Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31342e302f32342d3234203d3e2030.roa
File: 3139342e33352e31342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: jgi+BDYwCtlkYnorNJDXwuckWU+tJvaHHz2c/J3RNs8=
Subject key identifier: A7:EB:A6:40:E0:CB:DD:53:DC:CB:93:32:01:2A:6E:06:D1:1D:75:C3
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 576FFA4433BC6DCBC3EB533AA0DCC99D081F7428
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31342e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:08 +0000
ROA not before: Mon 27 Mar 2023 08:23:08 +0000
ROA not after: Mon 25 Mar 2024 08:28:08 +0000
asID: 0
IP address blocks: 194.35.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6f:fa:44:33:bc:6d:cb:c3:eb:53:3a:a0:dc:c9:9d:08:1f:74:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:08 2023 GMT
Not After : Mar 25 08:28:08 2024 GMT
Subject: CN=A7EBA640E0CBDD53DCCB9332012A6E06D11D75C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:6d:42:be:25:bf:13:89:e5:29:c1:58:a4:
a9:82:33:b1:6f:bf:82:87:ea:ac:c9:15:79:37:cf:
f2:95:d9:3d:89:c6:d1:81:a6:21:aa:0d:92:1e:82:
0a:e5:fb:27:0d:b6:1d:27:74:48:6e:6b:7b:b4:25:
a2:e2:ba:79:a4:9a:3c:96:26:3a:3f:9e:df:90:f1:
f2:60:85:94:54:08:ce:1b:e3:34:3f:d8:33:ec:e2:
51:2d:99:40:a5:42:42:9e:6b:19:34:bb:ef:e6:bd:
5a:b9:5d:92:83:5d:86:62:20:f3:17:12:0e:b7:a1:
48:5c:02:47:76:f3:fb:4d:a9:97:23:aa:ce:53:03:
2b:42:ef:db:bb:55:a2:5f:b5:9f:fd:6e:82:cf:a5:
a3:ab:29:a7:b3:d6:6e:cd:64:3c:38:df:58:c3:4f:
0e:0e:a9:f3:d0:d8:2c:97:38:46:b3:45:1b:3d:92:
62:80:2f:b5:97:90:09:10:02:da:63:54:36:a6:b6:
af:9b:c1:f2:ae:12:ec:da:20:06:db:b5:d4:b9:1e:
72:01:93:bb:17:3e:d3:4b:56:73:7b:41:6c:fe:bc:
17:59:1b:04:af:03:54:9f:49:aa:1c:a1:cf:1e:ce:
a6:ac:8a:e0:f7:5a:83:9f:01:d2:17:f1:e4:aa:62:
2c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EB:A6:40:E0:CB:DD:53:DC:CB:93:32:01:2A:6E:06:D1:1D:75:C3
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.14.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3f:da:3b:44:c3:27:d8:11:6c:e9:23:87:f7:ca:68:0a:45:
b1:b9:c7:a6:e4:73:e8:2a:a1:b0:b2:1d:d8:13:47:40:b1:62:
78:14:de:8e:36:da:87:ec:2b:9b:68:ab:cd:4c:9f:bf:12:92:
b5:af:9c:5f:56:e5:f3:bd:3f:76:96:22:10:e0:3b:f1:cd:7a:
af:32:d6:6f:cc:7e:58:18:97:94:34:ba:b1:ab:03:26:c7:85:
14:d1:63:66:07:ee:83:6d:d9:96:98:e9:ad:94:68:8b:8b:0e:
d2:86:59:40:7d:2d:1c:d3:2d:5c:7e:c6:a6:bb:9d:42:64:4b:
b2:7b:ad:f1:7d:73:9e:8a:f0:8e:6f:cc:d0:48:8e:35:ed:4f:
64:80:0c:fa:88:bf:95:74:26:6f:48:eb:88:86:05:9b:92:ee:
23:04:a4:ec:c2:d1:90:ee:1d:66:5d:43:04:4e:d5:ce:8f:91:
50:b5:2e:fe:82:1c:a0:64:ba:42:d3:3d:d3:af:8b:30:46:c8:
bd:7d:b9:8d:a9:8d:de:33:b9:fc:d6:38:f9:97:b5:41:1f:07:
c1:4f:c0:83:7d:22:98:27:ad:d6:d1:17:3e:88:bc:7f:e3:72:
e9:59:da:ab:2f:1a:db:fd:43:30:37:ec:b9:78:97:a6:ef:1a:
af:da:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org