Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37372e302f32342d3234203d3e2030.roa
File: 352e3130342e37372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: DElmyIlbn2nnPIavpnl5ppMtg9s7IRiXeXAfwXh0Xzs=
Subject key identifier: 96:31:BC:41:58:1D:9E:90:DF:D3:6D:E4:DF:54:CB:36:F1:7F:FF:1B
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4F178D619096D0B148ED325712EB78AE3B97C503
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37372e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:17 +0000
ROA not before: Mon 27 Mar 2023 08:23:17 +0000
ROA not after: Mon 25 Mar 2024 08:28:17 +0000
asID: 0
IP address blocks: 5.104.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:17:8d:61:90:96:d0:b1:48:ed:32:57:12:eb:78:ae:3b:97:c5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:17 2023 GMT
Not After : Mar 25 08:28:17 2024 GMT
Subject: CN=9631BC41581D9E90DFD36DE4DF54CB36F17FFF1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:4b:04:51:c5:4f:ae:f0:8c:f7:5a:d6:3d:
75:5a:78:55:f2:70:3e:b2:6d:a9:18:1c:fc:9f:19:
98:4a:17:c6:3b:ac:02:fb:56:e3:0e:a8:eb:66:68:
00:05:b7:ae:e3:73:60:54:ad:98:64:f7:7a:90:5a:
df:1a:bc:75:98:e4:c6:55:14:cd:c1:80:89:fe:b0:
eb:b4:bd:58:35:31:15:0c:3a:f8:78:7f:84:58:f7:
c7:45:e5:61:1c:c0:e7:01:cd:92:98:6c:ca:e6:bd:
f8:f7:9c:ed:a4:00:56:8b:61:6f:82:34:8f:63:90:
bf:5b:36:b7:7c:e5:eb:d9:98:72:0d:98:c0:3c:2a:
1c:25:3b:e3:18:27:4e:45:dd:bd:f9:34:27:e5:f4:
2e:9c:71:6b:09:87:45:9b:25:b2:2b:7e:de:f7:f4:
4a:6c:77:67:57:2e:6d:d6:ff:70:9c:b1:71:eb:81:
1e:74:bb:5c:c9:05:98:71:bd:66:f7:3e:65:7e:81:
6d:ac:d0:5b:11:c5:c7:16:49:b0:69:06:f0:f2:c8:
c0:b0:84:86:ab:73:24:8e:13:16:73:84:76:6d:08:
ce:7f:a8:ed:29:9c:90:bf:30:a1:71:de:8f:90:c3:
a9:04:02:f0:ca:5e:69:2e:21:9e:b7:c5:dc:98:01:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:BC:41:58:1D:9E:90:DF:D3:6D:E4:DF:54:CB:36:F1:7F:FF:1B
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/352e3130342e37372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.77.0/24
Signature Algorithm: sha256WithRSAEncryption
49:37:e8:ff:d7:2a:da:77:39:99:a2:ed:d2:f2:13:8b:9a:51:
f6:84:48:8e:bd:09:aa:df:e8:e4:39:2d:9c:20:cc:90:92:1f:
ac:f0:85:54:b1:e9:81:16:68:d6:f9:3a:d5:cb:19:e5:e1:de:
5c:d9:f5:2c:1a:58:a5:93:45:60:fb:4f:5b:75:88:4c:6c:d7:
b0:79:58:ff:81:84:57:60:e5:91:bf:f3:3f:4d:43:85:4a:9e:
68:74:51:0d:95:29:e2:7c:f4:a9:bd:52:82:35:e9:c7:a7:31:
d1:cd:ce:79:3a:3b:f8:67:12:a5:45:ff:9e:e8:4f:b8:b8:59:
a5:81:55:2c:6f:77:d5:02:91:2c:f7:91:46:cc:41:23:69:d6:
6c:ba:43:1e:d6:0e:66:5c:73:46:99:66:d5:2a:af:bc:82:46:
74:f0:aa:38:5c:81:1d:78:2a:fb:51:86:dc:b1:a9:00:a9:05:
2d:c6:7f:aa:64:06:27:b6:59:bf:12:9f:49:53:ac:47:cf:79:
91:e2:c0:9a:98:a4:df:40:2f:b8:0c:f2:d5:ad:a2:5c:aa:8f:
bf:61:be:51:d6:82:b3:85:a7:75:a8:a9:5b:aa:6f:8b:be:05:
93:9a:a4:b1:3e:89:eb:ae:2e:21:99:89:7e:7c:7d:ca:4a:bc:
81:46:eb:20
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUTxeNYZCW0LFI7TJXEut4rjuXxQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzAzMjcwODIzMTdaFw0yNDAzMjUwODI4MTdaMDMxMTAvBgNV
BAMTKDk2MzFCQzQxNTgxRDlFOTBERkQzNkRFNERGNTRDQjM2RjE3RkZGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbSUsEUcVPrvCM91rWPXVaeFXy
cD6ybakYHPyfGZhKF8Y7rAL7VuMOqOtmaAAFt67jc2BUrZhk93qQWt8avHWY5MZV
FM3BgIn+sOu0vVg1MRUMOvh4f4RY98dF5WEcwOcBzZKYbMrmvfj3nO2kAFaLYW+C
NI9jkL9bNrd85evZmHINmMA8KhwlO+MYJ05F3b35NCfl9C6ccWsJh0WbJbIrft73
9Epsd2dXLm3W/3CcsXHrgR50u1zJBZhxvWb3PmV+gW2s0FsRxccWSbBpBvDyyMCw
hIarcySOExZzhHZtCM5/qO0pnJC/MKFx3o+Qw6kEAvDKXmkuIZ63xdyYAZavAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUljG8QVgdnpDf023k31TLNvF//xswHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzUyZTMxMzAzNDJlMzczNzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWhNMA0GCSqGSIb3
DQEBCwUAA4IBAQBJN+j/1yradzmZou3S8hOLmlH2hEiOvQmq3+jkOS2cIMyQkh+s
8IVUsemBFmjW+TrVyxnl4d5c2fUsGlilk0Vg+09bdYhMbNeweVj/gYRXYOWRv/M/
TUOFSp5odFENlSnifPSpvVKCNenHpzHRzc55Ojv4ZxKlRf+e6E+4uFmlgVUsb3fV
ApEs95FGzEEjadZsukMe1g5mXHNGmWbVKq+8gkZ08Ko4XIEdeCr7UYbcsakAqQUt
xn+qZAYntlm/Ep9JU6xHz3mR4sCamKTfQC+4DPLVraJcqo+/Yb5R1oKzhad1qKlb
qm+LvgWTmqSxPonrri4hmYl+fH3KSryBRusg
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org