Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa
File: 34352e3134302e3138362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: Qdjg7YgQFHmQGJQCH0FD5VA4OiebUE/+GeJbtSFnGXw=
Subject key identifier: 7B:1B:16:05:76:97:93:5C:79:56:7E:10:F8:0B:56:EE:34:1A:A5:A8
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 09BE3E0DA8EF5C7711D8436DF18B562784D7D79D
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:28:01 +0000
ROA not before: Mon 27 Mar 2023 08:23:01 +0000
ROA not after: Mon 25 Mar 2024 08:28:01 +0000
asID: 61317
IP address blocks: 45.140.186.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:be:3e:0d:a8:ef:5c:77:11:d8:43:6d:f1:8b:56:27:84:d7:d7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:01 2023 GMT
Not After : Mar 25 08:28:01 2024 GMT
Subject: CN=7B1B16057697935C79567E10F80B56EE341AA5A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:30:43:e7:5b:62:83:7f:43:27:cf:d1:7e:
65:66:39:94:33:7f:0e:3d:15:d5:3f:6e:1e:3a:01:
06:8b:17:8f:05:50:73:41:a8:d5:45:fd:82:d3:ac:
9a:4d:cc:d2:f1:fd:52:7b:f4:ee:1e:a6:05:b2:92:
5a:ff:ea:87:15:0b:73:6c:e4:30:e6:93:0a:00:9f:
25:21:36:91:33:58:aa:67:a9:27:c2:f0:2d:23:b3:
48:2e:72:49:c7:4a:ad:97:74:16:6b:3f:ca:6a:ff:
1f:c1:5e:04:47:34:ca:80:49:dc:a4:bc:8a:4a:30:
ee:f5:1a:19:15:1a:d8:60:4c:7c:59:9c:e1:c0:4e:
55:19:77:5f:e3:51:99:b3:66:5b:2c:b6:8b:6a:17:
71:88:2c:53:8a:82:69:7e:23:a0:c3:cf:57:3f:0b:
e1:33:a7:bb:86:ca:66:53:20:4f:09:2b:f1:6d:06:
b8:4f:70:45:6e:44:a9:18:62:df:a6:a5:f0:8f:a5:
76:4b:fd:de:00:79:4a:39:b5:83:c0:bc:97:59:e7:
31:d4:6d:91:c0:e2:a6:ae:5e:f8:b0:b2:f8:11:d0:
dc:0a:aa:b9:2b:ec:07:18:91:7d:34:35:bb:ce:2c:
08:57:3a:e9:23:78:fd:b3:73:c6:c4:36:cb:0d:22:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1B:16:05:76:97:93:5C:79:56:7E:10:F8:0B:56:EE:34:1A:A5:A8
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.186.0/23
Signature Algorithm: sha256WithRSAEncryption
72:60:19:50:8a:b5:10:07:ec:4e:9b:71:46:c7:21:23:64:aa:
68:d8:1c:20:4b:2b:fe:e8:c2:e5:3f:6e:db:de:4a:d3:5c:86:
48:9f:2d:fa:ff:cb:39:e6:b8:86:7e:48:3f:6f:c8:55:5b:fd:
e2:60:69:d4:a3:66:94:de:8e:b0:b4:ae:37:df:f8:e9:88:67:
56:b8:e3:a2:2a:d3:d7:9d:12:8a:74:86:d3:45:44:72:dc:41:
9d:48:cd:4c:17:0b:b1:b0:27:c0:4e:a5:74:2d:a0:3c:25:02:
f5:e6:7f:76:fd:44:f0:2c:78:4a:42:9b:f9:3c:cb:f6:92:8f:
f8:0f:6c:1d:2b:6d:24:98:7d:7a:c1:f3:6f:e9:32:45:5f:53:
0f:74:18:6a:99:db:59:bb:02:df:0a:6b:7a:7a:9a:f4:75:54:
4c:a5:d3:dd:00:47:99:d3:45:5a:ad:08:92:cb:8f:21:be:27:
7a:09:19:e7:df:09:0c:99:c6:e5:dc:43:01:b0:3a:82:8b:81:
c6:a8:fe:4d:1a:88:6d:66:17:8e:04:f6:f6:53:06:a1:60:70:
fe:69:aa:12:e1:bb:2b:f0:81:6b:6a:06:41:2e:d7:48:08:42:
32:6c:ff:13:7a:27:8d:3c:b1:16:10:b5:08:e9:07:c4:84:44:
b4:76:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org