Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e39302e302f32332d3234203d3e203432333636.roa
File: 3135352e3133332e39302e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: WsoYS4cuq3QqxjPBzfLm91LX6gIUMgkHvxYYG6FZtI8=
Subject key identifier: 70:ED:4E:26:80:4D:70:42:C7:9E:C2:5A:EC:6A:F9:45:20:59:41:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5EA24E48CFA5D782770A35C0648A0B3A72520CFB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e39302e302f32332d3234203d3e203432333636.roa
Signing time: Tue 25 Apr 2023 17:57:00 +0000
ROA not before: Tue 25 Apr 2023 17:52:00 +0000
ROA not after: Tue 23 Apr 2024 17:57:00 +0000
asID: 42366
IP address blocks: 155.133.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a2:4e:48:cf:a5:d7:82:77:0a:35:c0:64:8a:0b:3a:72:52:0c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 17:52:00 2023 GMT
Not After : Apr 23 17:57:00 2024 GMT
Subject: CN=70ED4E26804D7042C79EC25AEC6AF94520594179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:57:af:98:a8:f1:98:0f:40:09:e3:13:5e:
a3:db:a7:37:3c:6b:d3:e8:99:71:47:24:6a:8a:a7:
9b:35:ef:f6:26:65:c6:6b:42:fd:ca:6f:d2:87:ee:
ed:10:6b:54:44:88:62:9c:01:8f:3d:8a:c5:03:aa:
09:46:fc:15:1d:40:5d:dc:8e:64:c9:d5:d8:7e:db:
cf:fe:38:7a:70:16:5f:8d:ae:6f:d5:82:89:76:60:
e8:c8:96:29:79:1f:2b:eb:10:0d:7d:25:a6:d5:52:
d3:c5:d9:4a:c1:21:2a:a2:17:b0:29:8a:ad:a6:da:
1f:aa:89:a6:02:0e:68:f5:b7:82:58:3f:0f:7b:1f:
75:f0:9e:58:c1:39:7a:0a:4d:19:82:ad:b9:67:3f:
16:26:97:25:1f:2d:3a:a7:ad:3d:5f:7f:bd:c6:31:
80:57:6c:f0:04:46:2b:8c:6c:32:50:34:2d:47:c6:
83:1f:e1:b1:28:ae:cb:33:7c:be:2c:a3:c5:5a:0d:
ac:ab:1d:85:d5:84:b6:08:9e:fb:ab:33:60:a6:a6:
52:08:b8:17:e9:c7:08:ad:82:f2:0b:03:40:4e:f9:
a2:c0:f4:dc:e5:b6:c2:ef:21:71:96:5e:db:c1:28:
74:d9:2e:2b:2a:73:08:9e:84:52:51:37:28:75:4a:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:4E:26:80:4D:70:42:C7:9E:C2:5A:EC:6A:F9:45:20:59:41:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e39302e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.90.0/23
Signature Algorithm: sha256WithRSAEncryption
60:09:3a:5c:7e:89:f5:13:7a:96:71:bf:c2:3b:b9:73:bc:a1:
da:30:e5:b1:85:84:47:61:0f:67:4d:9a:bb:24:d6:0a:c3:fd:
b5:35:6e:65:7d:77:69:4d:72:92:2b:9f:01:71:8a:56:37:99:
a8:a0:e0:0e:12:a0:f2:df:f6:37:a2:b8:f6:f0:ec:4b:fe:58:
3b:44:76:af:50:a0:54:11:60:ec:77:d4:ca:e6:64:d0:9d:de:
02:e4:82:ad:5a:fa:e2:e8:01:91:69:52:91:14:4c:bd:98:a5:
24:78:78:dd:49:55:5a:b3:fc:1c:a1:86:a4:64:5d:20:2b:3f:
42:79:22:8b:66:3e:52:1c:df:c9:69:a1:44:be:00:82:7c:30:
69:72:64:3d:25:c6:3f:5a:91:cf:ed:fd:6c:85:e2:d3:91:d8:
b6:68:af:75:7d:26:1e:7c:da:ae:83:a7:03:39:d2:61:c9:29:
83:4e:fb:d8:c3:3a:53:fe:a3:7d:24:91:04:0e:39:11:a0:c0:
7b:73:61:5f:0f:23:79:45:cb:a6:24:dd:6b:86:b6:b1:9e:10:
17:d3:12:04:53:f4:68:d7:2f:9d:1a:92:16:b9:d3:ac:c0:ca:
46:86:0e:2a:32:ce:ce:b6:63:e5:af:87:bf:67:a3:dc:2a:d1:
e0:f9:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:20 2025 by rpki-client