Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e2039303530.roa
File: 39332e3131332e32352e302f32342d3234203d3e2039303530.roa (raw, json)
Hash identifier: PTyzEGEzj9Op+ZC4bzRXct/MD0TsGyScJGiqxGu6KIE=
Subject key identifier: E9:6B:FA:78:B4:C3:0A:D1:E8:83:8C:65:B1:5F:A0:5C:C9:37:22:CB
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 12F60F010E3F4D07ACB762F919AD922807E20A23
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e2039303530.roa
Signing time: Wed 23 Aug 2023 11:20:38 +0000
ROA not before: Wed 23 Aug 2023 11:15:38 +0000
ROA not after: Wed 21 Aug 2024 11:20:38 +0000
asID: 9050
IP address blocks: 93.113.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f6:0f:01:0e:3f:4d:07:ac:b7:62:f9:19:ad:92:28:07:e2:0a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Aug 23 11:15:38 2023 GMT
Not After : Aug 21 11:20:38 2024 GMT
Subject: CN=E96BFA78B4C30AD1E8838C65B15FA05CC93722CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:05:93:43:10:5a:aa:f9:27:24:bc:19:f2:
67:a7:42:80:23:b7:d8:90:5b:a7:eb:38:74:f9:39:
a4:77:82:fa:ba:ee:13:be:1a:2f:46:27:07:ba:fb:
cd:0b:f4:99:34:0a:42:cd:87:a5:ef:00:2a:8e:02:
ed:1d:a0:ab:fc:76:31:35:8f:3d:82:80:3a:33:1a:
a8:36:00:a4:06:92:92:5b:f5:93:d9:42:67:3d:9f:
c1:6c:9b:e7:95:2e:27:80:cd:36:70:c8:5e:6b:6c:
75:e0:4b:c1:bb:25:9d:e0:fe:69:21:39:00:e4:76:
43:dc:94:3a:fc:d4:fc:cb:0c:f9:8a:af:a4:8a:89:
e7:52:2d:b8:fb:db:de:3c:ce:cb:08:dd:4f:45:dc:
a0:26:48:0f:8f:2c:3d:17:d6:20:45:8d:c6:8b:3f:
64:42:62:d6:57:8a:a1:0e:eb:d5:db:36:47:40:96:
cc:88:d1:48:6f:ed:a6:d7:6d:3f:8a:d7:a1:db:7d:
b6:c5:e9:48:a9:65:48:47:25:0e:db:cf:a0:9b:8b:
05:c5:53:f0:16:e9:42:e7:77:6e:fd:d7:47:7f:cf:
8c:d5:35:fa:0e:63:2f:f8:dd:ec:d2:8d:16:f8:32:
23:56:91:4b:64:93:42:4a:6c:45:dd:17:0c:fe:71:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6B:FA:78:B4:C3:0A:D1:E8:83:8C:65:B1:5F:A0:5C:C9:37:22:CB
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e2039303530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:47:e2:e1:9e:e2:6d:3a:43:ed:45:7a:90:39:3b:d5:a6:6e:
99:82:c3:74:a9:e3:18:24:4e:f0:bf:ae:c4:48:5e:b5:c7:7d:
d3:61:63:63:9e:34:90:e0:e3:d0:65:16:2d:fd:10:ed:54:ac:
3e:89:bb:de:27:e6:69:1d:8e:85:20:10:c7:98:a7:70:68:49:
f9:85:80:93:86:5a:52:f6:11:cf:ae:89:df:09:6b:70:47:b2:
a0:92:d7:d0:20:4b:df:7d:b6:5f:77:3c:a9:13:5e:5c:4a:82:
9b:2a:e4:36:34:60:6e:dd:30:d8:83:86:e1:79:9d:45:fe:ef:
e1:b9:e0:19:d9:8e:d6:10:71:30:75:ae:ef:2e:ec:9e:cc:c3:
94:7e:e4:12:26:00:df:93:06:33:95:ea:a9:19:95:39:67:c3:
72:d2:c5:46:f4:77:a9:ed:61:5c:53:60:ba:36:06:67:c1:40:
6f:fd:78:4d:9e:31:6d:4c:61:ed:28:6f:d5:42:56:4d:b1:8a:
00:e0:d8:97:cc:41:40:9f:03:56:e2:c4:5b:90:72:a9:80:95:
ac:6e:2d:b6:86:89:e1:9a:9f:00:ad:06:01:1b:97:5f:5b:9e:
6d:43:41:d1:0b:be:95:0f:6a:8b:a3:97:15:8f:21:a5:19:bf:
b1:47:b0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:54 2025 by rpki-client