Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234352e302f32342d3234203d3e2030.roa
File: 3139332e3136302e3234352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: vF+KypPjdhFzZVbiLuQ1M7YqTgLFfu1/vuRfA/B8NAo=
Subject key identifier: 54:1C:52:35:51:77:29:6B:E7:42:E4:42:93:D9:94:A9:BF:A8:F5:EC
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 722D54A388F4CF8242C341D2F320F7F3FFDB9A47
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234352e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:29 +0000
ROA not before: Mon 27 Mar 2023 08:22:29 +0000
ROA not after: Mon 25 Mar 2024 08:27:29 +0000
asID: 0
IP address blocks: 193.160.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2d:54:a3:88:f4:cf:82:42:c3:41:d2:f3:20:f7:f3:ff:db:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:29 2023 GMT
Not After : Mar 25 08:27:29 2024 GMT
Subject: CN=541C52355177296BE742E44293D994A9BFA8F5EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:ee:33:9f:db:d3:85:54:4b:f5:cb:5f:ee:
b4:a4:1f:b6:4c:39:ef:b6:11:15:df:da:9f:0d:bc:
18:28:84:8f:1f:a7:7c:05:c7:49:35:f7:44:3c:a8:
91:0a:97:21:f0:07:f4:31:e5:80:2a:2d:01:69:3a:
34:8c:ff:e4:2d:9e:fa:5a:4b:b5:ef:56:1f:f5:36:
ea:40:13:17:cf:39:87:e6:70:f2:a3:5b:c5:bd:6e:
c8:58:4e:4c:75:e4:73:ea:52:fd:5a:90:76:98:a5:
af:6b:f0:9d:8a:32:7a:51:ca:6b:42:55:27:88:de:
db:a3:3d:a9:06:1b:8f:bf:e0:6c:85:1a:29:d1:b6:
89:c6:2b:c4:55:c3:92:d9:1a:28:9a:c3:e9:4e:41:
03:b0:73:e3:bc:a8:4d:d9:b1:21:69:90:db:bc:01:
36:da:16:34:62:17:8a:65:f1:60:8c:fc:a0:25:15:
89:70:0b:2f:4f:b8:5d:c7:22:7a:42:94:e2:10:e5:
e3:93:4d:ff:93:22:31:33:7f:c8:0c:4b:cc:91:9c:
18:55:64:19:42:ec:26:cd:03:fd:aa:87:b7:e3:cc:
b7:bc:de:6d:c4:60:b3:ad:2c:f5:de:4a:60:36:32:
05:98:a4:a6:53:2a:ad:a1:02:70:48:d9:20:c1:99:
8d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1C:52:35:51:77:29:6B:E7:42:E4:42:93:D9:94:A9:BF:A8:F5:EC
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.245.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cc:45:82:21:ba:cf:f4:fb:b6:93:9f:ff:42:c0:ce:22:40:
fa:5a:99:45:64:fc:eb:c2:75:5b:f3:8f:e6:b4:f3:4b:0d:8f:
f1:7a:f1:8c:31:60:2e:f7:28:58:e7:3e:be:8b:1d:d1:c2:92:
5d:ca:03:2a:fc:cf:22:35:9c:10:16:8e:f7:3f:65:9e:e3:5e:
43:98:59:72:7e:e5:1e:e6:d6:5f:8f:a6:6f:4a:ff:56:2a:84:
07:18:30:32:80:fe:16:0b:dd:84:83:d0:68:7b:43:bf:16:f1:
15:7d:f6:fe:d3:5f:e5:b4:1c:dd:d2:39:6f:28:ff:9b:6c:e7:
61:fb:74:f4:7a:87:7e:cb:dc:d2:08:98:fb:df:d5:73:c0:fa:
21:97:b7:d5:e2:4b:ee:2e:05:95:48:ea:8f:67:77:44:80:63:
78:aa:ec:1d:a6:3f:0d:01:c2:f0:78:77:f4:72:91:e2:1a:4a:
62:f1:d0:b1:74:48:16:ea:dc:b3:55:50:e2:38:4a:f3:67:d3:
ae:93:7b:58:4a:76:cf:7b:f7:9b:28:d5:92:74:f0:c7:8a:21:
92:61:eb:3f:f8:4b:c8:f3:50:b8:4f:d2:28:f4:fb:4a:ed:93:
43:f2:94:b5:4f:a1:ce:d2:a0:7a:ef:9d:7a:c4:2f:9e:c5:65:
00:c6:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org