Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36372e302f32342d3234203d3e2030.roa
File: 39312e3231342e36372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: q2Vfw9UX01UzYMlIOYIKcCNjNor0vfi+M4qaZVNQ4qU=
Subject key identifier: E0:D6:72:D8:24:6D:B5:68:9B:F1:5A:86:D1:E7:9A:EE:98:B2:D2:1E
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 74D010A98C063600ABD3D41FA940E858A54DAFF6
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36372e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:10 +0000
ROA not before: Mon 27 Mar 2023 08:23:10 +0000
ROA not after: Mon 25 Mar 2024 08:28:10 +0000
asID: 0
IP address blocks: 91.214.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d0:10:a9:8c:06:36:00:ab:d3:d4:1f:a9:40:e8:58:a5:4d:af:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:10 2023 GMT
Not After : Mar 25 08:28:10 2024 GMT
Subject: CN=E0D672D8246DB5689BF15A86D1E79AEE98B2D21E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a9:93:ad:0d:ee:37:0e:a1:d8:a5:6c:44:15:
6a:df:e6:96:5d:9c:3d:5a:84:1d:c5:85:0f:6d:c9:
72:2e:80:b5:e5:f7:59:84:b8:8c:59:52:2d:e1:51:
7e:35:68:7f:fc:1b:d2:48:01:54:ac:24:59:e5:48:
e7:bb:78:d2:79:82:56:9a:20:3a:8a:bc:8c:0e:f2:
88:8e:05:2d:30:66:ed:7a:2a:1b:3e:26:02:37:8b:
3f:cb:8d:ad:46:d7:7e:38:2c:62:8a:1b:7b:5e:e5:
3b:2e:88:09:52:44:d8:24:84:42:14:0b:ba:a0:c3:
1f:c4:67:e1:cc:09:8e:cc:91:88:63:5e:16:0c:5d:
e5:e8:97:64:6c:53:f6:4c:d7:ae:6a:9e:7b:48:a0:
ba:a1:19:08:76:62:c6:9e:cd:36:80:b9:4e:0d:5d:
88:27:46:f5:a7:b9:89:90:4b:43:5b:0b:91:65:cf:
f2:b8:db:82:fe:e9:0c:ef:97:c1:57:86:f8:e7:27:
bc:e5:29:f1:e3:20:a4:d7:10:83:81:d0:d2:aa:4e:
0b:61:56:76:8c:a6:2f:c0:b6:0b:cd:89:af:9a:57:
f1:21:57:b1:6c:a0:22:89:58:6a:b2:34:48:06:01:
c3:a8:02:94:06:36:5e:9a:96:48:fb:4c:56:3a:ca:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:72:D8:24:6D:B5:68:9B:F1:5A:86:D1:E7:9A:EE:98:B2:D2:1E
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fd:7d:1b:34:ca:b8:bf:81:cd:82:be:f2:0f:01:3d:de:23:
90:e6:c6:95:37:2c:08:76:a1:c8:d4:c4:c3:db:18:c5:62:0b:
39:93:73:f7:8d:d7:4f:f6:69:c0:6f:1e:2f:bf:71:f8:74:f2:
95:8b:11:63:ca:a5:e8:cf:a5:92:f4:3f:78:bb:3b:a6:59:c4:
d4:d8:63:55:70:d0:39:b0:39:d1:1f:e1:c5:0f:0e:ea:14:73:
6f:cb:a0:48:55:2a:b2:84:ef:50:a2:31:4a:60:73:72:ae:bb:
56:12:40:49:ba:5c:65:93:56:08:3f:51:a1:6f:7e:85:3f:19:
74:67:9e:01:b2:cc:01:25:58:ff:1e:7f:11:46:6b:d8:e5:4f:
71:cb:ae:fd:a3:a1:8f:ef:31:3e:20:7b:49:4d:dc:fc:bb:c4:
e8:11:ad:24:c4:e4:04:73:27:4c:df:86:9c:c6:1d:64:0d:94:
8d:31:1b:a6:0a:6c:ae:02:01:89:c8:e0:8d:ca:7e:90:3a:67:
63:cc:82:1c:13:e2:48:7b:df:e9:9b:e9:8d:b1:b3:26:0e:d3:
9a:3b:df:bc:1b:c1:15:06:c3:04:14:70:a6:8a:64:71:b8:21:
86:7d:20:b3:9b:55:b0:51:54:cf:df:3f:08:a9:a2:f5:6d:ba:
e5:c0:5d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org