Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e312e302f32342d3234203d3e203432333636.roa
File: 3138352e3136392e312e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: 0ogN7SzEuJJMG7Sj2iouUrkHWU1noVkNO146NrpizRc=
Subject key identifier: FA:CF:34:6B:58:E3:94:E4:36:A6:B8:FB:F2:EF:33:80:BC:5C:E8:84
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7EE605B2F3D9130388A1FD230573ECA25E2FFF28
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e312e302f32342d3234203d3e203432333636.roa
Signing time: Sun 07 May 2023 15:43:22 +0000
ROA not before: Sun 07 May 2023 15:38:22 +0000
ROA not after: Sun 05 May 2024 15:43:22 +0000
asID: 42366
IP address blocks: 185.169.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e6:05:b2:f3:d9:13:03:88:a1:fd:23:05:73:ec:a2:5e:2f:ff:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 7 15:38:22 2023 GMT
Not After : May 5 15:43:22 2024 GMT
Subject: CN=FACF346B58E394E436A6B8FBF2EF3380BC5CE884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:da:c6:1b:78:9c:d6:0d:93:7b:87:69:f8:
b6:1e:52:04:c8:7d:7e:14:45:f2:c1:4a:74:e8:e0:
47:69:4d:ec:fd:a1:c3:65:c2:6a:76:82:6c:b2:af:
f2:6d:c7:e1:94:98:89:f3:46:41:3c:56:e4:c3:19:
55:64:30:8f:e3:99:63:f7:c6:93:c8:f2:43:65:66:
9a:84:5f:17:b5:40:a7:9e:12:4a:88:d6:57:aa:e8:
b7:41:1d:62:f6:18:d4:47:27:f8:f9:f0:d9:e0:fb:
85:2b:e9:6d:ca:02:f7:28:ff:66:c2:ee:36:38:1d:
2a:14:ed:7a:77:76:ef:f5:d1:fc:0a:f4:f0:19:23:
6e:59:61:27:50:ee:58:1d:d0:28:ee:ef:55:af:8d:
4e:91:b0:2b:2c:a2:15:b5:6e:b7:8d:2b:60:04:af:
1c:d7:ea:39:1c:dd:d9:d7:67:f3:2a:8c:d6:3f:4a:
d1:79:52:0f:9d:8f:a2:0e:c1:dc:52:23:44:1b:9d:
ef:51:3b:cd:d5:13:db:cc:67:5e:55:02:c0:e8:cd:
b8:eb:c3:3e:d6:5b:18:e0:bc:08:f3:88:ec:ee:87:
21:b1:51:0c:b3:37:9b:19:7e:c5:dc:ba:92:4c:2a:
ec:b4:ca:1c:67:3c:81:94:9a:47:58:f9:ca:8b:c0:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:34:6B:58:E3:94:E4:36:A6:B8:FB:F2:EF:33:80:BC:5C:E8:84
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136392e312e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.1.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f0:16:e1:ec:8e:07:33:c4:38:41:02:88:77:22:c4:7e:cf:
fb:46:65:26:dd:44:8a:1f:31:36:3c:55:81:e8:3c:63:af:aa:
af:8b:2e:f9:47:61:75:0f:77:18:08:c5:22:e5:fa:1e:78:62:
d9:be:a9:47:b0:fe:ee:8b:fe:9a:96:81:2b:37:42:24:3c:43:
8e:d1:19:de:53:aa:96:54:ee:a3:20:03:41:9f:9d:4a:91:25:
ac:9a:dc:e5:dc:82:c8:e1:b0:06:e3:e6:f0:ff:db:fe:e0:60:
32:c9:67:76:be:8d:05:83:5c:f1:45:b7:a7:be:ed:a8:c5:f2:
6c:45:f1:62:08:fb:10:c4:4d:b6:3d:a9:47:29:05:ff:3c:7a:
4e:70:b6:0b:b0:dc:d4:95:49:ae:60:58:06:4b:9b:26:93:43:
3e:b4:04:69:6f:c1:4f:ed:f2:94:3f:92:31:53:1c:29:71:b4:
b8:c9:63:ee:83:9a:ce:f8:c3:40:bf:6a:34:9d:6f:d7:1a:e4:
23:d5:ee:5a:1e:fa:04:ed:af:4e:01:85:33:14:cd:f2:41:51:
02:c3:fd:fa:51:ba:b9:1f:68:1a:37:36:12:e5:2c:55:ed:99:
87:6e:6a:f7:bc:05:c0:f9:8d:aa:9c:3b:6d:86:f6:0a:90:de:
79:0d:71:57
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUfuYFsvPZEwOIof0jBXPsol4v/ygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yMzA1MDcxNTM4MjJaFw0yNDA1MDUxNTQzMjJaMDMxMTAvBgNV
BAMTKEZBQ0YzNDZCNThFMzk0RTQzNkE2QjhGQkYyRUYzMzgwQkM1Q0U4ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjtrGG3ic1g2Te4dp+LYeUgTI
fX4URfLBSnTo4EdpTez9ocNlwmp2gmyyr/Jtx+GUmInzRkE8VuTDGVVkMI/jmWP3
xpPI8kNlZpqEXxe1QKeeEkqI1leq6LdBHWL2GNRHJ/j58Nng+4Ur6W3KAvco/2bC
7jY4HSoU7Xp3du/10fwK9PAZI25ZYSdQ7lgd0Cju71WvjU6RsCssohW1breNK2AE
rxzX6jkc3dnXZ/MqjNY/StF5Ug+dj6IOwdxSI0Qbne9RO83VE9vMZ15VAsDozbjr
wz7WWxjgvAjziOzuhyGxUQyzN5sZfsXcupJMKuy0yhxnPIGUmkdY+cqLwDFJAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQU+s80a1jjlOQ2prj78u8zgLxc6IQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzYz
OTJlMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAuakBMA0GCSqGSIb3DQEBCwUAA4IBAQB98Bbh7I4HM8Q4QQKIdyLEfs/7RmUm
3USKHzE2PFWB6Dxjr6qviy75R2F1D3cYCMUi5foeeGLZvqlHsP7ui/6aloErN0Ik
PEOO0RneU6qWVO6jIANBn51KkSWsmtzl3ILI4bAG4+bw/9v+4GAyyWd2vo0Fg1zx
Rbenvu2oxfJsRfFiCPsQxE22PalHKQX/PHpOcLYLsNzUlUmuYFgGS5smk0M+tARp
b8FP7fKUP5IxUxwpcbS4yWPug5rO+MNAv2o0nW/XGuQj1e5aHvoE7a9OAYUzFM3y
QVECw/36Ubq5H2gaNzYS5SxV7ZmHbmr3vAXA+Y2qnDtthvYKkN55DXFX
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:03 2025 by rpki-client