Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39352e302f32342d3234203d3e203433323630.roa
File: 3139342e3139352e39352e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: Ib53LOasxlp5ImUcRolG27V05WPBe/tb0+FSCZgaXTg=
Subject key identifier: 9C:2F:14:8A:02:5D:C8:4C:CB:E2:5A:7C:B3:07:27:E0:37:11:D6:CE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C9817379E3A08B165DA4EE6F2EAEB6A507DFD59
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39352e302f32342d3234203d3e203433323630.roa
Signing time: Mon 15 May 2023 13:05:29 +0000
ROA not before: Mon 15 May 2023 13:00:29 +0000
ROA not after: Mon 13 May 2024 13:05:29 +0000
asID: 43260
IP address blocks: 194.195.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:98:17:37:9e:3a:08:b1:65:da:4e:e6:f2:ea:eb:6a:50:7d:fd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 13:00:29 2023 GMT
Not After : May 13 13:05:29 2024 GMT
Subject: CN=9C2F148A025DC84CCBE25A7CB30727E03711D6CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:7f:37:b4:52:80:b8:99:f5:86:42:dd:54:
9d:1a:2a:2b:b7:29:31:bd:75:f8:83:1b:f6:69:70:
db:30:0b:dc:27:a4:1c:5c:2f:26:3f:74:c2:95:06:
e6:18:6f:ec:d5:af:d5:36:c4:74:ea:91:e9:ea:0e:
c9:9f:2c:00:be:3f:22:7a:d6:1b:fd:b2:b7:58:5b:
91:63:d0:c8:7b:56:0b:30:41:f6:a8:84:39:02:e4:
8d:d4:a8:07:0a:b0:95:42:ee:5a:bc:ac:83:66:80:
e9:6b:a1:13:d3:fe:52:3e:5a:fd:28:6a:19:15:70:
4b:35:7b:bf:9e:b8:5c:ce:98:42:af:5a:c4:ac:1e:
80:b5:6d:8b:b4:fd:09:4b:83:67:e8:29:73:39:e4:
34:4e:dc:95:9f:bc:7c:52:d8:36:26:a7:66:70:91:
32:2e:ca:23:b4:1e:49:52:cd:f8:11:b1:15:1f:78:
2e:f4:56:1c:44:27:e6:41:da:24:2d:b2:a0:6e:69:
f0:7c:2f:42:0c:cc:cf:05:b0:d7:94:eb:29:1e:0d:
f2:4f:94:27:b3:b9:03:47:5a:a7:b9:5f:8f:e6:2a:
30:c0:10:d1:f1:88:18:3f:da:34:1c:4e:00:a9:a6:
52:8c:86:2c:33:2c:83:f8:8b:d8:a9:d3:8b:cf:4d:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2F:14:8A:02:5D:C8:4C:CB:E2:5A:7C:B3:07:27:E0:37:11:D6:CE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39352e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:55:8d:48:72:e2:87:84:18:e2:3b:e4:a2:91:22:9d:73:b6:
90:f4:1a:41:8b:e7:37:13:3f:c2:59:b7:6b:ea:ac:8a:29:16:
fe:5a:49:dc:ba:23:87:6d:df:45:01:0d:c7:a9:97:fe:b2:0a:
a0:85:51:b0:80:71:f4:70:64:00:59:13:a5:28:40:73:53:d9:
5e:bc:e0:4c:4b:20:c2:82:dd:18:7c:48:d3:de:6d:4c:6d:81:
d4:6d:cc:66:3f:d4:04:b0:81:94:96:83:ad:23:ce:25:39:d2:
da:9f:0c:c7:c3:ed:47:e6:d1:46:5e:29:b3:d1:0a:19:9d:72:
97:4b:c6:1c:7d:0e:ee:4d:a7:55:ed:74:91:63:f1:ab:22:16:
e2:3d:7a:bb:c2:2b:55:e4:fd:ee:3d:64:63:54:58:0c:fa:e9:
32:1d:2d:77:ff:fa:cd:f4:6d:dc:12:a3:cf:d1:92:68:20:bd:
7d:07:f3:bb:70:fd:d1:3a:0f:6e:3d:d6:ba:76:a8:76:4f:74:
dc:e1:0d:77:2c:ae:c1:99:6d:77:9f:10:1c:66:a8:02:4e:7c:
b5:d6:8d:2d:a3:48:16:86:43:4f:9b:d4:54:1f:dc:a1:1f:34:
f0:26:b3:3b:72:5c:95:26:b3:cb:e2:3b:92:39:c6:2d:b0:1f:
cc:09:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:30 2025 by rpki-client