Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3131392e302f32342d3234203d3e20323132323338.roa
File: 3139332e34332e3131392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: GGzDJEutVxygdVC03C9TD4JEPZWgu+5uzBor2Osq0Lg=
Subject key identifier: F3:CB:F3:4D:F8:E4:66:E0:EC:B4:1D:56:A5:E6:22:DF:24:A3:77:80
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 68B343AF3ED2A4831BB7BD03FFE9EAAE6B66AB6F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3131392e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 17 Jul 2023 12:22:13 +0000
ROA not before: Mon 17 Jul 2023 12:17:13 +0000
ROA not after: Mon 15 Jul 2024 12:22:13 +0000
asID: 212238
IP address blocks: 193.43.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b3:43:af:3e:d2:a4:83:1b:b7:bd:03:ff:e9:ea:ae:6b:66:ab:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 17 12:17:13 2023 GMT
Not After : Jul 15 12:22:13 2024 GMT
Subject: CN=F3CBF34DF8E466E0ECB41D56A5E622DF24A37780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:30:c6:db:ad:cd:b2:c0:46:20:76:c3:ad:
ba:0d:ee:cd:d5:53:09:07:00:cc:c6:d7:8e:55:87:
99:5a:bf:7a:4d:5d:9d:b2:d5:fa:b4:e7:1e:85:f9:
46:d2:e4:48:82:dc:2c:51:d5:c5:f9:79:04:b2:a3:
70:e6:bb:0d:0c:6e:fe:b1:f1:f2:99:2f:b5:c8:62:
15:ce:57:55:71:e6:f6:e9:bc:79:2a:9b:a3:f8:a3:
c1:51:f8:d1:f8:3f:58:be:0e:be:74:2b:07:bc:67:
81:ed:c1:f0:47:a8:c8:63:06:f1:fb:66:a6:cf:61:
96:a2:ac:3b:c7:2a:c2:e7:66:de:06:f6:b9:15:73:
41:e1:2f:e1:12:7e:51:2c:c8:87:77:65:8e:17:69:
6e:56:a3:1d:76:1b:43:de:82:09:27:62:08:78:a0:
06:39:52:be:ed:87:a7:9d:c5:6a:5a:40:0e:24:b3:
40:9f:07:f2:71:ab:2c:e7:5d:e9:4a:17:60:18:d3:
81:6c:e3:02:9b:b0:10:c8:38:4d:e9:6e:4e:1f:73:
de:d9:29:d5:fa:a2:86:2b:46:ee:c6:d0:32:aa:98:
6d:08:d7:fb:8a:73:45:eb:5a:cc:69:d7:63:da:24:
7a:e5:04:51:4b:93:38:a2:49:a4:7e:30:c4:75:ea:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CB:F3:4D:F8:E4:66:E0:EC:B4:1D:56:A5:E6:22:DF:24:A3:77:80
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34332e3131392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e6:6c:3a:3a:94:b8:b0:65:0b:90:49:5b:45:30:a3:fe:83:
ed:a4:aa:f1:bf:cc:81:61:28:f5:6b:11:09:ba:5c:92:c3:65:
66:63:f8:d4:cb:53:38:0e:53:48:56:0a:f7:99:fa:a1:a7:da:
4a:e6:f7:0b:39:8b:8f:54:70:b7:80:89:51:42:a2:fc:17:47:
20:1b:00:50:7d:41:06:23:97:c8:c5:78:ac:83:37:af:eb:da:
d2:c5:5d:7f:58:42:e5:d2:1e:16:99:09:ab:f4:9d:b0:42:ae:
72:69:65:41:2e:43:5e:43:a5:92:c0:c5:e1:a9:90:cb:49:a5:
1b:6d:c9:f7:92:90:a3:8c:64:d0:f0:83:a6:d9:d7:09:09:96:
bb:d0:13:5f:ba:f6:50:b4:dc:12:d4:87:d4:51:f2:95:2b:80:
24:07:5c:69:6c:ea:5c:79:6f:ef:84:da:75:15:25:e2:83:4b:
d1:3c:2a:60:4f:b9:bf:14:c9:4e:46:bd:4e:f5:a7:6e:f4:70:
0d:b3:a3:fc:e4:e9:71:70:4c:2c:6e:3f:2a:f0:16:e7:2e:55:
81:d4:77:4f:86:2f:8f:f0:e6:50:3f:83:03:41:1b:87:06:80:
05:e8:2d:3f:5e:f6:cb:e3:cd:e0:01:2c:ed:48:22:f0:19:88:
b0:1d:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:25 2025 by rpki-client