Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e37322e302f32312d3332203d3e203531313637.roa
File: 38302e3139302e37322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: BBBs/92SCVpIQ2npQqz+Vks2DEK4sicdk1TYowylNoE=
Subject key identifier: 13:5B:04:41:E2:E8:65:F0:4C:39:F5:AE:75:68:83:0C:74:22:C9:67
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 29772694B630CDBF3684FBB0D2D00DF1DECC3ADA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e37322e302f32312d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:28:41 +0000
ROA not before: Mon 27 Mar 2023 08:23:41 +0000
ROA not after: Mon 25 Mar 2024 08:28:41 +0000
asID: 51167
IP address blocks: 80.190.72.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:77:26:94:b6:30:cd:bf:36:84:fb:b0:d2:d0:0d:f1:de:cc:3a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 08:23:41 2023 GMT
Not After : Mar 25 08:28:41 2024 GMT
Subject: CN=135B0441E2E865F04C39F5AE7568830C7422C967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:58:26:57:74:bd:4f:e9:b9:97:3c:f5:0a:
64:d2:b4:0e:13:d8:a4:06:8d:b1:d0:a9:93:10:d0:
78:32:6b:34:f2:74:d6:58:2c:d5:b1:6e:2e:08:cd:
53:d6:10:6b:b6:51:5d:a7:2d:c8:34:73:a9:bd:fc:
cc:d9:34:5a:28:cc:40:2b:1d:33:fe:77:40:a7:95:
4f:7e:93:0d:28:fc:cf:fa:b5:c0:46:ef:c2:25:2d:
4e:d0:83:27:ea:e7:28:44:7d:ee:e2:c8:f1:bb:85:
fd:75:3a:62:f6:d7:e6:11:15:f7:e6:b2:5a:53:02:
f8:15:ac:ce:2f:46:81:74:fa:34:0d:e5:4c:35:1d:
c1:95:6c:fc:4a:83:a0:d0:58:89:95:8b:ca:ca:8c:
8e:e1:76:72:ab:e2:87:5e:37:8e:f4:3c:28:10:ca:
0e:1e:89:33:38:22:d7:f6:5c:e1:40:8b:e8:c5:b6:
70:e7:17:09:d1:68:45:7c:bd:64:09:28:65:38:98:
b1:66:f0:74:ca:af:c8:93:e0:f5:37:01:8c:36:e0:
46:b1:78:33:74:3b:8a:6d:a5:9e:da:5c:b5:67:f7:
66:ef:30:6c:e8:97:24:b6:62:f0:56:94:23:43:9e:
4e:84:00:00:8d:ac:a5:3d:01:2e:fd:2a:83:7d:1f:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5B:04:41:E2:E8:65:F0:4C:39:F5:AE:75:68:83:0C:74:22:C9:67
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e37322e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.190.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:33:e3:c5:1e:1c:79:fb:2a:69:c4:8c:40:61:d5:75:e4:e1:
4d:0b:86:40:b2:59:5b:80:65:df:0f:13:91:03:f7:5a:18:ab:
80:aa:5f:b4:bc:a7:22:66:a7:72:d3:4d:35:ac:d7:47:6a:39:
4d:a7:a2:45:2f:99:fb:09:b2:7a:3d:3a:53:29:fb:df:08:ee:
29:da:02:1b:e8:c4:cf:51:53:8c:76:f5:e8:ca:ae:47:a5:9a:
66:f0:f3:84:82:bd:c0:70:d0:58:d4:44:8e:b7:f7:19:e8:7f:
2d:96:1a:e9:ef:d2:48:ad:88:f3:2d:66:43:1c:f5:09:b9:b9:
2c:da:21:1b:9a:30:b1:09:de:a4:cb:d9:e9:f3:f8:36:6b:f5:
c9:11:bb:39:f1:f4:6a:20:dd:76:d8:73:95:4f:dd:6a:44:0b:
f1:68:9e:7c:01:d6:f7:f7:41:73:52:9c:c3:c6:cd:c5:1f:4e:
58:8d:09:71:8b:bb:58:a1:51:0d:99:9f:08:42:5e:a9:48:f6:
5e:77:e1:44:a6:45:91:44:ab:72:c6:22:a5:a3:7b:ec:3c:3d:
13:e9:39:d2:57:04:ef:7c:ec:c9:23:42:6e:56:13:71:a8:8a:
25:60:43:70:e8:18:39:ff:fc:0d:4c:aa:59:4b:ab:a0:67:5c:
cf:7f:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:19 2025 by rpki-client