Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39312e302f32342d3234203d3e20333238333737.roa
File: 34352e31342e39312e302f32342d3234203d3e20333238333737.roa (raw, json)
Hash identifier: RLYrMGFM8jZ4cS39OtpYNH4yQculUyefp+kT7ecnhDc=
Subject key identifier: D5:63:8F:8F:5C:DC:91:48:55:BB:8E:0C:9A:75:AA:CE:D5:0F:74:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3439EDAD3431D6B51DEF50C80D97EDA10BA70CB7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39312e302f32342d3234203d3e20333238333737.roa
Signing time: Mon 27 Mar 2023 08:28:21 +0000
ROA not before: Mon 27 Mar 2023 08:23:21 +0000
ROA not after: Mon 25 Mar 2024 08:28:21 +0000
asID: 328377
IP address blocks: 45.14.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:39:ed:ad:34:31:d6:b5:1d:ef:50:c8:0d:97:ed:a1:0b:a7:0c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:21 2023 GMT
Not After : Mar 25 08:28:21 2024 GMT
Subject: CN=D5638F8F5CDC914855BB8E0C9A75AACED50F7400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:63:3a:9f:58:de:02:85:3c:18:ac:77:8d:
11:52:d0:68:87:42:a1:0c:32:e8:71:70:33:76:78:
d2:f9:57:9e:3d:9d:ec:c8:a6:18:ab:93:4f:85:d4:
f5:42:77:d0:c9:3d:14:27:7b:7d:ef:91:ea:b8:69:
03:5e:f7:01:43:77:ac:02:59:dc:9b:da:74:1d:8a:
73:3f:5b:d9:a5:9c:d5:a1:ba:c4:ec:c7:5b:83:83:
6f:3b:90:1e:5e:e6:c8:29:5c:6f:c5:be:e9:c7:02:
0c:b0:a2:60:5e:b3:98:e0:9c:ba:93:ae:54:d6:07:
27:ae:e3:a4:86:4a:89:ec:08:ac:56:0f:5f:f1:61:
1e:3b:fb:8d:39:ea:90:af:92:5e:8c:4d:94:37:2e:
0e:ea:ad:ce:4d:f9:83:8a:80:1e:b6:c2:b4:7a:84:
52:85:36:f4:cd:b3:8d:25:76:60:56:f9:b7:e0:d6:
5b:71:06:fb:93:1d:e4:f0:07:9f:9e:da:1b:ff:38:
d6:32:8e:0a:dc:59:3d:0c:62:2e:11:3a:0a:22:c4:
76:cf:4b:e0:86:2e:82:87:92:fb:23:8d:2b:7a:22:
c9:03:ab:39:40:b5:a0:4c:54:6b:58:42:10:fe:a6:
77:9e:bf:a0:61:bd:d4:60:68:5e:31:0d:49:6a:1a:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:8F:8F:5C:DC:91:48:55:BB:8E:0C:9A:75:AA:CE:D5:0F:74:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39312e302f32342d3234203d3e20333238333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.91.0/24
Signature Algorithm: sha256WithRSAEncryption
75:07:34:56:cb:82:80:74:e7:1c:e0:2f:3a:f6:4c:f5:99:23:
91:52:a3:2c:21:1f:dc:b1:79:af:b3:58:69:07:d0:1d:7f:69:
b8:31:d7:43:f1:89:f8:7d:e0:e6:3f:80:93:d7:b5:ab:3a:3d:
37:4b:4c:58:a7:f7:d2:8b:df:f8:37:b2:0e:8f:0f:96:e1:29:
19:74:d1:9a:ea:74:65:00:af:f8:1e:42:65:ea:02:9a:ff:bc:
b7:ea:c0:df:c5:7c:f0:32:92:24:c7:59:25:a9:0f:4f:06:c1:
b6:75:7f:99:fb:2d:e8:7f:e9:d4:10:33:6c:ca:a3:7b:7d:80:
0a:fb:aa:bc:28:3b:24:cd:67:40:77:84:e7:48:df:c6:55:ce:
85:7d:b2:1d:41:9b:52:52:21:0d:5e:3d:51:23:23:5a:66:54:
3e:a8:b1:96:49:0e:fd:e7:59:59:7b:8c:f7:23:be:8c:2b:f9:
e4:ff:d8:38:12:ca:2b:08:8e:85:59:9c:a1:ea:12:8a:28:66:
4d:b4:9c:76:be:d0:ac:c3:6f:24:d1:85:64:7e:ab:f8:02:d9:
d8:5c:77:5e:55:54:03:a6:cc:f2:48:44:b4:58:e3:cb:cc:aa:
46:b3:8a:c6:b0:d3:02:fe:cc:6b:08:c3:5f:03:6e:47:e7:4a:
1c:9c:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org