Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e2030.roa
File: 3138352e3133352e3133382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: IIxDSBums5YmlV/GCrch8v3rCtxPeNfpd7VpnVFGRYg=
Subject key identifier: 05:E9:6D:46:E4:C7:92:06:77:36:4F:F8:40:9C:82:2D:B4:E5:53:72
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 74D313DE3B275C8A88CCE4AA8A5DFE50DF2421FD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:54 +0000
ROA not before: Mon 27 Mar 2023 08:23:54 +0000
ROA not after: Mon 25 Mar 2024 08:28:54 +0000
asID: 0
IP address blocks: 185.135.138.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d3:13:de:3b:27:5c:8a:88:cc:e4:aa:8a:5d:fe:50:df:24:21:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:54 2023 GMT
Not After : Mar 25 08:28:54 2024 GMT
Subject: CN=05E96D46E4C7920677364FF8409C822DB4E55372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:7e:37:e4:e7:20:22:28:38:c0:86:10:a9:
8d:bf:d5:a7:62:78:8c:c1:85:2e:4b:db:0a:eb:24:
8d:50:3e:35:7f:7c:36:0e:a2:41:00:0d:f1:ae:8a:
38:21:83:e7:4f:56:3d:31:47:9f:a7:71:c9:34:5b:
57:43:19:b9:bd:0f:85:56:2e:c5:14:83:a4:9d:00:
fd:3e:8a:f8:bf:75:c2:88:41:58:41:68:15:d6:76:
ad:99:3d:1e:ba:2d:85:27:b7:8d:ef:b5:4d:ed:56:
26:15:25:48:75:a3:a6:b9:d5:91:ed:99:00:10:1e:
0a:c3:26:a3:a6:ef:c7:fa:29:4e:fe:c5:39:9e:3a:
14:42:bb:17:70:2f:c1:78:52:67:c5:6f:cb:1e:55:
57:58:6a:33:7f:0a:fc:f6:90:01:2c:92:5f:92:31:
0e:53:09:b7:80:f7:cd:70:4c:e5:00:13:c1:ae:04:
cb:b1:0e:ef:eb:6b:42:6f:b1:6b:89:53:00:e9:8c:
a6:a7:c2:1d:52:e8:e6:4b:1c:c4:b6:67:29:26:f9:
f5:1e:6b:1f:f5:f0:bb:ea:ea:00:c9:27:fb:01:ef:
3f:86:f9:19:dd:02:60:04:8f:9b:a2:60:34:25:c0:
e6:77:6b:13:69:04:4f:f5:46:27:cc:72:4e:9a:f8:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:6D:46:E4:C7:92:06:77:36:4F:F8:40:9C:82:2D:B4:E5:53:72
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.138.0/23
Signature Algorithm: sha256WithRSAEncryption
71:df:92:93:d8:22:23:fe:90:08:98:8a:6c:d3:af:0e:78:70:
de:da:29:54:dd:af:60:96:a5:8b:46:18:ec:a8:73:96:fa:ec:
4e:50:60:7a:7f:b9:bd:8f:26:7a:47:13:23:5f:0c:93:44:05:
e3:71:dc:07:90:5e:56:77:ef:9d:9f:d5:08:c2:27:db:8a:01:
d1:f5:4e:c1:d3:1f:24:38:39:a6:86:08:0b:7b:1f:41:e7:81:
90:85:27:d5:60:94:e5:68:fd:9d:7d:e4:0d:e3:20:a5:37:aa:
f6:99:cd:94:0a:75:ff:05:0e:39:3b:0f:80:d5:31:26:b7:17:
87:73:11:b4:ed:f1:53:6e:ec:3b:92:2f:ee:da:bd:2d:a9:4a:
09:47:80:9f:11:65:d8:db:96:5d:7c:91:99:e8:fa:77:a8:a7:
b2:0e:c3:e9:8f:ec:f0:fc:7b:67:b8:7d:98:ad:bf:45:ef:0c:
05:10:8e:94:fd:8f:65:2e:e2:30:85:78:40:a7:82:5a:01:d5:
56:73:b0:a2:1a:58:63:b4:17:b0:89:cc:e4:b6:b7:18:0a:4a:
05:b3:ee:a0:37:2f:b0:61:7a:63:5d:bc:ad:4f:ca:37:0a:25:
1c:01:8b:ca:4c:e7:d4:5d:4a:3b:f5:5a:5d:ef:b9:28:2c:67:
cc:bd:32:e5
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUdNMT3jsnXIqIzOSqil3+UN8kIf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzAzMjcwODIzNTRaFw0yNDAzMjUwODI4NTRaMDMxMTAvBgNV
BAMTKDA1RTk2RDQ2RTRDNzkyMDY3NzM2NEZGODQwOUM4MjJEQjRFNTUzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrn435OcgIig4wIYQqY2/1adi
eIzBhS5L2wrrJI1QPjV/fDYOokEADfGuijghg+dPVj0xR5+ncck0W1dDGbm9D4VW
LsUUg6SdAP0+ivi/dcKIQVhBaBXWdq2ZPR66LYUnt43vtU3tViYVJUh1o6a51ZHt
mQAQHgrDJqOm78f6KU7+xTmeOhRCuxdwL8F4UmfFb8seVVdYajN/Cvz2kAEskl+S
MQ5TCbeA981wTOUAE8GuBMuxDu/ra0JvsWuJUwDpjKanwh1S6OZLHMS2Zykm+fUe
ax/18Lvq6gDJJ/sB7z+G+RndAmAEj5uiYDQlwOZ3axNpBE/1RifMck6a+JYpAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUBeltRuTHkgZ3Nk/4QJyCLbTlU3IwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTMzMzUyZTMx
MzMzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYeKMA0G
CSqGSIb3DQEBCwUAA4IBAQBx35KT2CIj/pAImIps068OeHDe2ilU3a9glqWLRhjs
qHOW+uxOUGB6f7m9jyZ6RxMjXwyTRAXjcdwHkF5Wd++dn9UIwifbigHR9U7B0x8k
ODmmhggLex9B54GQhSfVYJTlaP2dfeQN4yClN6r2mc2UCnX/BQ45Ow+A1TEmtxeH
cxG07fFTbuw7ki/u2r0tqUoJR4CfEWXY25ZdfJGZ6Pp3qKeyDsPpj+zw/HtnuH2Y
rb9F7wwFEI6U/Y9lLuIwhXhAp4JaAdVWc7CiGlhjtBewiczktrcYCkoFs+6gNy+w
YXpjXbytT8o3CiUcAYvKTOfUXUo79Vpd77koLGfMvTLl
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org