Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e352e302f32342d3234203d3e203330303831.roa
File: 39322e3131342e352e302f32342d3234203d3e203330303831.roa (raw, json)
Hash identifier: lfHSk/baHvHfChjzELyLWSrcAjFFmtwHeaMD06QNzWI=
Subject key identifier: F3:6F:89:02:F5:53:A1:B7:DF:CC:EA:4B:A7:3A:15:CF:D5:C7:A3:7E
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 1D0C83D7D46579263BD68534AA771389051C4218
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e352e302f32342d3234203d3e203330303831.roa
Signing time: Thu 04 May 2023 10:56:22 +0000
ROA not before: Thu 04 May 2023 10:51:22 +0000
ROA not after: Thu 02 May 2024 10:56:22 +0000
asID: 30081
IP address blocks: 92.114.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0c:83:d7:d4:65:79:26:3b:d6:85:34:aa:77:13:89:05:1c:42:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 4 10:51:22 2023 GMT
Not After : May 2 10:56:22 2024 GMT
Subject: CN=F36F8902F553A1B7DFCCEA4BA73A15CFD5C7A37E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:8b:f9:84:53:9d:3c:e4:80:89:19:45:39:
8b:96:ed:9a:58:8a:19:d7:0b:a9:72:cb:b0:eb:cf:
f5:c7:64:2c:a5:a9:ee:84:d8:01:bd:3f:a3:ab:df:
14:d6:c7:37:e6:bc:81:1c:06:13:ae:ec:43:79:26:
ec:ee:c7:e0:fe:16:74:34:45:db:e2:c6:9f:e1:21:
27:5b:52:77:1f:2a:09:6e:ba:14:57:f7:77:96:d2:
a6:1c:99:e8:cd:9d:ec:04:73:4d:ae:86:72:38:a5:
42:84:93:9d:a7:d9:6a:6f:31:a0:c6:ee:24:f8:d1:
4f:66:03:e1:18:1f:cc:b0:1c:88:56:c1:d8:f2:b2:
68:05:00:0d:16:98:70:a6:1e:99:45:c4:7e:b5:4f:
3c:37:5a:64:17:5b:c5:9c:64:65:67:e0:7b:95:45:
61:5a:e2:e9:48:8d:74:7d:92:53:79:99:66:36:25:
52:b9:23:b6:9a:ba:f2:8c:21:80:d3:08:38:e2:a6:
de:d1:d8:60:dd:38:ff:eb:33:55:fa:11:43:29:3f:
78:f9:bd:85:8f:f8:4c:e2:e3:94:b1:b7:84:2e:54:
df:1f:8c:98:9d:12:67:fe:0e:4d:91:4a:fd:0b:ed:
a1:46:9f:ef:20:6a:1e:18:d9:ff:4b:0a:c4:50:30:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:89:02:F5:53:A1:B7:DF:CC:EA:4B:A7:3A:15:CF:D5:C7:A3:7E
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e352e302f32342d3234203d3e203330303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.5.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5e:e3:45:2d:67:63:3a:7b:4e:6f:88:01:0d:8b:08:bc:72:
cb:00:ad:fb:25:ff:ad:f9:19:59:3b:7e:7c:c0:71:41:36:a2:
e5:e0:5f:04:17:ae:5a:ca:7d:61:ce:cc:1e:44:81:a3:58:44:
68:36:4a:62:d1:42:d7:f3:f7:6d:d3:5d:87:40:1a:5b:5c:ed:
d9:b5:52:dc:67:67:01:ec:80:36:ef:91:0b:56:28:d8:e8:fa:
fe:52:6a:95:ab:0f:1e:80:77:9d:6e:5c:fc:4c:0b:35:56:ce:
e0:61:3a:01:7f:6d:73:54:3e:da:eb:be:aa:3a:9a:32:66:38:
a8:22:af:73:b7:9b:70:ae:c7:90:62:e8:63:9b:60:80:a9:20:
0f:af:bc:e3:02:4a:f6:a9:e0:29:14:6c:db:5d:04:9c:c2:d3:
c6:24:b9:99:44:c8:3f:34:ae:e4:e6:42:77:50:6d:53:6d:f9:
23:4e:71:8d:ec:70:d0:53:8f:37:b3:07:38:d8:84:6f:21:69:
c9:6c:d2:20:dd:4f:bf:f9:d3:2d:ab:b7:94:88:17:a4:3f:e9:
d8:64:28:44:24:d5:cb:3f:47:d1:ac:06:f5:04:1c:57:fd:09:
95:df:02:e0:21:09:2f:b6:cb:1f:07:5e:5a:dd:a9:b5:07:a9:
ef:1b:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org