Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234362e302f32332d3234203d3e2030.roa
File: 3139332e3136302e3234362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: rj69hiUlodQG5eevm8zjo+9XQavLUN/5PLHZw04qU48=
Subject key identifier: 4B:26:9E:AC:9E:E0:FC:F2:F6:16:0F:08:4C:F4:D3:F6:A8:4D:A2:E3
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 3BDE64D7088B409CE8010095A84D94AC0E33DD00
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234362e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:26 +0000
ROA not before: Mon 27 Mar 2023 08:22:26 +0000
ROA not after: Mon 25 Mar 2024 08:27:26 +0000
asID: 0
IP address blocks: 193.160.246.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:de:64:d7:08:8b:40:9c:e8:01:00:95:a8:4d:94:ac:0e:33:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:26 2023 GMT
Not After : Mar 25 08:27:26 2024 GMT
Subject: CN=4B269EAC9EE0FCF2F6160F084CF4D3F6A84DA2E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:8c:66:ff:38:a2:12:84:85:d7:32:06:85:
9d:6d:c5:33:87:2b:89:41:bc:0b:cd:52:81:a8:4e:
75:61:aa:25:fd:23:69:63:73:94:2d:d0:28:f1:b6:
8d:d8:0e:cb:ec:59:11:fd:f5:b1:48:49:f9:d7:1f:
3c:e7:d0:7d:55:53:2c:f1:7e:a5:51:62:46:41:d1:
ed:54:83:d9:1c:f5:22:cd:0c:d5:1c:16:b4:cc:5a:
5a:4b:0d:4f:b1:ed:9f:a2:62:9a:be:ac:08:24:86:
f7:ce:74:c2:58:43:bd:f1:12:34:2a:df:26:3f:d8:
c9:c9:a9:26:8a:70:70:64:38:d9:32:16:d4:5b:ef:
2d:c8:2c:fb:9b:06:40:0c:63:f7:15:60:71:7d:af:
aa:b2:bc:b4:84:be:7d:73:21:00:07:0f:82:af:62:
b1:46:e2:48:a3:f4:27:3c:0e:24:de:76:d5:b7:54:
3c:39:00:2a:c7:16:68:92:dd:ae:34:2e:31:c8:f5:
c5:03:6c:7a:c3:f2:23:51:19:4d:1b:d5:5f:70:66:
44:eb:8c:5c:27:35:16:a3:99:5e:b8:dc:a7:9b:41:
d9:0e:c6:bf:41:49:97:46:bc:60:df:03:4e:34:ed:
81:32:09:fc:c2:ff:8f:cc:25:95:36:40:38:03:80:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:26:9E:AC:9E:E0:FC:F2:F6:16:0F:08:4C:F4:D3:F6:A8:4D:A2:E3
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e3136302e3234362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.246.0/23
Signature Algorithm: sha256WithRSAEncryption
87:c9:e2:7b:7c:11:41:a0:f2:48:22:12:60:5f:f2:6f:a9:c0:
04:36:a3:0d:61:70:ad:10:30:26:10:b6:23:52:a2:50:9e:99:
b5:1a:d1:38:e1:ff:8f:ad:cf:66:a9:58:89:d6:a2:8e:4e:20:
bd:89:d7:91:0b:14:67:e8:52:5d:fc:b1:1f:2e:d5:a9:c0:07:
ff:60:e6:41:cb:87:36:2b:20:54:0e:c8:0d:4a:7d:e3:88:33:
27:1e:af:28:80:3f:3b:ee:64:3f:f4:26:cf:eb:6e:38:c1:64:
7b:36:cb:ed:59:2d:e0:7b:b3:d1:4e:a3:33:01:12:a6:54:0b:
9b:76:c7:d8:ee:d3:00:0d:2e:cc:f1:23:c2:43:4d:a1:5e:9b:
09:e1:85:9e:34:0f:37:cb:d8:fd:20:37:48:48:86:54:1d:1e:
99:40:21:6f:eb:84:f2:21:20:d8:46:dc:ed:c6:90:8b:17:cb:
e6:d7:8c:91:08:10:af:ec:5e:3d:56:87:3f:4e:db:13:7f:22:
20:87:6c:6b:45:dc:a0:9d:37:6c:ab:f3:9a:df:b2:76:b2:5f:
5e:68:4c:87:2b:88:fa:05:e1:71:7b:92:0e:0b:d9:fb:bb:55:
af:b5:73:0e:ac:1b:84:a8:82:a1:bd:3d:1a:b8:0c:f0:cc:be:
9b:0f:4b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org