Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32332d3234203d3e2030.roa
File: 39312e3230352e3130362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: NQdBXXC13XvmG0JJiFZ75YZKIZFMXT3YjI3OX2jUHO0=
Subject key identifier: 25:C0:9B:71:E2:79:58:92:9B:28:51:27:09:21:35:A9:66:81:83:54
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6E0C58923BF29616CB2350986647B8E93C040C64
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:03 +0000
ROA not before: Mon 27 Mar 2023 08:22:03 +0000
ROA not after: Mon 25 Mar 2024 08:27:03 +0000
asID: 0
IP address blocks: 91.205.106.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0c:58:92:3b:f2:96:16:cb:23:50:98:66:47:b8:e9:3c:04:0c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 27 08:22:03 2023 GMT
Not After : Mar 25 08:27:03 2024 GMT
Subject: CN=25C09B71E27958929B285127092135A966818354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:0e:a1:1f:7a:f4:be:7a:3f:9a:44:5f:d7:
95:2d:5f:49:94:43:3b:57:d4:d4:ad:62:d8:99:b9:
32:32:c5:f7:f8:2a:9d:c6:1b:f6:4e:93:1d:95:e3:
1e:3e:b8:da:6d:6b:a2:61:f7:d4:ff:f6:2f:2e:6c:
92:26:4f:b8:0c:d8:5b:bb:dd:53:0d:8f:99:3b:fe:
3a:f5:26:72:99:bd:43:f8:18:b4:8c:b8:5b:18:ea:
96:13:30:dc:97:57:24:09:17:af:4d:99:09:7e:3f:
82:3e:05:56:e0:fd:01:37:b1:0f:f2:2b:23:f5:ca:
93:78:43:6c:d9:cc:43:d1:83:83:84:56:8c:ee:8b:
ea:4e:d8:45:81:53:13:ba:d8:ed:cf:98:02:34:a3:
e3:95:e5:c8:91:41:df:a1:b5:45:a6:d4:43:d0:a8:
7b:a0:c6:08:f6:8b:c7:bf:2e:5c:de:a0:4e:06:fb:
93:5f:82:85:60:6f:f8:b9:b6:08:12:5d:3c:f5:2f:
a0:38:80:b0:07:ed:86:94:30:0b:30:10:8e:54:44:
1c:19:bf:84:16:89:1d:4f:8a:01:20:f1:ea:05:28:
c1:2c:64:57:5f:13:0b:a8:37:89:b4:09:b2:08:85:
ba:f4:16:d6:d0:fe:c0:47:db:bf:3e:d4:df:11:0b:
be:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:9B:71:E2:79:58:92:9B:28:51:27:09:21:35:A9:66:81:83:54
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.106.0/23
Signature Algorithm: sha256WithRSAEncryption
75:60:58:37:af:7d:bb:1b:39:10:4c:0a:04:6b:ef:72:7b:2c:
5f:a3:5f:ee:be:dd:f8:df:15:aa:ed:e2:7d:11:59:80:9f:69:
1c:cf:ae:65:2c:bf:f4:55:11:6c:ae:bf:e5:e4:16:05:23:af:
1f:18:2c:5d:8f:2c:57:ad:ef:5d:67:0c:d2:9a:7e:73:84:38:
6f:f2:b2:03:16:f1:35:ea:04:9e:e1:01:62:fb:e2:0e:ee:2a:
1a:3e:4a:cb:f5:c6:8f:5d:1c:e9:50:9e:c9:1b:28:fa:0b:dc:
bb:c0:70:2c:a4:d8:4e:99:ab:3f:1e:b5:db:e9:ac:2e:99:75:
0b:06:04:4c:8e:e4:b0:de:b1:a5:bf:aa:46:f4:99:6f:e3:fc:
db:95:c5:91:49:40:47:0b:72:72:05:3c:54:2c:9d:d4:13:56:
df:63:96:9a:28:6c:e3:02:7e:f2:f6:aa:e1:a8:6c:40:2c:bc:
87:ce:d1:e1:0f:30:b3:45:c1:fe:51:aa:72:d1:38:68:bf:da:
ca:7b:5a:4e:f3:74:67:7c:56:d3:d6:d1:d3:91:6b:63:e6:4b:
4e:68:34:b7:92:da:34:5f:4d:0a:f4:f5:94:40:bc:cd:df:8c:
94:bd:a5:43:4f:d5:e9:1f:81:24:62:37:22:26:20:a7:a8:ed:
88:77:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:12 2024 by rpki-client on console-ams.rpki-client.org