Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203537303433.roa
File: 37372e38312e3133382e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: ltJ1z8hB9A/7LMWgUzP0lSVYRNwFrC01UTXD+YAp3lQ=
Subject key identifier: 67:38:74:FC:D9:02:E7:51:FD:F8:BC:A3:02:8D:23:50:C6:2F:58:23
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 57114834B73B9A17557043FFFFE48397D20D0A92
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203537303433.roa
Signing time: Wed 20 Sep 2023 06:41:50 +0000
ROA not before: Wed 20 Sep 2023 06:36:50 +0000
ROA not after: Wed 18 Sep 2024 06:41:50 +0000
asID: 57043
IP address blocks: 77.81.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:11:48:34:b7:3b:9a:17:55:70:43:ff:ff:e4:83:97:d2:0d:0a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Sep 20 06:36:50 2023 GMT
Not After : Sep 18 06:41:50 2024 GMT
Subject: CN=673874FCD902E751FDF8BCA3028D2350C62F5823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:4b:8b:c9:9b:83:11:10:b6:ba:af:b4:3f:
e1:2c:d1:21:83:47:c2:5c:e8:7c:56:af:e2:b2:6c:
21:3d:5e:60:fb:dc:c8:4f:cf:3b:7c:c4:fd:71:71:
3c:d0:df:2f:7c:f7:e7:b3:29:3e:e0:8f:16:24:3b:
29:63:74:43:23:d5:cb:a0:d1:5c:dd:a4:28:3b:15:
0d:75:5f:7b:c0:f4:db:03:a3:18:87:8f:ac:9f:2f:
c6:9b:ff:b7:94:31:e7:ed:ad:97:24:d6:e6:62:d2:
86:0f:96:1f:7d:97:84:16:29:1d:76:b3:2f:18:e3:
ff:e8:cb:c9:b9:05:b1:b7:e3:48:c2:e0:59:7b:73:
a5:1b:cf:bd:0a:1e:c8:8a:40:cb:e8:ec:6d:0c:43:
37:5e:d5:c5:7f:17:68:5f:cb:d1:8c:25:85:03:a2:
1a:cf:2a:d7:3f:31:2e:fc:94:b9:e9:c1:27:06:fe:
2b:f8:ad:2d:72:45:57:f0:73:82:72:8f:71:32:8b:
6e:82:ed:77:e7:7f:a9:26:3d:41:27:a2:5c:ea:9a:
05:85:ac:51:e9:75:cd:cb:12:5b:30:0e:34:91:91:
a4:5d:6e:6c:1d:cc:b6:5e:85:e0:b0:a2:89:70:03:
ea:50:8b:d3:d8:f6:71:e5:7b:57:9a:73:e9:cd:85:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:38:74:FC:D9:02:E7:51:FD:F8:BC:A3:02:8D:23:50:C6:2F:58:23
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:53:48:e4:51:7d:92:f0:ae:c1:bf:dd:dc:fa:dc:44:9b:5e:
58:58:21:ea:34:26:88:cd:c1:e3:6f:d9:c6:37:e0:ed:52:42:
4e:64:dd:10:23:47:0c:a3:2b:a5:36:8e:38:7a:5b:9a:73:62:
cb:4e:11:91:57:9b:12:79:d4:33:f1:35:30:35:a2:e4:e8:dc:
1a:8f:3f:fe:1c:5f:42:76:77:4c:08:6b:5b:c4:a4:22:73:4a:
40:1f:9a:1d:79:e0:cb:0d:22:c6:92:53:1d:43:40:87:74:3f:
b6:ba:28:dc:17:66:cc:f0:69:b7:36:8d:1b:4b:2e:17:b8:05:
74:0a:af:e8:34:bb:11:bc:71:5f:73:aa:52:f1:05:a2:d9:14:
de:ba:8e:84:7d:ee:bf:b3:59:17:1d:cf:67:2c:ec:2b:fe:e4:
cf:ee:d7:61:69:a6:5f:d3:0c:1c:7c:c2:9d:be:ce:2c:9e:a1:
92:56:67:d0:9e:7f:a2:0e:c8:8f:8f:8f:79:12:0d:ff:7e:35:
cd:7b:fb:a3:55:8a:43:2f:7c:44:af:ae:11:bc:bf:6a:4f:34:
d6:f3:49:a8:c8:f8:d2:39:f2:24:ad:15:72:f1:9a:0f:1e:bb:
01:15:14:14:32:04:ce:d0:5f:84:e7:6e:92:e8:86:3d:64:3c:
c9:0f:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:51 2025 by rpki-client