Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39362e302f32342d3234203d3e203432333636.roa
File: 3139332e34322e39362e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: cj5BmgMAGiPTvH6sKXkGWoW/YKWLbK6QmvPOkmZ3LqY=
Subject key identifier: 90:8C:ED:78:C7:0A:FD:9B:88:EA:2B:AD:71:E2:0B:8E:83:ED:DD:A2
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4686847502BFA8B7DB294DECF35D50148204C365
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39362e302f32342d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:23:07 +0000
ROA not before: Mon 17 Apr 2023 11:18:07 +0000
ROA not after: Mon 15 Apr 2024 11:23:07 +0000
asID: 42366
IP address blocks: 193.42.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:86:84:75:02:bf:a8:b7:db:29:4d:ec:f3:5d:50:14:82:04:c3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:18:07 2023 GMT
Not After : Apr 15 11:23:07 2024 GMT
Subject: CN=908CED78C70AFD9B88EA2BAD71E20B8E83EDDDA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:38:a8:f6:35:65:a7:38:98:85:3c:a8:23:
fb:02:84:09:98:43:96:52:b3:7c:1b:9c:7f:df:b4:
66:24:7c:46:31:21:17:7b:92:0e:71:1b:1d:27:62:
8e:37:63:e4:fb:fb:fe:bd:e3:01:72:8e:8d:3b:d3:
90:b6:02:9b:5f:bd:33:16:0c:a8:f8:c9:18:2e:cd:
d8:13:d6:9b:71:ed:58:8f:e1:03:b3:85:08:f3:23:
52:76:7a:b9:39:8e:35:10:9e:43:32:34:ad:d0:3e:
7f:18:5d:d2:40:8e:e3:fd:c9:8d:31:45:64:8c:0a:
c5:13:2c:36:b0:dc:9c:be:d7:f6:d0:28:bc:45:74:
f0:35:36:8e:70:83:61:00:a5:54:5a:72:8c:e1:c9:
50:a2:f5:0f:12:53:11:10:51:ac:3f:3d:9a:b8:30:
37:7b:de:7a:4f:91:ee:a7:f0:22:e8:eb:7b:a4:5b:
c9:0c:bc:32:78:fa:3f:5e:59:59:51:96:70:cd:57:
1a:6f:db:20:33:f6:23:b0:06:f2:67:78:40:c9:b0:
fb:d5:51:5a:ab:39:86:24:0c:95:3f:2b:5c:4c:3c:
ba:75:ca:8a:9f:80:d3:04:0c:c8:17:1c:dd:a6:07:
c2:d5:dd:c6:6b:73:b2:47:c3:37:b9:67:fb:a5:3e:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:ED:78:C7:0A:FD:9B:88:EA:2B:AD:71:E2:0B:8E:83:ED:DD:A2
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39362e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8b:82:8f:fd:3e:3e:0a:8a:cd:ee:be:c1:75:8f:37:20:a2:
26:19:58:16:5d:2d:75:bb:77:e3:c6:db:fd:08:14:fb:48:21:
7f:6f:39:1c:53:82:4e:30:bb:9c:24:72:04:7b:ce:ff:b8:ec:
02:3d:0f:14:9b:97:d8:8c:b6:3a:48:7f:bc:ac:61:d6:79:26:
af:7c:50:0f:67:68:3b:d3:4b:76:88:73:5a:db:05:d9:c9:95:
ee:53:6c:7e:5f:3e:ab:59:e1:79:46:da:a0:74:88:58:01:88:
00:79:ac:09:38:21:7d:a2:d1:12:18:47:0c:4f:7a:29:28:37:
24:ab:b1:fc:a4:70:48:13:62:26:32:15:41:b1:57:21:23:fe:
cc:12:0a:71:a6:6c:72:dd:07:69:4e:32:d3:a2:27:41:d5:4a:
54:79:fc:ee:0f:4f:af:98:6f:37:c5:20:00:28:67:2c:4f:46:
d2:ea:1e:c1:e8:3c:7c:14:8b:7f:b1:47:4e:9d:9b:1f:9b:99:
fc:46:a5:0a:f7:4c:a6:80:27:5e:cb:7d:f9:05:8b:f5:69:03:
08:8a:5c:2b:1d:05:1e:52:0a:c3:7f:f7:8f:87:ed:fb:3e:47:
74:a1:eb:54:20:73:43:02:3e:07:be:8a:31:40:87:f1:40:96:
3f:60:a1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org