2EqWFBUyLKZmSIoQE=
Subject key identifier: 29:B2:53:89:A5:E6:28:0D:92:5C:9F:5E:E4:94:05:45:8F:2E:4A:5F
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 310FC4B3704247F399626DB5F9F0624454EE63DD
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133372e302f32342d3234203d3e203439343638.roa
Signing time: Tue 12 Sep 2023 16:03:21 +0000
ROA not before: Tue 12 Sep 2023 15:58:21 +0000
ROA not after: Tue 10 Sep 2024 16:03:21 +0000
asID: 49468
IP address blocks: 77.81.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0f:c4:b3:70:42:47:f3:99:62:6d:b5:f9:f0:62:44:54:ee:63:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Sep 12 15:58:21 2023 GMT
Not After : Sep 10 16:03:21 2024 GMT
Subject: CN=29B25389A5E6280D925C9F5EE49405458F2E4A5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:48:6a:8f:16:63:4a:a4:de:a1:4f:cb:3e:df:
37:52:ad:b3:4c:10:15:ec:22:ad:1e:72:25:a0:10:
28:e9:26:03:1d:d3:65:34:68:f6:19:a7:4d:29:5e:
ab:68:f9:b3:ad:5f:d2:5c:f5:af:2c:16:14:90:7a:
e9:66:1a:8a:26:dd:57:91:e9:9d:fe:11:19:df:27:
a5:33:04:39:c1:19:40:4c:ee:49:be:47:fe:be:0b:
c2:2c:7c:06:02:c0:39:f5:29:00:3f:3f:c5:67:9f:
4d:7d:80:fb:7a:06:05:25:2c:ba:12:b3:a1:08:33:
39:cb:1a:dc:d4:3d:89:9f:5b:c0:4d:3d:b7:66:d1:
b5:8d:08:67:91:95:40:aa:eb:dc:e6:24:83:6b:cb:
cb:c4:b7:39:bd:28:26:96:a1:45:99:7e:b7:aa:07:
43:7c:c9:06:d4:2e:be:12:89:06:b2:eb:29:e0:42:
2a:6d:d0:a0:64:2b:bd:15:53:4b:f7:ba:c0:b2:62:
a2:64:cd:46:f1:6f:04:9e:78:c2:c7:67:44:96:1e:
f5:62:dd:ad:77:80:a8:f2:62:a0:15:04:23:91:b4:
eb:d3:8e:aa:1e:ad:f4:25:02:2d:88:5c:9f:ef:9e:
5a:c4:c0:05:b8:0b:7a:ef:fa:73:ea:38:e0:88:a5:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B2:53:89:A5:E6:28:0D:92:5C:9F:5E:E4:94:05:45:8F:2E:4A:5F
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133372e302f32342d3234203d3e203439343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0d:c8:fa:98:93:12:98:c8:9b:10:21:91:37:b3:37:78:44:
53:b7:18:92:0b:4e:61:ab:ca:6e:6d:4e:d8:8d:f7:b9:66:75:
6d:3e:b0:57:cd:e1:fb:7d:ef:1d:6a:0e:4c:93:d1:c0:a7:ea:
52:3b:66:87:6e:b5:38:46:3f:80:61:86:10:3d:f6:48:51:87:
0c:d6:24:b8:37:be:d8:16:ce:f3:8a:3c:46:fb:95:b0:fd:7b:
88:c6:2d:0e:45:2c:bc:fa:75:f2:e7:97:54:42:fa:f5:99:46:
9e:79:1a:59:ea:8b:d4:fb:d2:b5:d7:dd:43:77:d7:58:2a:78:
c1:fa:85:33:8b:37:f4:f1:b9:89:c8:78:93:b7:4c:f2:24:24:
e0:20:63:12:3f:3b:24:1d:82:a2:fe:ee:eb:b4:85:b4:64:b0:
c7:49:b5:51:f9:df:42:8f:1d:aa:17:09:3b:ce:e0:d7:3b:ff:
cc:2f:af:05:7c:4c:71:a1:ed:aa:20:34:7c:1e:eb:07:48:e4:
02:d9:45:db:06:87:cc:2a:45:fe:97:61:e0:dc:84:cf:a8:51:
72:2d:c8:0b:68:97:cd:4a:8b:ca:24:e7:3f:a8:0c:52:1d:ce:
fa:8b:d5:5e:1d:10:80:c9:24:62:aa:f9:9f:7e:4e:e3:04:e7:
c6:c9:00:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:02:02 2025 by rpki-client