Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e203432383331.roa
File: 39322e3131342e342e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: G7yrJzDk3wCkKUffMF/mk6OrQ0aN/KVnD7Y7gSgwTnA=
Subject key identifier: 7E:3A:7B:08:A8:28:92:38:86:1F:94:CA:FB:B5:3C:3B:B2:43:EB:1B
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 6A6C45AFFE54B2AA52F36E523075F61A8653D836
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e203432383331.roa
Signing time: Sat 29 Jul 2023 08:18:34 +0000
ROA not before: Sat 29 Jul 2023 08:13:34 +0000
ROA not after: Sat 27 Jul 2024 08:18:34 +0000
asID: 42831
IP address blocks: 92.114.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:6c:45:af:fe:54:b2:aa:52:f3:6e:52:30:75:f6:1a:86:53:d8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jul 29 08:13:34 2023 GMT
Not After : Jul 27 08:18:34 2024 GMT
Subject: CN=7E3A7B08A8289238861F94CAFBB53C3BB243EB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:c0:0b:9a:58:09:bd:f1:33:fb:f3:33:e4:
a4:85:ce:5a:e8:d6:e2:3c:7f:d1:36:4f:20:ac:f8:
d6:70:30:f5:72:d4:2c:0d:6e:22:35:ce:26:14:0a:
6f:83:16:66:79:98:94:2c:f3:b4:ce:51:40:84:3f:
86:bb:f4:7d:a7:73:0b:b3:6b:27:9b:c7:82:14:9c:
84:19:2a:fd:16:f8:71:57:66:c9:7e:63:70:d5:c8:
48:29:fd:95:38:1c:53:ef:f4:96:dc:db:f4:20:4a:
9c:3d:c0:01:9b:00:11:2e:27:27:da:bc:e1:67:d0:
05:8b:a9:56:15:5b:7a:83:b1:f0:b1:51:ae:45:0b:
d3:ed:65:59:69:ba:44:04:5e:20:51:6b:25:16:7e:
13:40:b6:f5:0f:3a:1a:27:13:33:be:4b:a4:49:07:
cb:06:cc:52:d7:9b:6c:fe:c8:ee:5c:a8:db:95:92:
9e:4b:6f:8f:52:aa:77:4a:0d:97:ae:30:a5:ca:f3:
95:e6:45:76:c4:44:2e:cc:aa:a7:0e:ce:d1:50:5e:
bc:cb:04:17:10:72:0b:45:a6:95:16:a9:51:cc:cb:
4a:7f:f8:f7:12:95:e9:5f:28:47:4d:e8:73:71:25:
e5:cc:cc:bc:f8:be:61:e6:ad:96:a8:f4:9d:d9:34:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:7B:08:A8:28:92:38:86:1F:94:CA:FB:B5:3C:3B:B2:43:EB:1B
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e342e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.4.0/24
Signature Algorithm: sha256WithRSAEncryption
34:20:5a:73:bc:a3:64:1f:6d:5e:54:20:db:22:c5:bf:43:b8:
19:24:57:ae:14:b5:0b:03:3e:da:f1:fd:92:58:9e:4b:b3:bf:
4f:ba:52:fe:7c:99:87:0a:4a:cc:85:47:8b:8f:10:8f:9c:f9:
04:78:dc:f0:fa:54:04:74:13:47:e0:13:4e:8c:ce:3a:d4:fc:
7f:8d:e3:a6:1b:6a:49:a2:14:d3:a2:ed:91:61:15:a6:e0:fc:
59:3b:da:f2:b8:7a:02:4a:65:c6:68:9e:98:19:f4:ba:60:d0:
eb:96:e7:fd:11:3a:ce:d9:c7:3b:f0:c6:e8:71:5d:d6:cf:19:
34:cd:0e:be:24:32:5c:78:2a:d6:e8:3d:07:c9:64:b8:17:b4:
8a:6f:e5:f2:bd:79:a1:f1:36:97:10:dc:ab:ec:be:1c:85:eb:
98:38:da:42:81:cb:b3:4c:98:cc:22:e9:bb:23:4f:82:cc:ba:
c9:cf:88:47:47:90:d5:b0:ed:bc:30:e3:3c:5c:15:44:dd:10:
1d:2f:80:30:53:6e:4f:d2:1d:41:11:d0:e7:99:bb:79:25:8f:
55:70:61:db:cb:c0:c3:9e:aa:2d:b0:d0:4f:c5:d9:87:17:ed:
86:3d:75:1f:53:b0:27:60:8d:64:29:f2:4e:10:87:3e:4a:f9:
2d:9d:7e:79
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUamxFr/5UsqpS825SMHX2GoZT2DYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yMzA3MjkwODEzMzRaFw0yNDA3MjcwODE4MzRaMDMxMTAvBgNV
BAMTKDdFM0E3QjA4QTgyODkyMzg4NjFGOTRDQUZCQjUzQzNCQjI0M0VCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcW8ALmlgJvfEz+/Mz5KSFzlro
1uI8f9E2TyCs+NZwMPVy1CwNbiI1ziYUCm+DFmZ5mJQs87TOUUCEP4a79H2ncwuz
ayebx4IUnIQZKv0W+HFXZsl+Y3DVyEgp/ZU4HFPv9Jbc2/QgSpw9wAGbABEuJyfa
vOFn0AWLqVYVW3qDsfCxUa5FC9PtZVlpukQEXiBRayUWfhNAtvUPOhonEzO+S6RJ
B8sGzFLXm2z+yO5cqNuVkp5Lb49SqndKDZeuMKXK85XmRXbERC7MqqcOztFQXrzL
BBcQcgtFppUWqVHMy0p/+PcSlelfKEdN6HNxJeXMzLz4vmHmrZao9J3ZNCy/AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUfjp7CKgokjiGH5TK+7U8O7JD6xswHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzkzMjJlMzEzMTM0MmUzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzIzODMzMzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABccgQw
DQYJKoZIhvcNAQELBQADggEBADQgWnO8o2QfbV5UINsixb9DuBkkV64UtQsDPtrx
/ZJYnkuzv0+6Uv58mYcKSsyFR4uPEI+c+QR43PD6VAR0E0fgE06MzjrU/H+N46Yb
akmiFNOi7ZFhFabg/Fk72vK4egJKZcZonpgZ9Lpg0OuW5/0ROs7ZxzvwxuhxXdbP
GTTNDr4kMlx4KtboPQfJZLgXtIpv5fK9eaHxNpcQ3KvsvhyF65g42kKBy7NMmMwi
6bsjT4LMusnPiEdHkNWw7bww4zxcFUTdEB0vgDBTbk/SHUER0OeZu3klj1VwYdvL
wMOeqi2w0E/F2YcX7YY9dR9TsCdgjWQp8k4Qhz5K+S2dfnk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:54 2025 by rpki-client