Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39362e302f32342d3234203d3e2030.roa
File: 3139332e34322e39362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: LGaI+mddTA2esT7QM+LHvVP/kbdekl2fSCbtU/U9cQk=
Subject key identifier: 6C:09:9F:24:AB:A7:D4:62:F9:88:9B:EB:7C:95:01:70:64:A2:97:9D
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 327A71B1D410B8B071997312D14295B9AB7354B9
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39362e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:13 +0000
ROA not before: Mon 27 Mar 2023 08:23:13 +0000
ROA not after: Mon 25 Mar 2024 08:28:13 +0000
asID: 0
IP address blocks: 193.42.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7a:71:b1:d4:10:b8:b0:71:99:73:12:d1:42:95:b9:ab:73:54:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:13 2023 GMT
Not After : Mar 25 08:28:13 2024 GMT
Subject: CN=6C099F24ABA7D462F9889BEB7C95017064A2979D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:82:9c:9b:f9:e8:97:22:6e:4c:14:d7:e7:
82:ce:8a:48:9b:36:5b:c8:8d:24:61:27:32:cf:20:
e1:22:da:a7:98:d5:cb:4e:f2:d8:4d:d2:8e:46:00:
75:1d:21:c4:cc:8d:16:ee:31:f2:49:91:59:21:12:
73:7c:5b:6b:72:70:97:4b:56:96:cd:4a:e3:5f:65:
26:a0:4b:50:6c:07:e6:a6:0e:34:4c:6a:28:cd:52:
db:d0:8d:c1:f4:b4:77:ab:e2:6a:2b:68:9a:41:70:
77:ff:ac:d2:95:38:c7:fb:fe:56:c9:67:ae:3b:4d:
a3:7b:6e:ac:a7:d3:5a:06:d7:ca:0b:8e:69:ed:49:
9e:84:0a:fb:17:5a:a7:11:ca:7f:16:fa:6d:d3:a4:
3a:f8:1a:4a:e2:d3:d1:b7:2b:a4:2c:67:a9:e9:ec:
65:e4:6a:00:d1:be:01:cc:a0:64:92:05:d5:1b:c4:
6b:7b:a8:07:d3:4b:04:58:c9:25:c3:d6:b2:59:dc:
ee:a8:59:b9:78:4e:b2:f3:ec:4d:68:fb:5b:34:10:
92:50:ed:c0:0f:db:3a:4b:4a:5e:3c:a4:e6:db:dc:
3d:a7:da:47:22:2a:34:71:40:fa:19:d8:96:b5:f2:
a7:5d:e1:35:31:62:05:54:3f:f4:fc:db:90:44:48:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:09:9F:24:AB:A7:D4:62:F9:88:9B:EB:7C:95:01:70:64:A2:97:9D
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.96.0/24
Signature Algorithm: sha256WithRSAEncryption
49:dd:42:d9:8a:1e:cc:f7:03:8b:2f:f4:ea:36:d4:de:12:db:
08:8d:ba:0e:53:2f:73:d1:35:dc:9d:5e:ef:cd:bd:65:76:d7:
60:9e:6a:95:56:13:59:c1:7c:d8:3d:45:9f:fd:01:25:03:f7:
e9:32:db:6d:2f:b0:4a:36:9e:6e:dd:97:19:45:f5:e8:b9:5c:
c8:3d:e9:27:aa:ca:d3:8b:e3:ca:0b:21:17:a8:f8:e2:8d:2d:
37:88:32:f0:97:68:96:18:5e:66:d4:45:d3:51:b1:94:7f:a8:
f3:10:0f:3c:05:fb:3f:bf:55:32:5e:7f:1d:1f:a4:31:d9:e8:
55:d9:1a:a3:de:e1:c0:8c:4d:ca:2b:77:c6:5c:ba:0e:e9:6f:
b4:d7:f4:32:f4:38:ac:db:c0:ca:c5:53:8e:ef:15:87:86:6f:
7d:23:6c:cc:f4:c7:98:1c:cd:85:64:b5:8b:11:8f:cd:88:4a:
c6:26:5a:95:6e:37:35:48:ea:f7:b9:1f:19:05:c7:7c:e3:98:
fa:19:d7:03:9a:a9:ee:d1:69:d5:62:1b:a5:c2:ed:46:c8:89:
31:dd:b0:94:e3:ff:b5:4f:5f:25:4f:c8:9e:d1:78:0a:8e:a5:
06:cc:e8:e4:cb:f1:32:7e:09:42:54:00:52:41:60:60:cb:39:
c9:fa:1c:f8
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUMnpxsdQQuLBxmXMS0UKVuatzVLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzAzMjcwODIzMTNaFw0yNDAzMjUwODI4MTNaMDMxMTAvBgNV
BAMTKDZDMDk5RjI0QUJBN0Q0NjJGOTg4OUJFQjdDOTUwMTcwNjRBMjk3OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwYKcm/nolyJuTBTX54LOikib
NlvIjSRhJzLPIOEi2qeY1ctO8thN0o5GAHUdIcTMjRbuMfJJkVkhEnN8W2tycJdL
VpbNSuNfZSagS1BsB+amDjRMaijNUtvQjcH0tHer4moraJpBcHf/rNKVOMf7/lbJ
Z647TaN7bqyn01oG18oLjmntSZ6ECvsXWqcRyn8W+m3TpDr4Gkri09G3K6QsZ6np
7GXkagDRvgHMoGSSBdUbxGt7qAfTSwRYySXD1rJZ3O6oWbl4TrLz7E1o+1s0EJJQ
7cAP2zpLSl48pObb3D2n2kciKjRxQPoZ2Ja18qdd4TUxYgVUP/T825BESIPfAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUbAmfJKun1GL5iJvrfJUBcGSil50wHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzEzOTMzMmUzNDMyMmUzOTM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBKmAwDQYJKoZI
hvcNAQELBQADggEBAEndQtmKHsz3A4sv9Oo21N4S2wiNug5TL3PRNdydXu/NvWV2
12CeapVWE1nBfNg9RZ/9ASUD9+ky220vsEo2nm7dlxlF9ei5XMg96SeqytOL48oL
IReo+OKNLTeIMvCXaJYYXmbURdNRsZR/qPMQDzwF+z+/VTJefx0fpDHZ6FXZGqPe
4cCMTcord8Zcug7pb7TX9DL0OKzbwMrFU47vFYeGb30jbMz0x5gczYVktYsRj82I
SsYmWpVuNzVI6ve5HxkFx3zjmPoZ1wOaqe7RadViG6XC7UbIiTHdsJTj/7VPXyVP
yJ7ReAqOpQbM6OTL8TJ+CUJUAFJBYGDLOcn6HPg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org