Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133342e3232342e302f32342d3234203d3e203432333636.roa
File: 34352e3133342e3232342e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: f0RNCSp9u4P7xPG5mUf1VX8lYd7XI4tJzIOfZP+kWXk=
Subject key identifier: 11:BF:36:5A:C0:B2:FC:5E:DE:CD:E9:C7:C1:DC:82:DD:09:36:BB:1C
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4915CB2607A082A8D25F42D83424A86C5AC4F635
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133342e3232342e302f32342d3234203d3e203432333636.roa
Signing time: Mon 17 Apr 2023 11:24:44 +0000
ROA not before: Mon 17 Apr 2023 11:19:44 +0000
ROA not after: Mon 15 Apr 2024 11:24:44 +0000
asID: 42366
IP address blocks: 45.134.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:15:cb:26:07:a0:82:a8:d2:5f:42:d8:34:24:a8:6c:5a:c4:f6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 17 11:19:44 2023 GMT
Not After : Apr 15 11:24:44 2024 GMT
Subject: CN=11BF365AC0B2FC5EDECDE9C7C1DC82DD0936BB1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:98:b5:a8:e9:82:75:06:ba:00:8d:15:19:
0c:88:ec:79:47:df:dd:88:4e:e8:f1:56:25:ff:7e:
57:1c:73:3f:ab:12:24:f7:56:62:63:91:0d:f3:11:
43:3d:03:9e:f2:e9:47:5b:00:aa:59:0d:46:c2:88:
74:2e:61:5f:f9:1b:74:c8:93:b8:66:48:82:2e:08:
e4:73:fc:b0:83:10:de:1e:c3:fc:ac:48:f7:73:e3:
d0:58:51:5e:a7:f5:2a:4a:12:bc:9d:a9:f9:65:37:
0c:ba:db:8a:82:f5:3d:6e:6e:3d:09:cd:4e:55:41:
cc:99:66:18:1a:60:cd:54:ac:fc:5e:94:6f:d6:17:
a9:4e:b5:62:97:26:e7:05:0e:dc:53:04:bf:4b:10:
dc:30:87:67:97:d7:99:f7:4b:17:e6:4b:2d:6a:e0:
49:96:28:51:8a:dd:bf:14:76:43:2d:46:f9:8b:4e:
59:4e:6d:2a:4e:4c:6c:3e:e6:12:0e:58:9c:7a:6c:
ca:9e:89:10:e7:bc:ad:71:12:a4:7a:ae:6d:eb:c6:
54:49:19:9a:e0:df:1a:ea:43:f2:5b:ec:a4:d9:e6:
02:cd:e2:e3:29:31:24:8d:33:96:9a:b4:a6:70:c2:
b8:18:c7:9e:d3:60:46:98:f2:18:ac:cf:86:64:af:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BF:36:5A:C0:B2:FC:5E:DE:CD:E9:C7:C1:DC:82:DD:09:36:BB:1C
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133342e3232342e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.224.0/24
Signature Algorithm: sha256WithRSAEncryption
36:16:4d:87:bf:8c:f4:34:29:27:10:eb:7b:8a:17:d3:b0:ef:
cf:2c:26:fd:24:cf:c6:0e:e7:b3:a6:16:17:9a:81:af:ca:08:
64:d4:1c:b5:23:16:7b:ce:a2:bc:fe:9a:a2:cb:a2:52:75:a2:
97:38:3e:8a:d4:8e:f3:92:ab:70:7a:ff:c6:b3:5b:91:4a:22:
23:4c:33:f7:b6:d5:f1:6e:bf:51:da:50:b3:2a:37:47:91:94:
e1:66:72:be:13:96:20:8e:1d:1a:f8:6f:de:40:d6:45:fe:10:
3b:be:45:ee:57:6f:c0:04:3e:6c:e2:68:34:91:5d:46:64:ae:
db:37:2f:16:6a:32:66:cb:1f:b6:66:4b:17:3b:83:ea:21:c2:
65:19:c4:79:aa:fb:25:c6:70:b8:e3:ac:1e:d5:7f:d3:4d:e5:
44:23:6e:f2:27:81:d0:c7:24:71:10:0b:8e:c0:cb:9e:17:c5:
cd:01:1c:9f:10:7e:0e:53:78:93:a9:04:7e:66:b2:c0:e7:92:
e6:9c:6d:c6:00:74:f0:de:78:a8:8a:ca:6e:f2:84:c9:91:35:
6a:76:15:fc:42:71:c9:da:b6:c7:47:f4:75:a0:ef:6a:b9:08:
27:7f:4e:3e:f1:d4:dd:7c:44:d1:98:18:98:e1:53:96:79:10:
27:26:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org