Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39302e302f32342d3234203d3e20323636303530.roa
File: 34352e31342e39302e302f32342d3234203d3e20323636303530.roa (raw, json)
Hash identifier: RRV/s/tjPE1KcuVv1spDsSSok6gG10UUeZICGxUTnlE=
Subject key identifier: BE:81:5F:83:EF:80:07:3C:3E:9A:6C:71:E5:2D:31:09:B7:ED:4F:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 38FD07AF81499B7618AC59983CD40CD27045F1F8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39302e302f32342d3234203d3e20323636303530.roa
Signing time: Mon 27 Mar 2023 08:28:30 +0000
ROA not before: Mon 27 Mar 2023 08:23:30 +0000
ROA not after: Mon 25 Mar 2024 08:28:30 +0000
asID: 266050
IP address blocks: 45.14.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fd:07:af:81:49:9b:76:18:ac:59:98:3c:d4:0c:d2:70:45:f1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:30 2023 GMT
Not After : Mar 25 08:28:30 2024 GMT
Subject: CN=BE815F83EF80073C3E9A6C71E52D3109B7ED4FC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:76:5c:b5:cd:d1:12:db:e6:1d:19:4d:0b:
7f:c0:92:10:41:2c:0f:27:5b:7e:6f:4b:8b:af:3c:
dd:06:ae:b4:e8:c3:d8:4e:d4:c9:5e:ec:42:0c:09:
dc:21:7a:80:7f:c6:6e:ea:74:23:30:36:06:40:49:
a2:28:78:23:4e:95:5d:8c:83:38:ec:19:a5:79:fa:
2e:df:d8:89:ec:e9:a3:1d:0b:8b:57:cd:42:4b:22:
f7:7b:61:67:1b:44:c5:9f:f3:bd:3b:e5:0a:ab:9f:
50:04:f0:69:b7:6e:80:53:02:8f:e4:b9:ce:7f:21:
40:55:a9:f3:28:45:db:29:a1:0c:dd:eb:82:c8:ce:
e2:3a:06:9c:62:fb:31:18:58:43:08:2b:ea:cf:f5:
72:bf:b8:09:ed:3f:75:99:f2:08:8b:67:7a:ae:39:
52:ed:91:be:e5:1a:5d:21:77:aa:31:d3:55:4d:a9:
86:2a:5a:0a:33:d7:ec:27:e5:7b:ec:e9:d5:9d:48:
28:8f:00:d3:0e:ee:88:80:ea:c0:ae:d8:95:66:b4:
f8:d4:d3:6f:40:cb:5d:06:a5:3a:62:c7:19:75:28:
64:d2:9d:40:8d:e7:e2:24:94:aa:81:ba:15:b8:af:
23:1d:17:d2:64:93:69:e8:93:ed:bd:28:f5:5e:7c:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:81:5F:83:EF:80:07:3C:3E:9A:6C:71:E5:2D:31:09:B7:ED:4F:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39302e302f32342d3234203d3e20323636303530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.90.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0d:21:d0:9a:31:69:ff:c9:6f:b9:26:7b:33:22:2f:2d:00:
34:31:15:39:d3:c6:36:04:5e:c2:16:a6:dc:9a:78:c8:ec:8a:
89:23:5b:cc:d0:e8:c5:11:13:e2:97:a3:bb:0d:12:6f:4e:7b:
9b:66:cc:4f:26:d3:ae:ae:92:7a:fc:c9:7b:b9:36:b2:66:bf:
23:6b:99:29:ca:7d:55:ce:3e:a5:d5:df:70:25:b5:33:30:75:
95:da:f9:bd:7c:4f:fb:9b:0c:95:d0:50:f5:7e:dd:f8:99:68:
80:b5:5b:e6:58:2d:03:19:a2:c5:ad:94:6e:2c:32:4f:fe:a8:
dc:16:e0:b8:21:01:f4:b2:bb:9e:23:79:ab:9a:27:99:f7:15:
d3:7d:14:b3:f2:ff:f8:a8:2a:6c:55:bb:0b:56:9a:12:66:8c:
54:c7:a9:1f:66:b4:d7:59:c0:c6:46:6f:b6:03:12:45:f6:45:
0f:a0:e0:30:59:29:1e:cd:17:63:cb:c3:36:9d:7a:13:59:e1:
b6:48:a8:b1:3c:a0:ce:a4:98:ff:4d:e6:86:4c:e3:80:5e:b1:
d6:b4:88:5a:58:d6:c4:e9:a9:70:b6:eb:94:f6:c3:62:25:be:
81:a9:94:3c:d1:50:b1:25:50:89:24:dc:6d:0c:91:05:ce:0e:
66:0b:94:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org