Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233372e302f32342d3234203d3e203432333636.roa
File: 38352e3139302e3233372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: DPJXBBr8Mc6pQtFVspVCDGblaRbulYf81oMcBRDJpbM=
Subject key identifier: D4:61:65:74:57:65:F0:5C:72:45:54:04:48:F3:00:AA:52:E3:C3:D4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34660F21F98194229910B740EEFD21D96534F287
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233372e302f32342d3234203d3e203432333636.roa
Signing time: Tue 25 Apr 2023 17:57:26 +0000
ROA not before: Tue 25 Apr 2023 17:52:26 +0000
ROA not after: Tue 23 Apr 2024 17:57:26 +0000
asID: 42366
IP address blocks: 85.190.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:66:0f:21:f9:81:94:22:99:10:b7:40:ee:fd:21:d9:65:34:f2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 17:52:26 2023 GMT
Not After : Apr 23 17:57:26 2024 GMT
Subject: CN=D46165745765F05C7245540448F300AA52E3C3D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:c5:ea:20:d1:d4:11:48:23:65:20:93:07:
ae:01:9b:3c:46:bb:24:d2:98:2a:04:7a:f3:dc:f0:
12:c8:4c:9b:1b:f3:55:5e:79:be:11:22:8f:eb:fb:
17:37:fd:e9:a2:a5:34:d4:09:df:e9:68:43:54:2d:
97:3b:df:80:39:8c:ad:f8:a2:38:f5:4c:d2:94:28:
b1:77:6d:1d:42:f1:b5:b4:0d:36:c9:ac:28:c4:bd:
89:82:bc:09:e7:3a:fa:1b:e6:3f:56:31:47:75:eb:
9c:5a:d3:85:fe:5b:52:4b:cb:51:0d:b9:ea:45:27:
4a:cd:ec:ba:39:b8:4f:8f:4d:ba:55:30:4d:8c:69:
9e:06:bf:3f:fd:1d:e5:98:67:69:47:72:10:51:eb:
c9:3d:bf:6c:25:ad:c8:59:77:df:69:3f:ce:73:6d:
0e:b0:03:f1:a7:0d:bf:2d:f7:29:5e:ee:e9:45:0f:
14:d3:eb:75:f6:66:8d:8f:e0:68:3f:41:cf:ec:dc:
cc:2d:7d:3e:b7:06:de:62:8e:12:35:be:91:85:0b:
6b:c9:bb:c1:c6:47:8d:9d:6c:24:b1:7a:45:f0:54:
d2:0e:03:2b:a6:a7:2f:0b:b7:7c:c3:10:61:e3:de:
1b:5e:77:b3:c4:8e:4a:98:ed:84:4f:a6:26:6b:fb:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:61:65:74:57:65:F0:5C:72:45:54:04:48:F3:00:AA:52:E3:C3:D4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233372e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.237.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9d:9f:75:a1:d6:c4:19:ae:1b:3d:96:fe:d7:3e:67:f0:39:
1c:47:61:03:c4:72:8c:94:90:2a:b0:66:38:06:f1:2e:92:f4:
ab:0e:51:f8:20:90:21:9a:60:1f:8f:7f:0b:cc:a2:10:8f:95:
ec:3c:87:fb:12:54:2b:b6:49:8b:20:0b:b9:2c:bc:d5:50:4b:
b9:34:3b:2d:01:66:49:c3:73:dd:16:91:0d:c4:06:2f:1c:50:
67:06:2d:d6:bf:f1:0a:23:1f:f5:30:4f:0a:95:dd:54:da:c6:
e1:a5:fa:75:67:eb:ed:3d:e7:38:a2:9f:a0:8d:67:16:b2:22:
63:6c:33:88:5e:77:5a:39:1c:26:5c:62:25:5f:4e:37:b2:86:
e0:c0:f3:74:a6:f2:5c:4a:a9:5a:28:dc:e1:43:9c:85:de:be:
e7:ce:9e:7d:31:a8:53:78:61:ad:6b:a8:32:23:93:31:dc:d9:
0c:ac:fc:96:94:26:70:48:e6:6a:a5:26:46:4a:6a:db:00:4f:
4e:d0:de:63:5c:48:71:76:c9:3f:f6:19:19:d4:dd:f0:d1:59:
51:51:36:bb:d1:84:19:93:d4:c5:1d:6f:ce:ff:4e:82:47:c1:
aa:a5:a6:b7:d4:7f:5a:54:5d:c9:2f:09:1e:d2:50:e5:8b:3d:
25:5c:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:37 2025 by rpki-client