Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39302e302f32332d3234203d3e203631333137.roa
File: 34352e31342e39302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: wu4GwlG0o7EeUNTexb0g9HQVntkBzgT7jIaMtw9cxHA=
Subject key identifier: 32:BC:12:42:D8:4A:05:61:31:96:59:20:80:75:EE:F9:92:E4:C2:02
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21551916BBF3E5E72565EE3227BE541D77FD280F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39302e302f32332d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:28:21 +0000
ROA not before: Mon 27 Mar 2023 08:23:21 +0000
ROA not after: Mon 25 Mar 2024 08:28:21 +0000
asID: 61317
IP address blocks: 45.14.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:55:19:16:bb:f3:e5:e7:25:65:ee:32:27:be:54:1d:77:fd:28:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:21 2023 GMT
Not After : Mar 25 08:28:21 2024 GMT
Subject: CN=32BC1242D84A0561319659208075EEF992E4C202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:ee:01:2a:5c:7f:b1:82:c6:00:59:2a:ef:
58:f6:06:75:54:0c:f7:19:ee:1a:4e:9d:52:5e:37:
69:d3:7e:cf:2e:f4:16:d0:26:12:f6:90:f6:93:51:
90:63:d0:91:da:98:c5:f0:33:ce:fa:2a:3e:48:85:
67:4d:86:20:85:8b:ac:bf:a3:db:e4:2e:40:0b:a0:
bc:00:98:fb:63:ea:83:e4:00:c7:0c:66:dc:dd:31:
8d:fa:bc:16:93:bf:5d:42:39:1e:3e:bf:ab:cb:1a:
bf:36:f3:e0:86:89:48:f3:d8:9d:97:77:d8:be:be:
91:f8:d0:c5:82:95:ae:2d:e5:a4:fb:f4:f8:ee:39:
4b:2d:e4:dc:90:7a:74:24:19:d9:91:11:be:b8:7f:
16:6d:55:7f:aa:7e:82:45:32:62:5c:85:a5:02:b3:
22:05:1f:fc:e7:d1:6f:24:84:2f:a3:c8:49:bf:b6:
38:9e:62:00:6c:f8:d7:88:60:a9:2d:14:28:99:fc:
4e:9f:09:5d:98:a8:fd:ce:35:6b:f3:a8:71:7e:5f:
9e:05:d4:9b:c0:16:00:45:17:c4:f9:fb:54:e5:e9:
58:cc:44:22:17:03:19:52:04:52:ae:71:0c:e4:a8:
9d:d9:ec:04:c2:72:7f:d3:5b:0f:23:0e:d8:0e:f9:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:12:42:D8:4A:05:61:31:96:59:20:80:75:EE:F9:92:E4:C2:02
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39302e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.90.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:94:ad:70:f4:00:77:40:4e:d7:b9:07:2f:65:ef:e9:79:50:
f9:b0:76:a3:ec:29:83:20:14:e6:f9:62:e1:6b:78:73:37:e0:
95:c8:6b:ef:27:6a:18:cc:e8:49:2e:a9:0e:70:b3:95:cc:b0:
e8:5e:09:45:8d:48:9d:7b:db:9a:db:0a:93:3b:37:ba:b1:ca:
86:b4:56:e9:39:e6:f5:2e:3f:88:e3:56:d4:88:c9:41:40:52:
f7:4b:6b:c3:d6:70:41:96:2b:60:75:07:05:7d:7f:55:5b:51:
9d:e7:e3:51:ae:9b:7f:d3:10:a3:35:87:39:18:11:79:a7:c6:
5f:fd:bc:61:45:c0:14:b6:da:29:d5:44:a8:02:58:68:d6:2f:
fd:e3:87:06:1b:ac:17:e4:22:a1:dc:87:b3:de:09:7f:a1:93:
0d:76:ca:75:c7:4b:cc:7b:cf:a3:c7:6d:4d:9b:bf:2c:03:26:
44:ea:23:ac:2a:78:83:55:98:a8:b5:be:7d:6c:ec:13:cd:d8:
e2:61:98:03:d4:c4:38:a3:92:f2:3c:5c:bc:ff:97:58:e7:e6:
88:05:9f:62:ec:c2:cb:82:ef:2c:26:78:43:05:cb:58:8a:72:
66:76:6c:6c:ae:66:62:c7:83:88:9f:bc:7c:d7:6b:fc:02:64:
05:17:73:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:02 2025 by rpki-client