Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203230343733.roa
File: 37372e38312e3133382e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: JRFpQqEbDCo4ZkYjbVHCNT/40/MimJtopj5HJB25d4U=
Subject key identifier: 6F:81:91:05:F5:8B:23:85:A0:BE:B4:67:67:BC:88:A5:33:DD:C8:DA
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 301C2A3B1D5B600CB3EB33C206D7D1DF67D236B8
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203230343733.roa
Signing time: Wed 14 Feb 2024 17:39:01 +0000
ROA not before: Wed 14 Feb 2024 17:34:01 +0000
ROA not after: Wed 12 Feb 2025 17:39:01 +0000
asID: 20473
IP address blocks: 77.81.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1c:2a:3b:1d:5b:60:0c:b3:eb:33:c2:06:d7:d1:df:67:d2:36:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Feb 14 17:34:01 2024 GMT
Not After : Feb 12 17:39:01 2025 GMT
Subject: CN=6F819105F58B2385A0BEB46767BC88A533DDC8DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:c2:2a:cf:b6:9b:54:64:c9:f2:89:e5:49:
79:7c:f4:d6:a4:ea:90:61:88:5f:3d:f5:4c:7c:a6:
92:e3:09:32:b5:4d:08:ab:97:f0:84:61:5c:f4:7a:
fb:00:e2:9d:3d:bb:27:18:c5:84:c6:a4:51:28:3d:
79:23:d5:43:c2:be:6f:b3:e9:3f:d0:11:c3:a4:a0:
ea:1c:0a:52:98:73:45:78:c2:b2:47:01:9c:9d:cb:
8c:5a:bb:a2:41:3d:dd:5e:9c:39:d7:20:57:b0:6c:
b2:db:4b:65:13:f3:b2:ea:c6:7a:10:0a:28:43:32:
47:3a:63:ab:36:01:5e:8a:d3:74:ba:7e:d0:13:a9:
a6:be:18:c0:5b:f6:5c:ce:97:44:86:f1:54:8d:1d:
2c:ad:b7:74:6f:d1:95:08:4f:fa:ca:a7:aa:ce:1a:
3f:a8:b0:56:0e:f6:80:09:09:0d:68:56:c6:4b:d1:
e2:be:1a:ec:33:7f:8f:7c:20:60:40:37:53:c8:00:
94:c1:ab:c7:42:b8:19:16:82:90:b9:19:05:05:ce:
ac:f3:68:5f:9a:71:8a:75:e6:9c:2e:be:23:5d:0b:
e7:bd:db:be:30:02:d7:bd:16:24:24:1f:df:21:48:
08:3c:b2:18:3e:2f:d7:42:db:1d:7e:8c:13:c6:f4:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:81:91:05:F5:8B:23:85:A0:BE:B4:67:67:BC:88:A5:33:DD:C8:DA
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ea:f7:c3:58:f1:e2:b8:df:7d:10:d0:80:84:42:87:45:e6:
a5:12:e3:6a:54:01:6f:7f:1b:b0:83:25:77:9c:85:fb:fd:cb:
c1:a9:d2:da:b8:b0:14:f8:eb:26:28:67:f3:ff:6d:77:fb:78:
b8:00:a2:20:dc:2f:b7:09:d4:01:72:38:1d:a4:4e:00:56:25:
76:ca:f6:ca:b6:6c:b0:e1:1b:0a:6e:9f:4c:9d:f6:27:16:6d:
1f:f8:6d:71:53:8c:3b:06:19:c6:40:a5:ed:42:70:77:79:49:
88:94:0a:c5:ea:f7:28:6f:f6:cd:45:cf:55:43:37:ed:fd:d1:
71:31:93:08:b3:c4:4c:9a:84:53:78:fd:7a:40:c2:26:0b:3c:
9a:72:6e:cb:d8:99:4a:e2:75:4e:15:1b:0d:a3:34:48:a4:58:
66:b7:92:25:be:68:2f:32:84:5c:b8:80:63:df:c3:34:4e:f4:
ae:50:76:66:f2:56:18:9f:42:9f:4c:02:82:9c:c7:8c:16:e9:
a8:93:51:aa:ad:26:3a:cd:0c:2e:2f:d7:4e:b1:f2:e4:70:94:
00:78:28:00:f9:90:18:67:3f:92:6f:ef:a6:84:81:3c:8b:ef:
8f:35:91:88:10:36:54:e1:7d:a6:97:da:ec:ae:af:24:6f:b6:
e4:55:a2:1d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMBwqOx1bYAyz6zPCBtfR32fSNrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yNDAyMTQxNzM0MDFaFw0yNTAyMTIxNzM5MDFaMDMxMTAvBgNV
BAMTKDZGODE5MTA1RjU4QjIzODVBMEJFQjQ2NzY3QkM4OEE1MzNEREM4REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGMIqz7abVGTJ8onlSXl89Nak
6pBhiF899Ux8ppLjCTK1TQirl/CEYVz0evsA4p09uycYxYTGpFEoPXkj1UPCvm+z
6T/QEcOkoOocClKYc0V4wrJHAZydy4xau6JBPd1enDnXIFewbLLbS2UT87LqxnoQ
CihDMkc6Y6s2AV6K03S6ftATqaa+GMBb9lzOl0SG8VSNHSytt3Rv0ZUIT/rKp6rO
Gj+osFYO9oAJCQ1oVsZL0eK+Guwzf498IGBAN1PIAJTBq8dCuBkWgpC5GQUFzqzz
aF+acYp15pwuviNdC+e9274wAte9FiQkH98hSAg8shg+L9dC2x1+jBPG9CJlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUb4GRBfWLI4WgvrRnZ7yIpTPdyNowHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzczNzJlMzgzMTJlMzEzMzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1R
ijANBgkqhkiG9w0BAQsFAAOCAQEAO+r3w1jx4rjffRDQgIRCh0XmpRLjalQBb38b
sIMld5yF+/3LwanS2riwFPjrJihn8/9td/t4uACiINwvtwnUAXI4HaROAFYldsr2
yrZssOEbCm6fTJ32JxZtH/htcVOMOwYZxkCl7UJwd3lJiJQKxer3KG/2zUXPVUM3
7f3RcTGTCLPETJqEU3j9ekDCJgs8mnJuy9iZSuJ1ThUbDaM0SKRYZreSJb5oLzKE
XLiAY9/DNE70rlB2ZvJWGJ9Cn0wCgpzHjBbpqJNRqq0mOs0MLi/XTrHy5HCUAHgo
APmQGGc/km/vpoSBPIvvjzWRiBA2VOF9ppfa7K6vJG+25FWiHQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:15 2025 by rpki-client