Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138372e302f32342d3234203d3e203133323133.roa
File: 34352e3134302e3138372e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier: QUHOhq2ymcbMq724TEciRAptUbx9uFsvIjdV0tu4TzQ=
Subject key identifier: D8:71:20:52:55:8D:77:88:A6:D9:92:84:1E:21:D0:BA:34:E9:EF:FF
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4FAA33A0CD14CF414CD8E5326DC204E5CB398135
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138372e302f32342d3234203d3e203133323133.roa
Signing time: Mon 27 Mar 2023 08:28:11 +0000
ROA not before: Mon 27 Mar 2023 08:23:11 +0000
ROA not after: Mon 25 Mar 2024 08:28:11 +0000
asID: 13213
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:aa:33:a0:cd:14:cf:41:4c:d8:e5:32:6d:c2:04:e5:cb:39:81:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:11 2023 GMT
Not After : Mar 25 08:28:11 2024 GMT
Subject: CN=D8712052558D7788A6D992841E21D0BA34E9EFFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:d4:60:a4:d7:eb:38:57:12:16:08:3b:8a:
20:d6:44:dd:a2:19:89:58:90:19:f7:b1:f7:d0:17:
84:29:50:aa:98:d7:7a:c2:2c:34:cc:b3:80:5e:a2:
1b:05:6b:e5:de:01:b0:a6:95:88:7e:a7:32:3c:41:
65:01:35:81:d6:75:40:cf:46:c8:67:43:ff:30:5f:
0e:1a:14:cd:52:20:68:8a:3f:45:f0:d7:99:b5:3c:
fa:17:b3:69:c2:6f:71:85:54:a4:8d:17:0b:41:7e:
3e:a5:eb:b1:11:7e:ce:6f:24:50:41:56:d1:36:ac:
5c:70:0d:c6:42:2e:21:8c:db:3f:84:70:fd:b3:55:
13:85:a4:09:9e:64:1a:14:26:86:d9:32:e4:72:2c:
8d:9e:4b:c5:31:62:14:00:90:37:71:01:a9:2f:e8:
48:92:de:3a:95:e8:51:6c:31:0c:58:bb:a6:99:5b:
09:f7:87:aa:ea:03:45:63:67:5d:e6:03:1c:33:06:
d9:dc:b1:0d:4c:10:6e:b5:a8:c0:db:c7:56:1b:ef:
4c:c2:d9:70:f4:ab:e0:19:c3:d4:70:8e:05:56:a1:
c7:25:c9:e9:cc:e4:5d:2d:c0:c4:06:e7:2c:4b:18:
1e:c2:6a:84:a5:ea:33:ae:50:d1:b2:a0:60:2e:e2:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:71:20:52:55:8D:77:88:A6:D9:92:84:1E:21:D0:BA:34:E9:EF:FF
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138372e302f32342d3234203d3e203133323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
57:03:12:93:1d:1f:c5:3f:44:3a:68:0d:49:e5:ef:8c:c3:a1:
f3:37:81:0b:a2:df:92:5e:34:d2:db:92:93:71:bd:19:8f:4d:
9c:d7:9c:79:b2:ed:72:dc:03:39:ac:a0:14:6f:9b:ef:67:f2:
47:fa:85:15:b7:13:ce:95:a7:c9:6d:7a:62:e7:2a:4b:95:6c:
ff:3a:69:35:01:d8:9b:0e:57:6f:3c:a9:7c:3d:e9:7a:39:c1:
ce:96:34:36:c6:12:69:50:37:8d:08:c9:7f:a2:7c:4e:61:6b:
0d:4a:3f:88:50:ac:5e:44:06:23:10:da:22:6f:3c:80:17:e6:
87:a6:88:9e:7e:84:14:91:86:eb:44:a1:f8:18:70:78:1c:2c:
8a:f3:d2:bc:99:d0:fa:91:15:1e:6e:2f:75:fb:7f:ca:d7:39:
4b:70:b8:bb:f4:45:17:56:7b:38:c4:a5:aa:87:f7:fb:53:ae:
99:13:82:8a:99:8f:57:14:85:dd:4b:7e:0c:e6:e5:50:9e:b5:
2d:a4:36:d6:e0:a4:17:00:f2:3e:26:a7:e6:cb:00:87:39:2f:
c8:69:49:84:14:49:3f:ec:dc:d5:28:6a:10:1e:75:25:ea:b9:
cc:71:6a:cb:c8:ba:d9:77:82:91:15:b1:f8:95:e5:68:b8:84:
13:5e:99:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org