Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e203230343733.roa
File: 38322e3131382e32352e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: OAhro96d1PmWigpFxWe/ru/eYsaWCnC2gYtUazkLx7Q=
Subject key identifier: CE:5C:FE:1E:D2:14:C3:DE:E3:9E:26:AD:DD:4B:A5:C1:A5:5F:94:4E
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 78DA77BCA560F2A87A9949A2AD0C969C3B621849
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e203230343733.roa
Signing time: Wed 21 Jun 2023 13:21:09 +0000
ROA not before: Wed 21 Jun 2023 13:16:09 +0000
ROA not after: Wed 19 Jun 2024 13:21:09 +0000
asID: 20473
IP address blocks: 82.118.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:da:77:bc:a5:60:f2:a8:7a:99:49:a2:ad:0c:96:9c:3b:62:18:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jun 21 13:16:09 2023 GMT
Not After : Jun 19 13:21:09 2024 GMT
Subject: CN=CE5CFE1ED214C3DEE39E26ADDD4BA5C1A55F944E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:0d:fa:41:ad:f6:0e:44:4d:42:bb:7c:4e:
56:97:5f:46:7b:eb:f1:78:1e:3e:36:fd:4a:f6:ab:
9f:ec:f8:db:72:1b:b2:74:1e:7f:a1:46:e5:3d:10:
cb:29:c1:56:a2:b7:4e:0e:6b:b7:20:38:f7:c1:7e:
4a:63:4e:f2:a2:9e:ff:8b:75:6e:d5:b5:70:73:78:
26:75:89:c3:e9:d4:33:76:fc:77:dd:ba:ac:c1:3a:
ed:da:e3:34:27:24:21:f7:bc:8b:6e:f7:0f:9b:30:
31:22:ca:57:5c:0c:64:00:88:e9:51:05:dd:dd:22:
7f:67:b6:55:36:d3:ba:e3:a9:ba:5a:1f:d6:6c:1f:
de:be:ee:a4:3b:6b:96:76:1a:36:66:5f:bf:ca:f3:
79:d2:ae:e9:1b:03:6f:1e:3e:a2:ff:d3:c7:25:31:
16:88:96:95:11:ff:02:e7:c8:46:c0:7b:83:bf:43:
69:11:ea:5b:e9:b4:c5:26:ba:18:63:ea:a3:d8:7a:
91:e0:27:56:84:b9:ea:d7:f4:f4:c3:f7:c5:33:0b:
c7:4f:79:10:96:85:07:8e:62:b7:a2:67:65:eb:15:
1d:61:53:8e:b9:4d:20:72:d2:cf:2e:09:cd:66:13:
31:24:20:0d:50:e9:0a:de:9f:e1:4a:06:c0:b9:88:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:FE:1E:D2:14:C3:DE:E3:9E:26:AD:DD:4B:A5:C1:A5:5F:94:4E
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32352e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.25.0/24
Signature Algorithm: sha256WithRSAEncryption
41:0d:c3:77:6e:7b:f1:8b:ff:6d:99:03:0e:b9:25:c9:ad:c8:
88:a9:3a:16:b7:1d:b7:6b:a6:3a:e9:2a:20:3d:d2:e6:d8:f8:
8e:ad:dd:0f:fa:69:29:a1:94:82:15:a6:66:60:63:ce:ef:df:
5d:f1:a5:41:c5:2e:f4:74:28:07:f5:4c:d3:32:78:77:2a:f6:
5f:1b:bb:75:b2:11:f5:6c:d7:14:bd:ca:a6:d9:6b:6e:46:a9:
b7:b6:26:96:83:bb:fa:9b:9f:df:ed:48:3c:34:71:74:43:e9:
88:ce:a7:be:fd:3b:64:e7:b0:31:ec:e4:97:64:6a:b2:f8:98:
1a:bf:5a:c2:4b:cb:f1:55:1e:1a:88:db:21:31:2c:f9:0a:11:
55:7d:a9:a5:bc:f2:8f:e6:e7:44:00:c9:50:bb:f0:3a:04:5d:
ba:42:47:2c:6b:75:c6:a1:fb:86:0e:17:65:12:d8:da:7b:96:
39:d5:fc:3c:7e:8f:0c:ac:16:fe:12:93:27:55:6a:ad:6b:b8:
5e:c4:04:2a:1d:84:44:56:00:15:98:0f:8c:db:17:17:eb:4c:
cf:21:0d:60:f5:86:6b:23:12:66:69:84:82:91:07:e9:ee:ef:
b4:93:51:82:47:3c:7c:68:b7:45:76:b2:f3:65:51:6b:03:63:
b9:bf:ac:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:10 2025 by rpki-client