Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138332e302f32342d3234203d3e20323132323938.roa
File: 3138352e3231352e3138332e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier: 23Z2CoaKTN1tjQjdIxh3/BqQ2CNIP3dtW4fGvD+MYtU=
Subject key identifier: 14:BB:E7:90:2E:48:E5:30:5C:44:DF:91:E6:E7:13:A6:EB:A3:89:AA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 74039EA4A0296BD1B932C48A4EECFAEE8D8F3C97
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138332e302f32342d3234203d3e20323132323938.roa
Signing time: Mon 27 Mar 2023 08:28:33 +0000
ROA not before: Mon 27 Mar 2023 08:23:33 +0000
ROA not after: Mon 25 Mar 2024 08:28:33 +0000
asID: 212298
IP address blocks: 185.215.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:03:9e:a4:a0:29:6b:d1:b9:32:c4:8a:4e:ec:fa:ee:8d:8f:3c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:33 2023 GMT
Not After : Mar 25 08:28:33 2024 GMT
Subject: CN=14BBE7902E48E5305C44DF91E6E713A6EBA389AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:0a:c9:36:04:6c:3e:5c:fb:18:24:2a:4f:
59:73:b3:ea:73:f5:eb:22:84:b4:62:79:fa:2c:6c:
43:4b:e2:73:d4:31:b3:45:4f:72:62:cd:e6:0e:2a:
31:c4:bf:c0:ee:af:1a:7a:cd:2a:a3:89:8f:9b:92:
6c:41:33:5b:52:7d:41:ec:35:c8:15:50:79:c4:df:
f0:0c:a0:72:27:76:aa:bd:06:7d:40:5a:56:73:e1:
a7:c3:ca:19:dd:3c:d9:25:2d:bb:c0:22:40:6e:b2:
8d:ca:7d:d1:dc:88:d7:f5:cb:15:40:f0:e1:e9:87:
e7:44:a5:a1:cc:c0:67:e1:7c:5b:9d:da:77:c0:e6:
05:a9:85:8c:f9:e8:ac:53:88:19:b0:84:97:c7:ec:
58:9b:09:50:2d:bc:56:63:be:18:a7:5a:5a:d2:e5:
a8:8b:ed:fd:56:d7:56:43:fa:2d:ff:c2:f6:de:df:
80:7e:d5:ec:80:52:2d:1d:4e:83:80:d5:57:37:af:
53:a8:ca:fc:18:51:e5:55:06:d9:ac:98:27:f1:bc:
81:86:f4:5c:5b:08:1e:16:fb:d0:04:c0:73:4f:d7:
e6:be:8b:2f:4d:3b:58:93:35:a5:a0:d7:f1:f6:4d:
6c:94:bb:4c:cd:2c:e0:e3:e8:a3:ad:9a:60:91:8c:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BB:E7:90:2E:48:E5:30:5C:44:DF:91:E6:E7:13:A6:EB:A3:89:AA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231352e3138332e302f32342d3234203d3e20323132323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.183.0/24
Signature Algorithm: sha256WithRSAEncryption
65:90:4c:f8:b0:85:37:72:94:6f:83:e0:4a:07:e6:8a:a2:03:
7a:52:a4:97:7a:dc:b3:0d:4b:8b:a1:67:db:38:3d:2c:d4:fa:
09:c0:98:03:ff:92:5c:d1:97:a4:ae:2b:36:70:89:7b:f3:7f:
51:b7:05:96:40:2f:02:64:e6:10:63:6e:ef:d4:61:51:29:61:
86:62:79:e0:fe:e4:83:00:43:aa:3c:eb:1b:e3:97:8e:96:3a:
c2:1d:09:5e:5c:aa:0b:d2:59:bc:79:5b:b8:2b:94:a6:07:e9:
41:f6:dd:20:05:5f:99:84:45:24:62:94:04:06:94:f9:c2:25:
76:a3:29:d3:9a:0e:2a:2e:02:4b:03:ec:f3:4a:33:6e:ed:da:
c7:e3:75:6e:23:b8:19:0b:c8:6c:dd:6b:df:5a:fc:2b:50:51:
0e:86:38:8a:a7:fc:d1:76:0a:90:77:23:ae:3b:6c:86:d0:da:
d0:60:c6:2b:b6:0c:ec:5b:56:db:85:87:f1:3a:c8:f5:99:e4:
ee:b1:00:09:3e:b3:da:05:12:62:7b:b0:ad:59:54:58:8e:6b:
8e:12:85:41:b2:97:8a:cc:9e:ed:f0:d0:b6:d6:26:05:3a:a5:
90:88:ee:7e:7e:08:61:ef:3b:8a:2e:4a:e6:57:97:aa:9c:a9:
1c:b6:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:08 2025 by rpki-client