Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131382e302f32332d3234203d3e203432333636.roa
File: 3135362e36372e3131382e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: y2X2PcB1wg0O3s02KgqVdiyt7mJpzzqeqXlMEEFqkfk=
Subject key identifier: 94:51:C4:E7:7F:BF:B9:C4:D6:E4:99:E5:8F:77:5A:B4:CE:11:DE:0D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6C0CF67E8549A8D5182A987428F0324C076E9F1A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131382e302f32332d3234203d3e203432333636.roa
Signing time: Tue 25 Apr 2023 17:58:52 +0000
ROA not before: Tue 25 Apr 2023 17:53:52 +0000
ROA not after: Tue 23 Apr 2024 17:58:52 +0000
asID: 42366
IP address blocks: 156.67.118.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:0c:f6:7e:85:49:a8:d5:18:2a:98:74:28:f0:32:4c:07:6e:9f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 17:53:52 2023 GMT
Not After : Apr 23 17:58:52 2024 GMT
Subject: CN=9451C4E77FBFB9C4D6E499E58F775AB4CE11DE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:ed:4b:87:09:3d:3b:3d:40:d7:07:b2:66:
b8:7c:b1:08:fa:21:b9:6b:98:a4:7e:c6:fa:35:33:
af:f0:be:5e:f0:ce:db:db:85:9c:6a:17:5f:32:10:
3e:d7:70:12:79:7f:6d:d3:f2:0d:b9:c9:39:28:37:
eb:c2:1a:91:d0:2e:c3:e9:97:29:a6:0f:0a:00:f6:
5b:55:42:6e:e8:0d:ac:ad:2f:15:1d:8b:dc:95:96:
4b:ce:36:7e:70:86:19:8a:37:65:43:8f:ff:99:27:
e5:86:41:f3:c8:8d:99:4a:b2:94:9e:f1:ed:26:8d:
2d:36:c6:b9:57:b4:6b:47:cf:7d:13:02:68:be:bf:
27:2d:22:2e:2c:90:b1:6f:5f:41:82:1f:d8:e0:5c:
b6:85:fe:f6:d3:f3:d6:d5:37:b9:b3:a7:ef:93:0a:
90:5b:41:dd:c7:da:4d:e5:93:b0:2b:01:86:93:52:
5e:81:1e:4e:ad:40:0e:d6:a9:b8:b2:56:64:d1:93:
ef:d1:c9:15:a9:59:34:d0:27:32:6f:50:6f:ad:af:
e9:b6:89:e1:27:9c:ee:ad:e7:eb:01:67:7d:0e:0c:
6b:fc:78:47:48:cd:32:87:a8:f5:15:7f:9f:a2:a9:
4b:6f:9e:25:45:73:27:92:6c:eb:b6:6c:48:33:60:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:51:C4:E7:7F:BF:B9:C4:D6:E4:99:E5:8F:77:5A:B4:CE:11:DE:0D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3131382e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.118.0/23
Signature Algorithm: sha256WithRSAEncryption
90:17:cd:42:e7:21:9f:c8:9e:48:7d:8e:3f:54:2e:92:3f:18:
0a:d8:aa:46:9b:5e:de:25:95:97:74:31:d1:70:6b:91:d5:1f:
f8:4a:94:46:a7:51:e1:be:b6:a6:99:f6:5a:f1:b6:9c:e2:2a:
09:f6:b5:c2:74:bf:27:36:68:33:f0:ba:cd:64:e8:e2:2a:20:
b9:f0:b8:24:f7:61:a8:f9:4c:84:65:c8:9b:42:4f:12:01:14:
62:52:d6:92:1d:77:3b:4e:32:46:c9:4c:e8:b4:73:d6:ce:96:
a6:85:be:08:4b:e5:f3:b8:57:94:e4:cf:49:4f:4e:a7:b2:09:
25:20:82:ae:4b:c6:75:73:b4:b5:df:69:8c:5f:a5:c8:e6:5a:
d2:1b:e9:7d:76:6f:02:09:d8:de:23:d4:15:b9:90:94:64:43:
b5:31:58:65:bc:3d:7f:07:65:cd:95:ef:3f:e8:78:37:15:7a:
35:fc:d9:42:29:f4:dc:59:13:bc:e5:a8:27:af:b1:e3:ac:1c:
88:3f:5b:ba:71:fa:86:df:2b:8a:79:b7:e8:fa:4f:d9:fe:0f:
3a:3a:9e:6d:0f:b6:b9:8d:e7:a2:e9:bb:63:08:ff:e8:e2:30:
cf:4c:51:9b:9a:69:e4:03:ce:7a:dd:ed:bd:25:cd:66:c8:23:
d5:2f:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:48 2025 by rpki-client