Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232382e31392e302f32342d3234203d3e203432333636.roa
File: 3138352e3232382e31392e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: NWJYH0CFBPdTyp9HosTyFPYxPcYHM0yjU0HD3cz5Tnc=
Subject key identifier: 4F:E7:77:E7:02:F7:C3:BF:8E:E7:C6:9D:F3:9A:AB:74:79:C6:92:F2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0EF5585C3F011215DA7C302C6FE8E4DB42F6B469
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232382e31392e302f32342d3234203d3e203432333636.roa
Signing time: Sun 07 May 2023 15:44:24 +0000
ROA not before: Sun 07 May 2023 15:39:24 +0000
ROA not after: Sun 05 May 2024 15:44:24 +0000
asID: 42366
IP address blocks: 185.228.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f5:58:5c:3f:01:12:15:da:7c:30:2c:6f:e8:e4:db:42:f6:b4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 7 15:39:24 2023 GMT
Not After : May 5 15:44:24 2024 GMT
Subject: CN=4FE777E702F7C3BF8EE7C69DF39AAB7479C692F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:4b:6f:d7:c2:7e:19:37:93:8b:3f:40:60:
cb:50:73:da:be:0e:20:18:1b:0b:23:c0:24:51:37:
9a:41:91:d6:37:67:86:ba:bc:c2:f8:9f:23:25:80:
59:a3:e6:d9:af:8e:66:01:b0:88:ec:c1:d1:d2:05:
58:11:2a:91:ed:ae:32:b9:80:8c:15:cf:bb:5d:6c:
a1:66:3d:91:85:7c:e6:08:94:4d:c0:4f:cc:00:7d:
ee:37:34:cb:9a:c8:ce:68:c4:0a:a1:c3:2c:64:c7:
fd:3d:9b:c4:14:4c:4d:22:c5:4f:5f:f4:3b:40:70:
d4:46:c8:e8:1b:23:2d:7f:63:8f:c2:93:ab:9b:87:
92:ef:7a:19:dd:fc:61:f8:3a:b0:a5:f0:a1:d4:19:
e3:e8:d7:b8:69:94:12:be:6d:2c:83:5a:23:cd:46:
1b:c2:d5:36:19:cd:f9:f0:d2:1c:0d:17:3c:4e:bb:
66:35:8b:5c:3b:d4:b9:39:c7:5e:2f:e0:7b:f1:e8:
0b:86:47:05:3a:98:ac:05:f5:ef:9c:1c:2d:8d:19:
fb:76:6e:75:28:1a:74:02:e9:81:24:32:bb:6c:e1:
4d:ad:d9:ef:c1:0a:82:0f:43:4b:13:a6:69:0b:4d:
70:86:fd:67:40:22:ce:06:09:c8:e6:f1:1c:37:84:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E7:77:E7:02:F7:C3:BF:8E:E7:C6:9D:F3:9A:AB:74:79:C6:92:F2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232382e31392e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.19.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c8:77:ea:86:ea:bd:f4:cf:2d:f4:bf:2e:f9:1d:03:3e:74:
c6:f8:e4:8c:a9:13:af:df:51:5c:46:e3:58:0a:ed:ef:17:c9:
54:fa:32:74:bc:21:50:58:66:e8:2d:b5:c1:a2:c2:0f:11:34:
3c:20:41:59:fa:2e:36:40:ba:da:45:c7:b9:f6:96:ec:1a:54:
4d:ad:81:cc:78:2a:8c:62:49:41:f7:09:21:de:a4:96:a0:cf:
b8:28:9b:9a:e7:99:24:a7:8c:38:96:bb:63:8d:1b:a2:8f:9e:
63:cf:a4:68:e7:9d:b7:0a:db:68:4c:6b:aa:ac:ee:9f:27:60:
c3:7b:3e:37:3b:19:a9:00:7a:0e:d7:64:07:3b:59:95:f8:c7:
1b:b8:30:c8:e4:27:c1:ec:c4:1e:77:d1:66:fd:21:2e:31:27:
c5:2f:27:46:1a:2b:93:b5:8b:d2:d0:ed:5b:5b:0b:67:20:cb:
f2:0b:34:fe:ff:4d:df:29:15:0e:fc:76:20:3c:1b:29:34:34:
fa:05:6f:0b:69:a2:7b:93:aa:2d:37:2a:0a:a1:c9:c8:5a:31:
d9:c6:85:d0:a8:d0:3f:7a:ad:83:a2:66:a2:70:e3:2a:24:cf:
0d:5f:f2:0d:9a:39:28:6d:16:9c:9b:55:2f:80:b8:a1:70:00:
d2:17:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:16 2025 by rpki-client