Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3233322e31352e302f32342d3234203d3e2030.roa
File: 3138352e3233322e31352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 4JotprkmXcojqXshLuO9bCwJxeckx9hABtrm7Grn1oY=
Subject key identifier: EC:6D:EC:77:5E:1A:C4:CE:2C:4F:B4:7E:BA:8E:FA:4B:34:5B:B7:F9
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 1CD891DAE124E1449695A6E308F31A632AE6571D
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3233322e31352e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:42 +0000
ROA not before: Mon 27 Mar 2023 08:22:42 +0000
ROA not after: Mon 25 Mar 2024 08:27:42 +0000
asID: 0
IP address blocks: 185.232.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d8:91:da:e1:24:e1:44:96:95:a6:e3:08:f3:1a:63:2a:e6:57:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Mar 27 08:22:42 2023 GMT
Not After : Mar 25 08:27:42 2024 GMT
Subject: CN=EC6DEC775E1AC4CE2C4FB47EBA8EFA4B345BB7F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:8d:a7:44:61:79:8a:6e:e9:9e:11:65:b6:
3f:43:31:e5:19:90:48:f6:11:33:62:6e:d1:24:f9:
52:03:b1:1b:fd:79:14:4d:65:4f:87:c6:66:05:27:
93:9b:15:1f:9f:d0:93:0b:3a:af:68:b6:da:e0:fd:
33:26:39:fa:c7:ff:af:1b:01:b9:d5:97:8e:4b:2d:
e8:b0:1a:22:67:ba:08:84:76:bd:9a:f1:a0:60:b7:
53:58:07:4d:91:7b:ab:f1:ed:5f:27:92:9f:f4:2e:
cc:9d:e0:27:79:b7:ce:b6:3d:0b:79:bb:0f:43:31:
30:b7:1c:c3:ae:23:af:94:70:59:a7:d1:65:ff:c4:
a1:b5:c7:6c:49:0a:ca:8d:30:fa:d1:30:2d:00:db:
c9:eb:66:0c:cb:fd:ce:df:0c:bb:fe:ea:2d:77:01:
a1:73:60:38:aa:b4:4c:0b:02:12:2e:12:5d:d5:7e:
57:05:dc:40:70:3c:ef:28:b4:8d:f9:cd:9e:c6:fe:
d0:26:c8:49:8d:5b:e7:40:09:05:3c:ef:73:18:e1:
b1:f3:3f:62:45:32:63:18:56:2e:90:d6:1f:f4:0b:
fd:37:9d:05:47:3c:e0:35:8d:ee:5b:7b:e0:1e:4a:
99:53:22:f2:bd:7a:38:61:36:50:00:fb:fd:7a:89:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:EC:77:5E:1A:C4:CE:2C:4F:B4:7E:BA:8E:FA:4B:34:5B:B7:F9
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3233322e31352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2d:5f:8e:7c:a3:2c:aa:b7:6e:ca:e0:63:66:1b:49:11:4f:
23:7e:eb:36:a3:02:26:bf:5c:d5:a3:ef:97:73:02:e5:93:21:
36:ac:ca:a9:b8:87:a6:4e:dd:de:11:cb:a7:52:4b:73:16:01:
da:d7:42:f3:1c:cf:73:8e:e1:a1:11:4b:a3:3d:29:73:aa:d3:
19:3b:c0:d3:38:b9:50:f2:49:25:e1:8b:31:34:79:6c:23:13:
13:9b:35:15:ec:f6:90:22:ad:24:44:fd:5f:64:5c:14:f5:46:
17:4d:8e:ba:71:f8:7e:52:82:80:68:3a:77:8c:d4:70:fe:dc:
e6:86:94:91:0b:1e:2b:71:e4:4b:ec:60:48:60:60:48:dd:be:
ac:d0:4c:8d:97:ee:65:d6:b6:de:f8:9d:bd:b0:c2:43:10:6c:
1b:97:64:9a:70:86:93:cc:2f:c4:ab:8b:97:3c:c4:b8:7d:9c:
48:39:e9:16:3d:52:3a:cd:4d:f4:bf:7a:ab:75:ce:f3:c4:ba:
81:40:d7:e8:8e:24:8f:0d:eb:77:64:3e:a8:4d:08:9f:2d:44:
b8:67:67:d2:d1:d8:93:60:ac:d4:c1:81:ff:df:3c:e2:a4:21:
05:e3:7e:0d:18:1f:82:2d:b8:70:75:f3:1a:92:fa:14:d9:43:
f1:f7:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org