Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33352e302f32342d3234203d3e203235303938.roa
File: 352e3138322e33352e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier: wlkQlQbNmlsUWAZXyo+c9GiiChiS9ce70zGiJWnjFn8=
Subject key identifier: 9A:07:C7:EF:1B:F2:E6:2E:43:3E:21:8A:05:EB:F8:AA:63:9C:BA:92
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7AD9DE9421C62A1EED21D9FA24BF4B0B80009A88
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33352e302f32342d3234203d3e203235303938.roa
Signing time: Mon 27 Mar 2023 08:27:09 +0000
ROA not before: Mon 27 Mar 2023 08:22:09 +0000
ROA not after: Mon 25 Mar 2024 08:27:09 +0000
asID: 25098
IP address blocks: 5.182.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d9:de:94:21:c6:2a:1e:ed:21:d9:fa:24:bf:4b:0b:80:00:9a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 27 08:22:09 2023 GMT
Not After : Mar 25 08:27:09 2024 GMT
Subject: CN=9A07C7EF1BF2E62E433E218A05EBF8AA639CBA92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:7e:0e:98:67:46:89:63:5e:8f:08:61:ba:
15:b4:69:78:cc:76:8f:88:18:e9:ea:df:db:37:f7:
78:09:86:0c:b6:06:5f:a0:e1:a4:4c:88:f8:24:8a:
f7:0d:3b:f8:65:ea:3f:f8:10:87:1b:b6:37:79:19:
17:13:e9:16:68:c5:1e:42:5c:8a:81:10:3f:cb:d6:
57:8a:e5:c9:9f:88:46:fa:de:94:40:85:9b:1e:2c:
c4:04:8e:f5:ed:95:e2:aa:65:0a:0e:90:65:43:ef:
69:b8:88:e7:12:a2:4d:64:a2:7a:c4:bd:07:7f:ca:
62:aa:7e:4f:0e:33:2c:ab:d2:5f:29:f6:9e:64:f2:
67:26:32:8d:a7:e7:95:de:f0:e0:9b:af:d4:e2:e0:
57:4b:6a:8f:b1:5f:05:a6:a9:24:c0:4f:a7:1a:a2:
2d:ce:e6:3a:49:ed:d6:b9:46:0f:a6:42:60:7b:bf:
83:74:e6:9a:a8:8b:03:e4:a1:07:1d:b2:8a:f9:db:
2e:4f:ba:ee:8c:7f:50:ff:e0:30:ca:6f:cd:8c:cb:
40:08:21:65:36:e1:5d:45:8d:de:42:d9:47:01:3e:
02:2c:c8:2c:9b:0c:43:7e:8e:bd:e1:6d:da:91:af:
1a:73:98:9a:ca:f4:65:f5:99:cc:e8:3f:41:1e:93:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:07:C7:EF:1B:F2:E6:2E:43:3E:21:8A:05:EB:F8:AA:63:9C:BA:92
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33352e302f32342d3234203d3e203235303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.35.0/24
Signature Algorithm: sha256WithRSAEncryption
98:20:32:83:b2:99:48:11:e7:36:36:b7:0a:95:87:14:9c:bc:
af:aa:69:2e:87:9c:d0:ea:be:e0:ea:12:5d:9e:93:0e:4c:04:
73:fb:9d:d0:e9:24:71:e6:c0:7a:53:14:4f:a8:4a:ed:b5:e2:
b5:fb:99:87:93:15:c9:65:5b:88:5d:c4:93:3e:dc:83:fe:18:
3e:98:ac:14:37:0d:27:07:28:2c:aa:87:80:0a:e5:dd:7a:64:
38:dd:57:72:55:81:2b:a4:1e:af:12:0b:bc:ea:48:73:2b:fe:
69:1a:4a:fc:97:13:41:bd:c2:77:e1:8d:ae:a1:22:80:4e:a6:
cb:c3:4b:ab:f8:f2:b7:c7:bb:1f:78:a0:11:6c:73:70:01:22:
29:73:9a:4a:fc:01:c8:82:a9:c5:24:3b:47:fb:2c:f6:58:01:
af:34:5c:e0:cc:13:78:9d:28:6b:8b:97:8c:98:04:70:69:6e:
c9:5e:29:1d:59:c4:a2:48:ea:67:9f:ab:46:41:c0:01:51:1e:
5a:24:b6:1d:c5:c0:62:8e:47:47:e9:44:cd:5d:03:d8:c3:9b:
da:2d:98:19:31:81:9f:3b:2f:eb:41:f8:97:88:b4:9d:55:ed:
55:a2:8a:e9:3e:fa:05:9c:5b:65:69:88:71:37:9e:32:d6:c6:
ec:66:c1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org