Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e203432333636.roa
File: 3138352e3133352e3133382e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: 6zMwS0D31urC+2T9yTjnH0fUrwtQHQpCxoMf80w8q3I=
Subject key identifier: 14:F7:DD:EE:AB:4C:72:A4:AC:C2:1E:2A:F9:A8:FA:70:1B:1B:0A:E5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7D8E87EA6E206BF58FAAFACF995481F685690A80
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e203432333636.roa
Signing time: Sun 07 May 2023 15:44:46 +0000
ROA not before: Sun 07 May 2023 15:39:46 +0000
ROA not after: Sun 05 May 2024 15:44:46 +0000
asID: 42366
IP address blocks: 185.135.138.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:8e:87:ea:6e:20:6b:f5:8f:aa:fa:cf:99:54:81:f6:85:69:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 7 15:39:46 2023 GMT
Not After : May 5 15:44:46 2024 GMT
Subject: CN=14F7DDEEAB4C72A4ACC21E2AF9A8FA701B1B0AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:a8:2d:d7:01:a7:13:bd:5a:33:a9:de:48:
2f:62:36:49:32:c4:88:2d:7d:54:44:75:0d:77:6e:
94:7a:88:32:0d:d3:7e:4f:0c:6f:99:7b:38:ea:0c:
bf:ee:86:98:14:ac:55:b5:67:a3:93:d6:97:fe:5c:
71:eb:5a:ba:f4:6a:19:0a:02:fd:23:07:cc:33:56:
f9:22:48:98:30:1f:83:25:86:56:dd:5e:fa:65:43:
9b:c6:5d:b9:87:e9:9c:b6:c6:10:52:c7:ba:95:df:
10:52:49:c5:02:1d:96:a0:f8:d6:98:72:21:cb:d9:
cd:fa:f9:f7:8c:95:6a:81:8a:a9:38:56:c7:11:27:
30:3c:5c:b6:8d:ca:c1:5f:4c:8f:73:8f:22:82:2c:
12:ad:83:f5:0a:6d:cf:57:91:5e:f9:98:ef:7a:50:
50:c2:96:56:55:b7:25:30:0d:76:34:bf:3a:2e:ea:
d2:e0:30:83:49:72:0d:f4:bb:c1:f5:55:03:13:07:
c3:07:10:5d:20:74:f1:2c:82:f1:76:62:c9:9b:b0:
ef:29:64:0f:4b:1c:e3:f2:32:89:c9:37:62:44:a1:
10:7a:07:a9:29:37:a0:12:9c:20:82:5f:25:fa:73:
50:34:2b:08:e6:d7:cf:0f:06:a4:ae:11:a7:31:97:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:DD:EE:AB:4C:72:A4:AC:C2:1E:2A:F9:A8:FA:70:1B:1B:0A:E5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.138.0/23
Signature Algorithm: sha256WithRSAEncryption
25:a7:bd:a7:77:ac:af:cf:b8:8f:44:59:e5:dd:84:1c:48:2e:
54:51:67:4a:66:0f:76:b1:6d:d1:15:b0:30:54:bf:ff:4a:54:
aa:3a:f6:ea:5a:e2:83:7b:ba:97:ae:ef:70:3b:a2:d0:b3:59:
9f:5f:ef:16:d7:4c:56:2b:54:38:b3:8f:3b:80:54:6f:f2:c3:
ee:9d:88:05:fc:de:0c:58:79:74:6e:ce:ed:6a:9e:af:f1:22:
66:bc:79:ad:c6:71:af:5c:b2:e1:6e:d1:2a:01:c6:92:45:62:
eb:f6:84:66:de:b0:d3:70:98:cf:dc:61:c3:7a:66:15:e1:2e:
1e:5b:5c:07:1d:56:86:fd:60:b7:e4:d4:67:e5:10:76:30:91:
72:5a:1d:06:a3:03:a6:63:69:e1:e7:49:7b:31:21:9f:ee:ce:
ae:82:77:9f:64:ca:18:85:75:c3:79:8c:73:99:ee:d3:19:64:
71:a4:49:ac:11:37:fd:46:2d:19:29:5b:51:d9:84:2e:6b:ef:
7b:58:5b:28:9c:7f:6c:ba:12:e2:92:2e:82:e0:84:07:f6:70:
f1:49:ae:ac:1d:92:d8:fb:f4:de:84:9f:b4:f9:4f:ca:89:d5:
62:f4:7f:33:d2:96:a7:87:c7:56:0f:30:fa:27:f8:19:c9:5a:
7a:13:e1:93
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfY6H6m4ga/WPqvrPmVSB9oVpCoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yMzA1MDcxNTM5NDZaFw0yNDA1MDUxNTQ0NDZaMDMxMTAvBgNV
BAMTKDE0RjdEREVFQUI0QzcyQTRBQ0MyMUUyQUY5QThGQTcwMUIxQjBBRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Tagt1wGnE71aM6neSC9iNkky
xIgtfVREdQ13bpR6iDIN035PDG+ZezjqDL/uhpgUrFW1Z6OT1pf+XHHrWrr0ahkK
Av0jB8wzVvkiSJgwH4MlhlbdXvplQ5vGXbmH6Zy2xhBSx7qV3xBSScUCHZag+NaY
ciHL2c36+feMlWqBiqk4VscRJzA8XLaNysFfTI9zjyKCLBKtg/UKbc9XkV75mO96
UFDCllZVtyUwDXY0vzou6tLgMINJcg30u8H1VQMTB8MHEF0gdPEsgvF2YsmbsO8p
ZA9LHOPyMonJN2JEoRB6B6kpN6ASnCCCXyX6c1A0Kwjm188PBqSuEacxl/cZAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUFPfd7qtMcqSswh4q+aj6cBsbCuUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTMzMzUyZTMx
MzMzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzIzMzM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5h4owDQYJKoZIhvcNAQELBQADggEBACWnvad3rK/PuI9EWeXdhBxILlRRZ0pm
D3axbdEVsDBUv/9KVKo69upa4oN7upeu73A7otCzWZ9f7xbXTFYrVDizjzuAVG/y
w+6diAX83gxYeXRuzu1qnq/xIma8ea3Gca9csuFu0SoBxpJFYuv2hGbesNNwmM/c
YcN6ZhXhLh5bXAcdVob9YLfk1GflEHYwkXJaHQajA6ZjaeHnSXsxIZ/uzq6Cd59k
yhiFdcN5jHOZ7tMZZHGkSawRN/1GLRkpW1HZhC5r73tYWyicf2y6EuKSLoLghAf2
cPFJrqwdktj79N6En7T5T8qJ1WL0fzPSlqeHx1YPMPon+BnJWnoT4ZM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:55 2025 by rpki-client