Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e37302e302f32342d3234203d3e203432333636.roa
File: 3139332e34332e37302e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: Wku6RrsBPzhvF2A+KsH7USv8J+dxgHrnRy101MwlauM=
Subject key identifier: 9C:8B:B0:16:96:F7:81:76:07:C7:3D:01:6F:F4:A9:B3:42:07:BD:4B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0F3AE127D1307C3FF425F3F34B94C471B5C05505
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e37302e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:17:58 +0000
ROA not before: Mon 10 Apr 2023 08:12:58 +0000
ROA not after: Mon 08 Apr 2024 08:17:58 +0000
asID: 42366
IP address blocks: 193.43.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:3a:e1:27:d1:30:7c:3f:f4:25:f3:f3:4b:94:c4:71:b5:c0:55:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Apr 10 08:12:58 2023 GMT
Not After : Apr 8 08:17:58 2024 GMT
Subject: CN=9C8BB01696F7817607C73D016FF4A9B34207BD4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:b1:43:26:2d:4c:6e:6d:ba:34:75:fb:47:
5e:14:62:05:58:44:47:0d:8d:34:f3:d6:d6:bd:66:
15:90:ae:b9:c2:2d:23:cb:a9:ae:62:76:b5:b3:e3:
80:c8:ff:85:2b:c9:df:bd:8a:42:35:2a:0a:49:e1:
bc:b1:38:e8:55:d8:1e:3a:47:92:08:2c:69:88:21:
5f:af:22:e1:37:47:f5:c1:4b:09:bf:c9:3a:66:1c:
b9:ee:ad:7e:60:37:c3:f0:20:e4:5b:62:8b:2e:c5:
46:96:3c:7c:26:25:f3:45:7a:33:87:26:11:f9:18:
2a:cf:fd:bb:1b:9e:3b:a4:db:2b:c6:8c:ab:8c:9f:
fd:25:f0:66:6a:22:cd:76:db:9c:20:4b:95:6e:80:
f8:ea:49:10:66:67:e2:7b:95:be:5d:e1:a6:45:2d:
ba:5a:4e:bb:0c:6f:f2:3b:cc:cc:e3:f5:12:6a:00:
c8:ff:cd:92:16:69:83:01:5f:c3:87:c6:aa:e7:8f:
7d:cf:e5:d8:de:4a:ae:d5:e6:f0:dd:5d:b0:f1:e0:
8f:7b:60:02:ac:a1:a1:d3:74:14:5b:c0:11:13:19:
53:b8:08:b5:d1:9a:e1:cd:d9:f6:aa:15:82:64:50:
a3:11:3f:db:1c:c9:73:0f:8a:84:fa:91:9f:0f:b6:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8B:B0:16:96:F7:81:76:07:C7:3D:01:6F:F4:A9:B3:42:07:BD:4B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e34332e37302e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c0:03:c6:f4:ec:c9:36:03:d6:72:b4:b0:fa:df:62:2c:9f:
6a:c3:ec:4e:1e:90:a0:17:8e:fc:f4:26:e3:f0:71:f8:28:97:
53:7b:28:99:d1:25:6b:4e:6f:51:b6:d9:28:5c:3e:b8:42:c3:
82:5c:61:6c:be:f5:6a:3d:b8:b2:e8:ff:49:43:b9:ad:3f:3f:
7d:fe:e7:2d:82:15:b2:ff:c9:61:6c:08:ed:d8:fd:d7:f2:b9:
0e:11:65:ed:b2:29:f7:2a:54:0a:41:a5:3e:77:21:01:7c:e8:
88:8a:5f:b6:a0:e5:f7:b8:22:49:eb:13:b3:35:e0:56:5c:2f:
1b:85:8f:0c:68:f3:16:f5:81:52:cd:a2:8f:9a:90:f0:c9:a0:
65:eb:0d:fd:bd:1a:2f:e7:17:ef:4d:6a:14:7d:41:64:d9:34:
64:f1:25:31:0e:c1:b0:82:83:77:84:8a:6b:3b:1e:56:84:73:
c1:f4:3f:2b:62:16:9b:fc:19:9a:b5:df:b7:c4:99:18:3e:97:
ea:ae:e7:57:4e:c0:20:9b:06:72:9e:79:e2:37:b1:32:42:96:
f6:35:ad:5a:37:80:fd:21:9c:d8:b7:87:cd:70:f3:87:e2:a7:
36:9f:82:26:ea:39:de:a5:c0:0d:74:b2:a5:74:b2:d4:77:f5:
19:b6:e2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:34 2025 by rpki-client