Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3233322e302f32312d3332203d3e203531313637.roa
File: 36322e3134362e3233322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: zO6kdqXDsDlnuU0LB5DswZy0xnbRW05gyWON6bs5GLM=
Subject key identifier: 93:E1:C2:33:88:03:4C:91:8C:C5:CA:58:06:98:61:C7:54:0F:76:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 36718BF79B74584F72B15B269DD5DAA2604AF53C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3233322e302f32312d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:28:56 +0000
ROA not before: Mon 27 Mar 2023 08:23:56 +0000
ROA not after: Mon 25 Mar 2024 08:28:56 +0000
asID: 51167
IP address blocks: 62.146.232.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:71:8b:f7:9b:74:58:4f:72:b1:5b:26:9d:d5:da:a2:60:4a:f5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:56 2023 GMT
Not After : Mar 25 08:28:56 2024 GMT
Subject: CN=93E1C23388034C918CC5CA58069861C7540F7679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:93:4b:1e:c2:d8:cb:1e:cf:b1:62:27:89:
cf:59:71:f3:b1:0e:31:d0:15:96:81:c0:6c:8e:9b:
51:bb:dd:1d:6b:80:38:68:f5:1a:8e:b0:c1:42:ad:
3a:03:e4:72:d1:24:b5:2f:3d:8e:58:0d:24:5e:c1:
b3:ce:18:88:9a:8d:4a:0d:bb:2d:85:7f:c2:89:db:
69:61:4a:e5:f6:f1:8b:39:00:61:ce:40:bb:93:ed:
db:fc:bd:c8:7e:35:c2:25:b2:21:fa:56:21:ff:ab:
0f:61:99:78:3a:ec:52:89:6b:30:e1:5c:0d:45:71:
c9:14:bf:55:85:ed:7b:a8:6a:4d:d4:11:2c:38:15:
43:03:f1:8a:38:ea:f5:35:cc:49:07:13:fb:7d:92:
65:d1:81:19:c5:b1:41:9f:4d:6b:81:3c:a6:08:2e:
a4:44:51:3f:ca:78:32:4d:14:56:a5:13:66:2c:e3:
2e:39:95:21:2e:64:4f:3a:7c:23:b6:c2:8a:51:e1:
58:31:a4:8a:da:92:ac:f1:17:54:31:3c:91:46:70:
99:5d:3a:6c:4d:3d:77:a4:f8:74:74:91:43:55:12:
32:e1:d1:cb:71:29:7c:98:46:1c:5d:84:ac:60:0a:
ea:85:e6:a6:a8:a4:9b:40:e0:39:fe:e0:96:81:a6:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E1:C2:33:88:03:4C:91:8C:C5:CA:58:06:98:61:C7:54:0F:76:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3233322e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.232.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:42:78:e8:f0:78:22:23:6f:ba:99:26:e4:8e:ea:8b:ad:f5:
f1:ce:64:80:d6:e6:2f:12:a7:c1:cd:a9:5d:7a:e5:81:72:97:
8d:02:61:f7:39:6d:cc:53:58:cc:b4:69:d8:84:78:2f:7d:96:
1b:07:fb:02:dc:f3:36:c7:32:29:09:fc:81:21:4e:36:dd:62:
26:cd:ce:fd:21:46:7e:d3:fd:df:3b:e6:8f:fe:a0:11:b0:d7:
c0:35:fa:71:3d:7b:29:60:9d:f3:c8:ec:7b:42:c2:c1:fc:f6:
39:88:b5:4a:e9:ba:a4:fc:d0:fe:a4:40:d2:fe:c8:c3:07:9a:
7e:9e:a0:ff:2c:8d:68:b3:a9:47:70:23:bd:e8:11:b4:05:65:
57:ad:f6:49:c1:9a:72:ea:de:da:9f:a4:f7:43:82:a1:dc:42:
ad:8b:f1:a5:9d:b7:41:a7:b3:e3:19:77:86:c7:69:9f:ee:68:
1f:b1:fa:a6:08:48:21:0e:d9:ae:a2:65:e1:14:39:d7:8c:c4:
57:57:c4:c0:cf:5a:2a:5b:2a:e5:ea:7c:18:88:5b:a9:3d:6f:
48:76:88:81:57:4e:65:87:0e:fa:25:4d:9b:2d:1c:94:71:23:
ce:ec:7c:7d:6a:79:d7:31:58:3b:bd:9b:41:02:a7:05:63:5a:
cf:96:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:21 2025 by rpki-client