Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3230352e31322e302f32332d3234203d3e2030.roa
File: 3138352e3230352e31322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: ZM74t6NpNxU7fPcu9k2xriEinKgWbo1A3HkSZc/TmVU=
Subject key identifier: 48:85:AA:FB:67:BC:A6:D6:69:DE:B4:80:2E:C3:C5:A2:40:4A:30:7A
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 77ED840DC6FE5AD2E011DF2CE77A0BF5BF6D09C3
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3230352e31322e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:41 +0000
ROA not before: Mon 27 Mar 2023 08:22:41 +0000
ROA not after: Mon 25 Mar 2024 08:27:41 +0000
asID: 0
IP address blocks: 185.205.12.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ed:84:0d:c6:fe:5a:d2:e0:11:df:2c:e7:7a:0b:f5:bf:6d:09:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Mar 27 08:22:41 2023 GMT
Not After : Mar 25 08:27:41 2024 GMT
Subject: CN=4885AAFB67BCA6D669DEB4802EC3C5A2404A307A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:24:c0:b3:31:9d:ca:73:86:10:da:4c:8b:
f7:42:e7:a5:f2:c9:81:8b:08:58:83:12:2e:03:4f:
e1:59:7a:2f:5a:45:f9:04:44:18:48:94:e9:4e:68:
88:71:20:fc:a9:76:c6:c6:9a:92:d8:e5:9c:24:19:
78:29:1b:5a:50:3a:8a:8e:1a:62:42:dd:ff:79:c9:
8e:cd:a1:be:0f:2b:af:a3:e6:60:0a:da:0e:ec:46:
fe:c6:0a:f0:8e:25:31:3c:d9:50:c4:d1:6c:a4:36:
2e:b1:a6:30:38:42:51:91:75:ee:29:85:7f:f6:0f:
f8:e4:39:72:7a:90:0b:35:e3:00:83:64:4f:d7:39:
76:e6:20:01:e5:ff:77:eb:85:02:b4:04:ef:9e:0f:
51:9d:72:e5:72:3a:ad:69:d4:3c:5f:91:63:bf:07:
fb:58:ae:eb:cf:4b:be:ea:5d:6d:73:0e:f5:e7:ec:
80:46:fa:f8:ce:db:43:4e:02:66:ce:df:b3:ae:7c:
2e:32:fc:6f:8e:90:ab:b3:e2:b6:b1:c9:a1:91:9b:
a2:c8:a6:a3:f0:ba:4a:f7:a7:ea:6c:d9:ad:6a:69:
57:93:5b:28:a9:25:f9:47:8e:16:b8:44:95:49:29:
8d:ba:b4:4e:ba:36:30:db:03:4a:e0:be:81:24:02:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:AA:FB:67:BC:A6:D6:69:DE:B4:80:2E:C3:C5:A2:40:4A:30:7A
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3230352e31322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.12.0/23
Signature Algorithm: sha256WithRSAEncryption
63:a4:f5:d5:42:23:34:c6:64:c9:07:92:d4:b1:13:92:ea:85:
d0:f0:f1:06:72:b4:1d:b1:c8:67:26:8b:cf:56:d8:7b:53:1d:
2a:8f:37:69:ee:36:c2:82:6b:81:32:d2:06:a5:5d:fa:83:08:
44:9c:97:09:34:01:30:7e:84:56:4f:60:39:14:1c:e9:ed:49:
97:d6:02:38:10:4d:58:1a:d5:b3:43:b6:71:31:f2:07:8c:9a:
d7:7b:8a:5b:97:22:51:9c:01:ca:f5:08:14:63:16:8f:61:d8:
a3:f5:c3:5c:88:4a:54:c9:a7:0b:eb:33:90:44:0f:03:4b:b2:
3e:a1:37:71:5a:c1:bc:68:e5:45:22:27:1a:9b:67:9d:a8:4e:
68:93:c2:b8:36:3f:2f:5a:2d:f3:22:fd:d7:18:5a:8b:9e:85:
0b:61:cb:c4:f1:8c:35:79:6e:7d:74:a6:c7:86:44:71:41:a5:
ac:77:1f:ae:dc:63:5a:a4:63:46:73:f7:41:7c:27:82:8c:36:
2e:00:b8:ae:f8:26:fe:bb:c1:bd:84:a3:9c:90:82:a1:32:54:
f3:58:3d:d8:5a:7f:49:da:ad:64:38:13:31:6b:4a:7f:64:26:
3c:23:ae:1c:71:d0:91:a1:ef:70:37:72:8c:61:51:ee:f5:88:
ad:10:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org