Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138372e302f32342d3234203d3e2033333536.roa
File: 34352e3134302e3138372e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: zNQo5ce6y6HoVesRcgRueBR/eVuDxb1ribkdWK6eVfY=
Subject key identifier: F7:B1:61:CD:BA:02:7A:77:C2:C0:36:A1:72:F7:B8:B3:DC:1E:B9:DD
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 6C319C04800DD26C41165902CCB2E60A4690860C
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138372e302f32342d3234203d3e2033333536.roa
Signing time: Mon 27 Mar 2023 08:27:59 +0000
ROA not before: Mon 27 Mar 2023 08:22:59 +0000
ROA not after: Mon 25 Mar 2024 08:27:59 +0000
asID: 3356
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:31:9c:04:80:0d:d2:6c:41:16:59:02:cc:b2:e6:0a:46:90:86:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:22:59 2023 GMT
Not After : Mar 25 08:27:59 2024 GMT
Subject: CN=F7B161CDBA027A77C2C036A172F7B8B3DC1EB9DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:52:e4:f5:07:1f:52:f2:51:af:52:15:ac:
81:5f:11:c0:12:da:58:84:a9:1d:49:91:c8:06:d0:
7c:fa:d2:18:55:07:13:66:04:8e:13:4f:79:75:17:
44:e5:78:81:4c:9c:38:37:cf:5b:c4:d4:95:e1:f7:
c0:1a:a7:6e:89:ca:0d:d3:23:e6:2f:be:e0:b4:c9:
e2:63:94:93:94:11:49:a3:50:83:86:b7:d8:18:52:
d1:4d:c4:9d:05:ae:32:b5:e9:e7:11:a7:83:7b:6e:
02:d7:98:ae:1c:7d:71:c8:cf:5a:1b:ce:fc:97:ab:
63:90:13:57:9a:eb:18:77:05:5c:12:9a:78:a9:95:
f7:12:2c:72:bc:5d:27:3a:30:37:9d:43:ad:1b:0a:
22:95:a6:91:85:d8:b1:df:88:c4:44:99:7f:b7:24:
af:cd:28:e0:ee:42:e6:28:15:4f:65:5a:62:ed:cb:
e1:ff:8c:51:fa:ce:69:dc:08:db:e3:33:03:8d:2b:
09:18:fa:3e:48:ae:ed:17:19:29:65:df:89:d7:7a:
e5:bb:f6:41:75:b2:81:8d:30:3f:33:00:74:1e:17:
0c:23:39:59:e0:11:59:93:69:bd:9c:59:f0:c1:69:
35:dc:07:73:e7:fb:a1:6f:a4:8e:f7:96:7a:da:63:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B1:61:CD:BA:02:7A:77:C2:C0:36:A1:72:F7:B8:B3:DC:1E:B9:DD
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138372e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
03:21:13:4f:c3:cb:4e:f3:76:da:ed:20:34:5d:c3:0d:6a:5f:
5b:6c:36:66:17:5e:d3:1a:20:04:97:99:98:dd:1a:82:c7:ff:
16:ab:1f:46:0c:b9:df:26:94:f7:77:9b:93:42:79:ed:a1:65:
dd:96:01:0c:87:aa:dc:39:7a:49:1c:b0:4f:fa:78:4d:b3:b9:
4a:bd:90:c9:20:fb:5e:a5:d0:3d:96:41:e3:9f:c7:17:c6:3e:
1f:9f:ff:b4:fd:b0:54:84:cd:43:7b:c6:92:78:98:31:5a:ea:
86:b2:67:b7:e9:b6:af:db:66:fb:12:63:40:6f:34:b0:18:64:
05:dc:91:7f:04:1b:8d:1f:fe:0a:c8:02:cd:ff:4f:85:26:e8:
c0:2d:6b:82:37:20:bc:84:4f:f5:aa:b7:4d:64:13:3d:55:5b:
b8:f6:6e:e3:60:f0:6c:f7:10:fc:a6:3e:e4:a5:7e:a2:04:3c:
02:32:ac:61:2f:74:16:52:03:a5:16:84:56:ce:0a:0d:24:df:
a1:31:71:9c:cd:8f:8f:7e:9f:f7:79:a3:5f:3d:35:2e:8f:39:
10:2b:15:de:51:f9:64:b5:cd:49:f2:db:6f:50:8e:df:b7:7a:
5e:3d:9b:d3:4a:4e:36:0c:e4:82:f0:c6:d9:35:77:e8:72:92:
20:8a:12:66
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbDGcBIAN0mxBFlkCzLLmCkaQhgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzAzMjcwODIyNTlaFw0yNDAzMjUwODI3NTlaMDMxMTAvBgNV
BAMTKEY3QjE2MUNEQkEwMjdBNzdDMkMwMzZBMTcyRjdCOEIzREMxRUI5REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PFLk9QcfUvJRr1IVrIFfEcAS
2liEqR1JkcgG0Hz60hhVBxNmBI4TT3l1F0TleIFMnDg3z1vE1JXh98Aap26Jyg3T
I+YvvuC0yeJjlJOUEUmjUIOGt9gYUtFNxJ0FrjK16ecRp4N7bgLXmK4cfXHIz1ob
zvyXq2OQE1ea6xh3BVwSmniplfcSLHK8XSc6MDedQ60bCiKVppGF2LHfiMREmX+3
JK/NKODuQuYoFU9lWmLty+H/jFH6zmncCNvjMwONKwkY+j5Iru0XGSll34nXeuW7
9kF1soGNMD8zAHQeFwwjOVngEVmTab2cWfDBaTXcB3Pn+6FvpI73lnraYwzrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU97FhzboCenfCwDahcve4s9weud0wHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzQzNTJlMzEzNDMwMmUzMTM4
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2M
uzANBgkqhkiG9w0BAQsFAAOCAQEAAyETT8PLTvN22u0gNF3DDWpfW2w2Zhde0xog
BJeZmN0agsf/FqsfRgy53yaU93ebk0J57aFl3ZYBDIeq3Dl6SRywT/p4TbO5Sr2Q
ySD7XqXQPZZB45/HF8Y+H5//tP2wVITNQ3vGkniYMVrqhrJnt+m2r9tm+xJjQG80
sBhkBdyRfwQbjR/+CsgCzf9PhSbowC1rgjcgvIRP9aq3TWQTPVVbuPZu42DwbPcQ
/KY+5KV+ogQ8AjKsYS90FlIDpRaEVs4KDSTfoTFxnM2Pj36f93mjXz01Lo85ECsV
3lH5ZLXNSfLbb1CO37d6Xj2b00pONgzkgvDG2TV36HKSIIoSZg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org