Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32322d3234203d3e2030.roa
File: 39322e3131392e38302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: Ed4/b56MwjdbcvCvaiYLS0GL3dwosWIwe2mx39BUcV8=
Subject key identifier: 23:EF:5D:3B:E9:FA:8D:E7:6D:0E:2B:31:AB:CE:7A:48:8F:A1:04:D2
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 47B2074F05CB8336FD11BEFCDE9AA4DD5DA0A964
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:59 +0000
ROA not before: Mon 27 Mar 2023 08:22:59 +0000
ROA not after: Mon 25 Mar 2024 08:27:59 +0000
asID: 0
IP address blocks: 92.119.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b2:07:4f:05:cb:83:36:fd:11:be:fc:de:9a:a4:dd:5d:a0:a9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:22:59 2023 GMT
Not After : Mar 25 08:27:59 2024 GMT
Subject: CN=23EF5D3BE9FA8DE76D0E2B31ABCE7A488FA104D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:a7:d4:4b:18:d1:89:06:3e:04:1e:c3:e2:
9b:9f:d9:0c:05:81:ec:53:23:13:b4:a0:b7:f2:8d:
91:c5:c3:4a:a4:f3:c7:08:bc:ff:d7:08:1f:e5:94:
cd:99:0e:12:40:f9:4a:c8:80:a3:6f:a6:26:c6:91:
0f:bf:70:0b:4e:c7:32:0f:d2:11:6f:d3:1b:e8:0c:
3a:d8:ab:d5:50:e8:a8:72:62:a0:5d:52:55:da:f4:
7b:e7:f0:38:4d:1b:e1:01:2a:5e:9d:2e:20:24:ef:
91:8a:bc:71:c7:73:cf:6d:f3:15:db:69:75:90:51:
38:29:4b:7e:8a:31:aa:5a:29:94:d8:46:cb:6a:e9:
47:c0:04:3d:18:86:4f:e3:22:63:fc:68:a7:ea:31:
3a:9c:ad:62:fa:f2:17:40:df:93:a6:64:58:da:4c:
2f:e7:f1:fa:88:1a:af:07:87:0c:e6:83:f2:b8:3c:
06:c9:5d:33:c8:41:d3:5d:a0:06:f4:f8:dd:82:6b:
0c:b6:95:93:36:e2:18:f0:c3:0b:1e:d2:6d:85:62:
ae:8f:aa:e2:b2:c4:8e:39:93:bc:9a:68:d2:d7:8d:
ed:9b:29:13:5b:3f:6c:57:99:1f:be:c5:a1:5e:5d:
d3:10:1b:5b:8c:c6:df:26:81:f9:ba:30:bb:10:76:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:5D:3B:E9:FA:8D:E7:6D:0E:2B:31:AB:CE:7A:48:8F:A1:04:D2
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3131392e38302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.80.0/22
Signature Algorithm: sha256WithRSAEncryption
72:5f:5e:13:43:26:d5:0d:86:55:e2:9d:2c:21:0d:9a:0b:53:
9b:cd:ba:79:de:66:7c:68:ca:08:dd:11:66:02:b2:42:8e:7b:
24:17:d8:37:49:96:65:56:d2:2d:1a:b5:e5:f7:53:12:35:dd:
e4:1b:74:63:54:44:4b:b2:20:b2:f5:d0:6a:6b:14:0d:04:c8:
91:cd:ac:62:7e:d3:5e:a8:34:5e:e5:61:80:b8:a5:fe:6c:03:
fb:ab:bb:76:23:79:51:82:5d:ac:a2:f5:c8:79:15:2d:d4:d4:
04:8d:70:da:89:0c:b8:bd:59:2c:18:01:3e:e2:52:33:21:f0:
b5:49:a9:30:a1:cc:2e:df:20:73:3c:23:e2:e9:ed:87:9b:bf:
b6:67:d3:67:c7:ac:2c:34:1b:73:2c:ec:f1:0d:d5:96:9c:ca:
85:7a:d1:c6:ec:5b:f2:16:62:32:4f:3f:df:a3:98:e8:1a:9f:
88:39:d7:2b:5e:eb:aa:97:d8:9f:34:8e:3d:c5:15:12:67:bb:
d9:83:c6:80:e2:93:16:af:61:c3:67:8f:aa:d2:ab:a9:e2:92:
2d:e3:78:ec:c2:ea:ed:05:c1:41:0c:8e:93:2a:83:24:ad:ec:
25:d6:25:dc:ef:8d:61:5f:03:53:f6:1f:d5:12:78:db:49:6d:
df:19:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org