Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32332d3234203d3e203631333137.roa
File: 352e3138322e33342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: xp6Ru3WlSESPO8zvmq6fa89N8b9rwt05ctQavQLVGTA=
Subject key identifier: 79:CF:E8:BE:5D:30:A7:14:17:6E:7C:72:F9:C6:BF:F3:B7:06:0B:B4
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 76263E8D15F89D2E91892322497E7B3F7EDB69AE
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32332d3234203d3e203631333137.roa
Signing time: Mon 27 Mar 2023 08:27:10 +0000
ROA not before: Mon 27 Mar 2023 08:22:10 +0000
ROA not after: Mon 25 Mar 2024 08:27:10 +0000
asID: 61317
IP address blocks: 5.182.34.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:26:3e:8d:15:f8:9d:2e:91:89:23:22:49:7e:7b:3f:7e:db:69:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 27 08:22:10 2023 GMT
Not After : Mar 25 08:27:10 2024 GMT
Subject: CN=79CFE8BE5D30A714176E7C72F9C6BFF3B7060BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:86:34:a3:23:9e:94:a0:39:41:ff:54:6d:
4a:d0:48:31:fc:1a:92:dc:86:3b:c0:cd:5e:e4:1b:
27:6e:58:37:e7:ae:2e:e3:9c:5c:fb:fd:df:28:70:
ba:27:dc:a5:39:ab:a2:ee:e6:13:16:63:a6:4f:7a:
5a:48:fb:fb:15:c4:19:8d:23:17:83:4e:4e:73:6f:
ab:b7:bc:ce:5e:c5:5d:0e:9a:7f:23:05:84:35:50:
f4:5e:23:81:41:8c:8e:48:92:77:53:6a:15:ae:b2:
a5:f9:ac:95:01:d6:af:bc:db:1c:e5:89:b2:f7:c5:
a2:25:61:79:b8:c0:9d:9a:1f:8a:9a:d7:16:b5:de:
68:64:01:a7:2d:25:f0:7f:31:a4:cd:f6:64:37:50:
a5:7c:d5:46:a1:b7:06:cf:9c:93:2d:a3:cb:aa:0c:
ec:e5:87:74:38:1c:b8:19:e8:53:09:be:7a:77:09:
1a:f0:ba:4b:24:6d:3c:91:f5:00:fd:a2:6d:eb:96:
09:26:48:63:29:b1:4b:ad:8d:a8:71:7a:79:fd:59:
53:2f:79:51:f7:4d:8a:f5:15:9b:17:12:54:51:31:
ba:7e:92:bd:3a:62:ca:1f:8c:f0:c9:e7:3d:4d:46:
57:b8:82:70:1e:3f:4d:df:2d:ae:b6:5a:8c:95:29:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:E8:BE:5D:30:A7:14:17:6E:7C:72:F9:C6:BF:F3:B7:06:0B:B4
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.34.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:2f:93:8a:90:76:ea:00:9d:b0:8a:c2:49:30:5b:77:fd:81:
97:d2:a1:91:1c:f9:f2:51:b0:90:7b:d5:ff:3d:bb:91:41:c5:
7c:8c:dd:3c:e5:7c:97:f6:66:11:bd:e7:fb:24:34:01:eb:ce:
88:ea:70:c1:bc:10:e9:41:01:d7:bc:bf:2f:14:79:d4:ed:17:
ef:0e:14:f0:dd:22:37:e1:77:a1:b8:e4:69:77:e6:ab:65:11:
42:d9:a2:e2:7f:b2:d7:4f:87:e2:b8:c6:58:9b:8c:41:58:09:
4d:aa:96:bf:19:1a:d6:eb:08:15:b3:bf:65:9d:58:ba:6f:0b:
5a:f1:21:5b:9a:38:18:04:5a:94:2d:1f:a8:01:f7:64:40:52:
fd:2f:08:e4:b0:22:83:69:c0:34:39:03:f8:67:8e:3b:0d:c4:
eb:6f:4b:53:27:21:8d:d7:50:b1:5a:b9:2b:b1:9b:38:da:64:
79:f9:6d:be:e5:93:63:fe:bb:54:f7:76:c1:dc:3c:ea:14:35:
9d:2d:60:c7:6b:af:5e:94:80:bf:26:d4:92:f4:09:07:45:16:
cc:dc:84:b0:e5:98:f6:d3:91:26:2e:2a:62:9b:94:9b:53:69:
b7:8f:49:08:61:c0:7f:b6:b4:da:af:9d:03:90:2c:6b:f0:aa:
89:e9:4d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org