Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39372e302f32342d3234203d3e203535323836.roa
File: 34352e3133322e39372e302f32342d3234203d3e203535323836.roa (raw, json)
Hash identifier: BhNV7Xk/N7TpJEfxV4WDlrFRzTvxxE42W1p0gXAkyEo=
Subject key identifier: A7:D9:1F:CA:62:F6:E6:DF:52:31:CD:03:D8:D4:29:3E:3A:F8:C9:96
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 632CA636A180E3729632B8903455B2EF85AF9541
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39372e302f32342d3234203d3e203535323836.roa
Signing time: Thu 04 May 2023 10:56:22 +0000
ROA not before: Thu 04 May 2023 10:51:22 +0000
ROA not after: Thu 02 May 2024 10:56:22 +0000
asID: 55286
IP address blocks: 45.132.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2c:a6:36:a1:80:e3:72:96:32:b8:90:34:55:b2:ef:85:af:95:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 4 10:51:22 2023 GMT
Not After : May 2 10:56:22 2024 GMT
Subject: CN=A7D91FCA62F6E6DF5231CD03D8D4293E3AF8C996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:64:42:96:40:af:25:3e:05:09:1a:74:1d:
42:eb:78:0d:57:9f:c4:8d:99:9e:2a:48:19:1a:23:
cc:32:72:30:c0:95:78:fa:3c:f6:1d:af:9e:f1:67:
72:ef:9b:7e:ac:42:db:f6:de:a6:9d:46:78:76:3b:
2a:60:59:4a:27:8a:2c:38:6a:ab:cf:17:0b:93:51:
ee:b4:a9:8f:20:87:4e:c2:28:4d:ec:88:b7:4f:69:
ce:8d:44:d3:63:ba:09:d4:aa:de:4d:f3:db:17:89:
15:93:33:54:5d:91:04:f7:63:9d:7f:98:70:f6:ba:
d1:cf:b5:9a:53:76:cd:f9:3d:a8:33:a6:f5:85:2f:
af:a6:e9:a0:ce:35:fb:89:ef:d1:a0:cd:dc:c5:66:
46:d9:1e:3a:2c:14:e6:fe:31:fd:97:05:5b:58:d8:
f6:89:44:8f:73:c3:eb:a7:d8:b3:13:d8:20:84:5d:
36:ee:07:69:48:b8:ca:c7:49:0c:6c:10:28:62:3a:
2c:c3:34:e7:67:b8:68:a0:6e:58:af:ec:67:24:78:
e9:ba:54:df:b1:9d:78:d3:b2:fe:f5:11:b6:3e:5a:
fd:d8:17:cf:d3:1d:4d:7b:2f:a6:d0:65:82:6f:3f:
8e:51:4e:53:fc:56:04:fd:fd:99:91:bb:22:3d:c5:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:1F:CA:62:F6:E6:DF:52:31:CD:03:D8:D4:29:3E:3A:F8:C9:96
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39372e302f32342d3234203d3e203535323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a9:4b:39:10:bb:3c:b1:54:b9:40:65:b4:36:6f:ab:74:fa:
ba:23:10:58:04:37:f9:80:c8:1b:df:15:ec:12:3b:30:49:26:
ee:16:05:34:ca:eb:36:39:5c:d4:03:df:89:c0:70:51:48:26:
81:20:83:ba:68:0f:45:ae:d1:d3:ef:6c:9d:49:b2:66:d5:a2:
11:c5:ba:35:a7:a6:92:1e:42:84:73:93:0a:b2:af:14:fd:07:
8e:4a:14:67:dd:70:e8:92:59:77:89:b1:e5:10:6a:57:31:97:
60:f0:12:07:88:74:31:d9:fb:c9:d9:f1:c4:1d:58:7d:41:f2:
79:7d:a5:79:ec:f6:40:10:61:5b:2c:c4:29:fc:bf:c7:d4:1b:
4a:c7:90:22:04:4e:a6:7f:8c:23:f0:53:fc:ff:ec:6b:ff:b3:
1d:54:f9:ef:01:d4:7f:04:f8:1b:69:7b:8f:5b:04:77:f7:3e:
fc:37:59:14:bb:57:12:6d:e5:eb:8c:d6:1c:91:c8:32:e9:9a:
14:8e:d9:1e:8b:22:a1:b6:98:00:40:11:89:da:f6:98:a9:4a:
9c:12:24:8e:9c:23:d1:56:7f:24:09:08:f6:02:ea:14:e9:e3:
b6:e7:9a:24:12:77:03:8d:bf:bc:64:54:2a:2a:81:18:ba:57:
1d:7b:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org