Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3137362e3232372e3234322e302f32342d3234203d3e203432333636.roa
File: 3137362e3232372e3234322e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: VPYKVWVeRZN0ZIywmNQz13PlaCJCQO7vYzFg9fvKVCc=
Subject key identifier: 33:D0:3D:8B:25:06:9E:D1:0B:0D:43:52:A0:F4:5D:F8:45:72:E2:F8
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 71E59D245A187C8B62D54A83B1A51FDCB33FED0E
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3137362e3232372e3234322e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:18:47 +0000
ROA not before: Mon 10 Apr 2023 08:13:47 +0000
ROA not after: Mon 08 Apr 2024 08:18:47 +0000
asID: 42366
IP address blocks: 176.227.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e5:9d:24:5a:18:7c:8b:62:d5:4a:83:b1:a5:1f:dc:b3:3f:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:13:47 2023 GMT
Not After : Apr 8 08:18:47 2024 GMT
Subject: CN=33D03D8B25069ED10B0D4352A0F45DF84572E2F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:5f:73:4f:8f:5f:8e:e6:58:90:bd:2e:60:
9d:f7:46:3a:eb:4e:47:e4:17:d7:9e:7a:a3:c3:06:
b8:ca:1a:c3:fb:76:bc:d3:e5:77:61:bc:82:98:38:
07:87:b6:8b:9b:59:40:1d:48:d6:60:21:55:c0:0d:
b1:25:06:6c:7a:f2:03:9c:d2:e5:13:02:a7:6f:b9:
94:79:87:fd:95:77:9f:35:b6:7a:38:b2:9e:65:28:
8b:22:f9:dd:e3:f7:da:f4:3d:e7:f3:bb:7b:d3:7a:
1e:8c:45:01:69:05:50:d8:8e:22:b5:92:a9:0a:34:
07:59:61:ff:8a:09:af:d3:ac:f5:00:7e:76:c8:f1:
38:e4:1c:b9:a0:07:63:1e:02:a3:54:79:e4:07:2b:
5f:fe:17:36:ec:b5:ce:a4:6d:ee:63:20:54:8f:b3:
c0:a5:57:52:8d:5e:37:fa:bb:d8:a6:98:fd:ae:bf:
98:62:41:41:15:4e:08:e2:e0:75:7c:9b:d0:3f:6b:
cf:cb:58:92:12:27:63:dc:33:bf:4d:16:a6:8e:3d:
9a:26:aa:70:89:d3:39:4b:54:d2:4a:93:ae:25:96:
87:ad:d6:4b:09:ac:41:b6:3d:dc:e7:39:5b:d0:c1:
07:5e:54:ed:a8:50:75:01:fe:5f:99:51:bb:5c:e0:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D0:3D:8B:25:06:9E:D1:0B:0D:43:52:A0:F4:5D:F8:45:72:E2:F8
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3137362e3232372e3234322e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.227.242.0/24
Signature Algorithm: sha256WithRSAEncryption
67:91:94:2f:4e:05:db:34:0c:91:a7:ae:9a:92:bb:a5:4a:4c:
94:49:75:da:e7:90:22:a3:14:d4:dc:ea:7b:52:74:55:92:16:
a1:d1:be:37:0f:6a:d3:11:b5:23:24:87:98:33:58:82:32:09:
88:fb:2c:1a:3b:bf:bb:31:fb:3b:17:dc:66:a1:90:26:f0:3b:
55:93:10:c1:dc:f2:b0:1e:9c:1d:a6:55:24:da:5a:eb:b8:47:
ad:df:6e:9e:a7:4f:a3:6f:2b:3a:78:f7:1a:8f:2e:60:80:99:
ce:b0:07:4b:38:dd:bc:2c:a9:13:03:44:c1:15:5d:c2:95:2a:
c0:ac:7e:68:0f:e1:62:11:15:0e:70:6f:74:57:0c:9f:c1:a5:
40:7d:bf:c5:09:d2:bb:42:c8:88:e5:35:43:c8:f1:1f:c5:04:
2d:d5:cf:e7:fb:ed:af:f8:0e:ed:63:12:48:5b:1e:30:73:0e:
0e:34:60:7a:bb:27:fb:25:84:61:7b:b7:2f:d1:8c:b4:9c:f7:
a0:39:cc:c4:d8:65:fd:35:dd:e5:a2:30:79:f9:5d:8d:54:e3:
71:6b:2f:e3:3a:b0:1c:ae:ff:fe:17:7e:e0:b1:32:3f:7f:bf:
ab:31:48:dc:8b:fe:fa:05:25:5e:5b:ad:9b:9d:11:ba:15:ee:
f3:03:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org