Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234352e302f32342d3234203d3e203432333636.roa
File: 3139332e3136302e3234352e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: ea0ynekUeGl7qyJfBy2hY/Dcd8/OL57877vJhnCpAtA=
Subject key identifier: 0C:2F:B2:F8:F7:E9:7D:AE:33:4E:41:81:00:C0:05:8B:96:05:C7:29
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 7ABE699FCE508627201F7591C81567FD1AA10559
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234352e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:19:06 +0000
ROA not before: Mon 10 Apr 2023 08:14:06 +0000
ROA not after: Mon 08 Apr 2024 08:19:06 +0000
asID: 42366
IP address blocks: 193.160.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:be:69:9f:ce:50:86:27:20:1f:75:91:c8:15:67:fd:1a:a1:05:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:14:06 2023 GMT
Not After : Apr 8 08:19:06 2024 GMT
Subject: CN=0C2FB2F8F7E97DAE334E418100C0058B9605C729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ff:bb:e5:7e:13:cc:4f:a0:40:fa:b6:b0:2a:
3a:9e:bf:5b:c8:25:17:8b:75:dc:48:6c:f1:47:f4:
d9:90:c7:f5:05:50:b7:5c:2d:9f:91:10:b2:94:4f:
44:d4:8a:2d:a4:dc:9c:88:91:69:91:37:98:a9:a9:
ef:19:23:5f:61:ea:10:e7:3b:50:20:f6:31:77:4c:
cd:a3:e5:5f:d4:c5:06:23:3d:30:17:9b:ee:5c:48:
ce:f3:3e:38:e4:ae:69:63:93:2c:36:84:83:5b:96:
d1:a8:fb:61:d5:22:6b:f2:73:10:00:77:62:31:90:
be:60:cf:3d:68:d2:fc:57:83:90:c7:bf:97:07:d4:
7b:45:14:c9:37:86:6e:2b:34:74:aa:c5:6e:03:79:
26:6a:27:37:16:d7:60:17:1a:dd:fc:f6:93:85:53:
b4:ca:df:55:ab:41:bd:af:70:ca:4b:cb:a1:58:9c:
29:7f:d0:9f:2c:36:53:87:0b:c4:d1:e3:a1:51:59:
1f:77:ae:ec:af:27:e0:9d:84:ca:de:4c:52:08:ec:
dc:eb:b3:99:26:0f:9b:15:ef:b8:6e:d9:e8:2a:77:
70:84:2b:7b:9f:76:46:f5:81:8e:03:4b:58:42:80:
25:ee:1b:bb:c2:51:04:51:ce:ce:d7:ad:71:47:6d:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:B2:F8:F7:E9:7D:AE:33:4E:41:81:00:C0:05:8B:96:05:C7:29
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234352e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.245.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a5:04:38:b7:07:0a:0d:0c:5b:e8:5f:b0:90:ed:71:ed:b4:
5b:22:05:c7:d7:88:5b:2e:e6:32:68:ec:ae:f5:14:57:b8:f9:
5c:bd:04:f8:96:7f:b9:a2:b0:99:a8:f9:81:c6:c9:9f:78:1f:
b0:88:7d:f8:09:d5:49:56:b6:f2:be:54:e3:5a:02:fa:25:da:
04:df:e8:45:22:60:c1:f4:ee:a8:04:77:00:1c:39:f1:84:d6:
8f:b0:03:bd:83:c0:25:46:16:44:48:4e:76:aa:59:34:10:80:
2e:54:37:13:9a:6a:6e:b1:e8:a2:94:d8:5d:7a:c4:d5:50:70:
e9:ec:f5:99:67:61:19:e3:16:57:51:bc:d2:e7:46:cd:8e:f5:
34:53:bd:b6:d8:86:db:71:89:c8:cb:17:f5:bb:0a:10:66:f4:
1b:45:e0:e8:89:28:b5:75:0d:64:94:0c:c5:c6:d3:c3:39:5f:
8d:3c:6e:bb:7c:ec:2a:fd:8f:f0:da:40:b5:6a:0d:c5:30:89:
9b:5f:15:d9:33:34:2e:41:54:4e:06:38:ba:42:c3:08:57:bd:
9a:2a:6a:6c:95:08:b7:ba:45:da:57:3a:3e:3e:ee:19:4b:a4:
51:18:d9:e6:75:9a:4d:8d:4e:11:39:40:f2:ce:ff:4e:d3:96:
3c:a3:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org