Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233372e302f32342d3234203d3e2030.roa
File: 3139332e33362e3233372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: PZdWSpFxxjHGD07De6CiCZh4J6XI/HhWR96AcZZJP5g=
Subject key identifier: B7:EE:F2:79:1A:D2:39:36:88:6B:99:41:0A:7C:F3:71:D7:F8:A3:E1
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 097FC07778EA5DCBC9E66A6196B6799CAA2A3061
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233372e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:36 +0000
ROA not before: Mon 27 Mar 2023 08:22:36 +0000
ROA not after: Mon 25 Mar 2024 08:27:36 +0000
asID: 0
IP address blocks: 193.36.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7f:c0:77:78:ea:5d:cb:c9:e6:6a:61:96:b6:79:9c:aa:2a:30:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:36 2023 GMT
Not After : Mar 25 08:27:36 2024 GMT
Subject: CN=B7EEF2791AD23936886B99410A7CF371D7F8A3E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:87:49:92:66:7c:b3:31:ca:4f:bd:17:b3:
b8:40:69:2f:5f:71:6a:4f:b3:ae:79:b1:36:94:fd:
c8:e5:46:0c:c1:d3:ec:bd:86:ab:f4:d5:a3:24:60:
65:6b:0e:23:ff:bc:d9:c5:0b:ca:0e:8c:87:4e:9d:
88:3b:08:24:c3:fc:59:07:c7:5b:23:4d:92:fb:8c:
83:7d:07:fe:50:d0:ad:33:d0:a7:eb:af:90:a9:56:
18:aa:d8:d7:10:11:9a:27:9b:5a:95:36:f9:41:c2:
c2:f4:2a:96:7d:6a:48:91:10:a1:57:89:88:b5:e7:
2f:f5:c7:5b:3d:ac:27:b5:01:ed:b3:ab:b6:25:f1:
ee:13:c4:08:2f:fe:e5:f7:ef:43:37:ff:46:a3:29:
d1:84:bc:27:e9:26:d3:b1:25:12:79:f5:c2:be:4c:
87:72:5d:4c:cc:08:80:44:bb:5c:5a:30:c0:7d:27:
56:5c:cd:e9:27:1a:08:fa:e1:d8:4b:9d:03:7b:69:
8b:ef:3b:6b:06:01:37:1b:9f:ea:4f:ca:6a:ec:40:
ef:4e:cb:d0:77:d2:92:75:b3:0e:4d:cf:90:18:4a:
14:7f:5c:f5:68:cc:26:5f:a5:d2:c7:32:d2:13:b3:
c7:4a:25:13:22:f9:61:79:77:5e:d1:e3:3a:0b:26:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:F2:79:1A:D2:39:36:88:6B:99:41:0A:7C:F3:71:D7:F8:A3:E1
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:04:f0:c5:35:0b:bb:c5:09:d7:df:41:da:55:6f:cb:a5:a5:
50:88:6b:e7:c2:ae:0b:92:af:34:52:d7:f9:57:19:db:49:5f:
41:3e:6a:e5:14:ac:ee:f0:f6:c9:68:b1:41:61:22:a6:1f:ed:
a7:0d:83:52:a8:36:08:80:26:4d:0e:cd:a7:3f:60:dc:9b:96:
af:2d:20:f4:70:74:1f:49:b9:6e:69:00:df:4b:51:2c:61:6b:
fb:10:e7:39:f2:a5:f4:d6:cb:2a:b2:65:c4:44:c2:46:7d:c8:
8d:60:1d:1b:4a:d7:e2:45:82:0f:ed:aa:17:22:6f:5d:cb:fd:
cf:3c:6e:ad:49:ab:80:28:7f:a9:35:04:e4:9f:e1:5b:e5:99:
5f:89:86:12:26:a2:57:78:97:80:56:ce:9a:cb:fb:5c:75:8e:
e1:d7:22:c7:a2:61:af:f6:24:5a:3c:93:b6:16:5b:9c:7b:d9:
55:6a:bc:e8:56:bb:d9:66:ce:e4:ca:19:de:8f:dc:91:21:12:
ad:a1:1f:3d:83:ad:61:e0:0e:65:b1:c7:71:fa:72:e3:81:41:
1a:ab:cf:8b:09:d7:6d:28:0e:90:b8:26:15:46:27:68:2b:2b:
51:c9:db:5f:37:c1:c5:35:8b:17:31:57:a1:6f:cd:e4:14:92:
a1:06:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org