Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233302e3133362e302f32332d3234203d3e203631333137.roa
File: 3138352e3233302e3133362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: 4C4+xK7os3Rla2zLfUz2EEYPJpkANWpKCyExSC6nTWE=
Subject key identifier: 7A:12:A9:9F:84:86:31:82:E5:AE:A4:4E:1F:88:A5:EF:64:5F:51:0D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 132F78685FA9BB00A374A2712ED3680D4A04BA63
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233302e3133362e302f32332d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:28:35 +0000
ROA not before: Mon 27 Mar 2023 08:23:35 +0000
ROA not after: Mon 25 Mar 2024 08:28:35 +0000
asID: 61317
IP address blocks: 185.230.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2f:78:68:5f:a9:bb:00:a3:74:a2:71:2e:d3:68:0d:4a:04:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:35 2023 GMT
Not After : Mar 25 08:28:35 2024 GMT
Subject: CN=7A12A99F84863182E5AEA44E1F88A5EF645F510D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:00:7f:55:aa:be:28:19:19:25:c3:cb:21:
39:15:e1:99:4e:c2:53:ab:61:32:ec:43:b8:02:8a:
94:26:4a:47:67:f7:74:c5:94:ec:29:57:58:4e:0f:
0f:22:bc:c9:74:6a:a3:4b:57:af:5e:40:3d:6a:dc:
bc:86:e0:0e:5f:db:e7:c3:05:ca:d7:96:2c:b2:77:
90:da:99:e4:82:eb:92:c1:aa:42:7c:fd:fb:e7:cd:
ce:27:72:2b:17:e5:66:01:c4:f1:c3:f1:3f:5d:b9:
a3:18:39:17:38:9d:a2:af:95:3e:9d:10:b6:da:8d:
06:49:87:07:f7:bf:5f:2c:6f:52:bf:2d:0b:7b:fe:
2e:b0:86:eb:f8:10:1b:d1:53:a1:7e:1f:3d:59:4c:
bc:c6:b5:a1:cf:7b:4e:88:2f:21:1c:25:fa:94:49:
7a:0a:78:a7:ba:c0:85:72:a6:74:ea:ab:3d:f1:40:
d4:92:d8:6a:45:25:f7:61:97:98:d6:44:a4:e5:11:
a9:7e:99:4c:ad:f5:f9:de:0f:13:84:e7:9b:7e:68:
1b:73:65:22:b8:a0:a7:aa:c7:24:8d:23:6a:7f:1f:
25:ad:38:da:cf:f9:6c:ff:5a:ad:ae:c6:49:e1:cd:
e3:82:28:b0:bc:05:f6:ce:79:79:6d:e9:2b:9d:3e:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:A9:9F:84:86:31:82:E5:AE:A4:4E:1F:88:A5:EF:64:5F:51:0D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233302e3133362e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.136.0/23
Signature Algorithm: sha256WithRSAEncryption
17:6d:0d:42:d0:3f:ec:b1:b6:73:33:c0:f5:dc:93:9b:ad:d7:
f2:1e:49:ec:07:7c:d4:1f:33:d9:65:a9:66:c7:ea:1b:b0:83:
0a:57:4b:ec:b6:2f:d7:8f:85:04:30:ef:45:04:f4:f7:e3:94:
b2:a5:51:0c:31:1e:d9:44:43:a7:2a:53:ca:8d:f1:60:00:f6:
7f:d3:f2:c9:1b:d3:58:81:76:24:a1:25:ff:41:28:21:2b:7b:
56:d0:9e:ff:22:48:93:ef:bb:5e:58:dd:bb:3f:30:97:40:43:
46:b5:bf:d8:76:20:48:f0:3a:86:1a:97:d0:bd:a0:10:36:a3:
c7:9e:1e:b6:3b:20:80:61:4a:51:2a:88:c9:8f:7c:fb:67:07:
65:72:80:d1:e2:2a:ac:dc:cc:c8:b0:5f:64:2f:d6:d7:55:a1:
3d:76:99:da:fb:07:d2:0d:ab:fd:1b:1f:4c:a6:00:4e:e6:72:
27:c1:27:ab:69:e2:f6:67:27:56:29:a2:09:d9:c0:1f:ca:0b:
c3:07:04:89:ef:81:b9:e5:2b:fa:4b:3b:f9:3b:e5:cb:0a:8c:
70:02:d7:25:80:df:83:5f:68:72:2f:d6:81:98:b1:47:36:eb:
29:95:11:61:bc:b4:80:bd:16:7d:86:40:f4:83:f3:56:14:20:
75:25:aa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:58 2025 by rpki-client