Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3138392e32342e302f32342d3234203d3e2030.roa
File: 3138352e3138392e32342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: PXa8KPKhQkhbTEGTCrvgpJSltQUzaoPFhixYMTRinH8=
Subject key identifier: 20:C6:AD:01:06:3B:7D:4D:43:C6:63:71:A0:87:A7:AC:13:DB:B1:9C
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 7EE93B282FB3B75C5D5EC4E51593DF33028BCBBD
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3138392e32342e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:43 +0000
ROA not before: Mon 27 Mar 2023 08:22:43 +0000
ROA not after: Mon 25 Mar 2024 08:27:43 +0000
asID: 0
IP address blocks: 185.189.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e9:3b:28:2f:b3:b7:5c:5d:5e:c4:e5:15:93:df:33:02:8b:cb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Mar 27 08:22:43 2023 GMT
Not After : Mar 25 08:27:43 2024 GMT
Subject: CN=20C6AD01063B7D4D43C66371A087A7AC13DBB19C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:af:f1:e2:8f:7d:d3:22:a8:1c:a7:81:0c:36:
ea:19:1a:b3:d7:4b:2a:0a:61:36:00:4b:3f:86:e5:
d1:9b:4a:b2:aa:88:4e:27:d5:78:13:f1:86:66:f9:
a2:bb:1c:fd:63:32:b8:92:df:ba:5d:ec:5f:58:a0:
a7:05:9a:47:1c:87:bb:2e:92:27:8f:db:8e:65:48:
d4:4d:f2:4b:6d:cd:1f:60:e5:7b:c8:15:bd:7f:ba:
f2:84:d4:08:6f:6a:56:be:7f:a7:fb:67:66:ab:15:
21:3f:93:cd:75:5d:7d:25:2a:dd:2e:47:8a:5a:f5:
fa:db:f8:a7:3b:43:01:cd:8a:d3:b7:5e:a6:3d:c7:
3c:91:69:36:d2:e2:b0:fb:c3:5d:ea:36:c2:5a:45:
85:96:57:4b:ad:6f:29:75:b4:2b:12:aa:85:7f:41:
b2:2e:73:ce:b3:d3:b8:40:82:a4:dc:05:08:34:4d:
20:ed:67:b4:6e:ec:f2:0e:22:bc:bf:ef:4c:d6:2b:
5d:59:c8:c0:ed:fc:01:05:b3:2f:53:c3:47:78:78:
87:9e:b1:15:dd:f1:1c:90:07:4b:f6:ed:3b:27:b4:
0d:2e:9e:e3:5e:6e:7b:09:03:00:a4:9b:e7:ff:8a:
ab:2b:bd:a9:cc:cc:8e:52:2a:cc:b6:40:79:da:a9:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C6:AD:01:06:3B:7D:4D:43:C6:63:71:A0:87:A7:AC:13:DB:B1:9C
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3138392e32342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.24.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3d:98:7f:ff:20:b6:86:06:18:02:64:8c:f4:4d:f3:b0:61:
07:a6:5e:48:2f:b1:87:8a:65:43:80:df:38:10:79:dc:1c:1e:
f6:48:36:79:52:51:5e:f9:a7:9b:cc:5e:e1:7c:b2:7e:d2:62:
08:02:5e:67:9b:0c:5b:2d:d0:6f:14:72:91:5a:f3:a5:d6:ec:
f5:63:c1:ea:65:d4:c9:1f:e5:93:a2:f5:97:20:88:b0:2a:08:
74:6f:ce:ca:98:9a:a8:22:54:0e:26:3a:f3:14:1a:43:4d:76:
80:70:25:1b:65:ea:0e:a5:43:69:c2:37:59:a0:52:cb:3c:3a:
d5:4c:62:c4:51:83:eb:7c:7b:2e:23:70:c2:d9:5c:db:48:e6:
63:68:ed:ac:ed:6f:60:73:fd:cd:bd:06:50:65:f8:71:0d:1e:
17:7d:dd:a0:b9:db:fa:67:7d:63:2b:91:88:c7:88:44:3d:0d:
8c:ab:a3:4f:3c:99:75:55:80:fc:09:fd:70:8b:c2:03:08:59:
f2:58:db:19:94:27:65:e6:78:2d:96:71:75:c5:01:7f:0a:79:
f1:6b:a6:44:7a:aa:4d:48:cb:14:cc:85:86:74:75:8f:3a:30:
f4:35:de:ab:22:02:39:0b:8b:02:27:e7:1f:97:21:e7:e8:ce:
4e:4d:0c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org