Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e36392e302f32342d3234203d3e203432333636.roa
File: 3139332e34332e36392e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: c6qsQw6eceSlo73TwRQiRo6r+/bBK/3n0ZLbmcHmfas=
Subject key identifier: 49:D8:3B:0A:9F:97:90:F2:16:65:2A:D0:1A:5E:74:25:23:35:2C:F4
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6DD0C38F5A65DB4F112C1F9679D68CD96BAE652A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e36392e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:17:52 +0000
ROA not before: Mon 10 Apr 2023 08:12:52 +0000
ROA not after: Mon 08 Apr 2024 08:17:52 +0000
asID: 42366
IP address blocks: 193.43.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d0:c3:8f:5a:65:db:4f:11:2c:1f:96:79:d6:8c:d9:6b:ae:65:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Apr 10 08:12:52 2023 GMT
Not After : Apr 8 08:17:52 2024 GMT
Subject: CN=49D83B0A9F9790F216652AD01A5E742523352CF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:b2:c2:00:11:fc:17:dd:df:c1:51:56:f9:
f6:69:8a:e0:3e:62:f9:05:d3:37:67:05:e4:74:5d:
a0:24:d6:9a:ea:82:88:b6:6e:37:8e:0e:ea:82:cb:
8a:fd:ee:d5:e0:cf:a2:37:35:5b:f0:37:f6:41:ab:
99:b2:b2:1d:7d:4f:90:be:70:93:46:ba:eb:2f:34:
91:3f:c0:d4:e2:be:7c:31:c8:62:ec:3e:a4:70:62:
7b:c6:0d:24:c4:e3:a9:e5:43:e1:b9:3d:82:49:00:
07:f6:5b:d9:07:7e:cc:b4:57:44:6c:64:fd:d1:9b:
12:89:ad:35:e6:61:0d:e7:4d:10:b3:d0:fa:24:cd:
09:64:c1:84:41:80:25:5d:f7:23:78:6c:01:b6:60:
7c:85:48:5f:b4:3f:86:4f:91:60:50:f7:f7:c8:26:
f1:74:83:df:7c:3b:3a:fa:1f:15:eb:5f:9b:31:15:
28:0f:0b:b9:b5:79:20:4c:7a:1d:86:b7:ee:86:4b:
52:ea:e4:6d:2a:2a:f8:cd:62:de:ff:e8:78:e1:d0:
18:f6:87:7a:58:55:0b:df:24:49:bf:2f:b3:d9:58:
3b:28:c0:7a:84:89:bd:a9:39:98:5b:c9:57:66:ae:
77:8f:ff:4b:ec:36:d0:db:51:d0:bf:5c:5c:6f:5d:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:3B:0A:9F:97:90:F2:16:65:2A:D0:1A:5E:74:25:23:35:2C:F4
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e36392e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.69.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5d:39:fb:ea:df:fc:78:bf:96:86:d3:4d:a7:e8:e9:8c:0a:
6b:9a:b9:8c:31:32:76:69:ea:de:1a:44:06:29:f6:1e:02:20:
b5:e7:86:6d:b8:cc:cb:64:2d:6e:5f:2b:ac:80:aa:0c:a1:00:
34:a6:6c:a2:3a:99:7a:0b:a8:11:6f:b9:05:36:29:4f:fe:6c:
61:7b:7f:28:2c:ea:96:7d:4a:5f:1e:e5:ac:c6:06:5d:30:57:
7b:0f:ec:a4:28:2b:fd:31:ec:1a:58:00:1d:fa:8d:35:5c:ad:
9f:45:4f:2c:17:75:44:70:a3:64:86:6e:78:c0:f7:e9:29:27:
91:ec:de:d9:a1:ac:95:8f:d5:41:0a:e6:36:9d:9d:1a:c1:1f:
a7:bb:25:53:84:cd:47:20:e2:e7:35:45:4a:cc:6f:b2:44:45:
1f:8e:d3:ff:b3:0e:0f:e6:4d:17:e3:cb:d0:dc:fc:32:e7:4e:
42:de:0e:0b:f4:cc:46:73:fe:9a:ec:ee:fc:7d:35:9b:1a:65:
10:97:cb:da:4e:7e:5d:a7:a2:d2:64:00:50:4e:f6:7e:a2:a8:
77:f2:9e:2b:da:a0:8b:9a:45:2a:13:81:ac:5b:5a:90:44:6d:
16:a7:75:78:48:c6:ef:cc:50:f4:10:ec:0d:4f:50:46:69:e1:
af:f5:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:52 2025 by rpki-client