Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa
File: 3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: M3pHn+wvy1bxmImTHuxY16BaqsYNKtsZJmrIozpCPnE=
Subject key identifier: C0:8C:25:5D:50:95:77:69:B6:1D:17:4C:5D:F8:F1:41:F5:72:11:B8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4A703D33B3ED0348C8DA99A338B0B2A2378281DE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa
Signing time: Fri 20 Oct 2023 13:41:45 +0000
ROA not before: Fri 20 Oct 2023 13:36:45 +0000
ROA not after: Fri 18 Oct 2024 13:41:45 +0000
asID: 43260
IP address blocks: 185.245.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:70:3d:33:b3:ed:03:48:c8:da:99:a3:38:b0:b2:a2:37:82:81:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:45 2023 GMT
Not After : Oct 18 13:41:45 2024 GMT
Subject: CN=C08C255D50957769B61D174C5DF8F141F57211B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:c2:d3:e2:09:56:0c:f1:d6:b0:06:22:88:
2e:37:54:fa:ba:bb:e3:a9:5f:17:41:fd:5a:7b:7d:
fe:cb:dd:d2:73:5b:b4:0d:17:ee:6b:24:8a:93:e0:
2e:4c:e2:e1:e1:b2:2b:b4:58:5f:3d:3b:04:42:0b:
88:85:70:d4:fd:d3:5e:d5:a6:ba:20:22:78:2c:8e:
9a:7d:69:81:ab:dd:76:b3:79:c7:1d:52:10:27:15:
00:f4:4b:26:69:2c:fd:7c:3c:b7:a6:77:80:ef:43:
e6:61:8c:81:03:52:6a:01:52:40:4e:be:e2:09:de:
8b:f5:09:1c:cb:0f:58:2a:9f:8d:3f:74:dd:24:78:
e2:31:af:c6:67:83:9a:b2:41:6b:ed:67:fa:8e:ee:
ea:b2:6d:43:02:3a:58:31:1a:69:2a:e4:5c:7c:15:
d6:b1:f7:93:87:00:86:34:2a:5b:c4:2e:f1:0f:f1:
f0:ea:58:12:f1:ac:1d:3d:3e:d2:1b:7f:cb:39:66:
a7:ff:75:94:df:5f:04:ed:cd:18:49:4e:51:73:0e:
49:4e:c6:15:03:7f:53:8f:2e:9e:ed:9f:95:c3:2e:
53:1b:09:c2:0f:95:86:04:df:b8:81:7e:a4:73:f6:
91:e6:fd:0c:58:f6:00:40:6f:7f:17:f4:ca:eb:f9:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:25:5D:50:95:77:69:B6:1D:17:4C:5D:F8:F1:41:F5:72:11:B8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c8:7e:68:49:9c:35:66:c7:e1:6f:4b:1f:74:c5:cf:8f:ad:
f4:84:01:c6:76:2d:a1:f5:c1:72:ac:62:25:58:ff:b5:59:d2:
22:5d:2f:84:f2:17:74:2a:3c:52:4d:8a:09:d6:c8:34:85:50:
10:94:c6:9e:0d:39:ec:06:ba:26:b6:4f:aa:5b:a5:19:e5:35:
6f:8e:84:cf:43:ad:8f:c0:73:60:4c:12:e3:51:a3:d6:fa:af:
47:cd:e9:26:9f:39:c8:99:bc:56:2b:33:61:f5:6d:51:1e:f6:
9d:c7:0a:7e:59:8a:65:e2:70:09:82:10:96:2a:d9:07:e3:d2:
e8:9f:66:6b:26:c0:6c:2b:ea:98:61:01:2e:b4:48:ae:f6:ae:
33:82:6a:f7:e6:fc:9e:9e:5f:25:56:b9:4f:02:bf:fe:26:68:
97:85:a7:ec:5f:0b:2b:2d:93:fa:af:21:d1:14:ff:80:be:b0:
d6:db:ef:3e:f3:b3:c9:94:7f:ff:62:01:a3:13:5e:72:7a:b4:
0d:c3:55:de:1f:52:94:fd:ae:2e:24:d2:e1:60:ee:d0:d9:c7:
d2:e4:dd:ad:17:4a:cf:40:92:cc:2d:73:da:12:9b:e9:f0:26:
b1:4a:3d:b0:75:b3:63:26:01:4a:31:23:cf:4b:4e:1f:c4:43:
09:0f:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:21 2025 by rpki-client