Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233372e302f32342d3234203d3e203432333636.roa
File: 3139332e33362e3233372e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: gRsLD7CMA9Dho4JQmhIVIJub30JEJzbnqe2I6YHVopw=
Subject key identifier: 1F:ED:F7:E1:80:A3:57:ED:A0:73:2F:C3:3A:C7:B6:43:D3:55:99:AE
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 3CB6F1BE7A96750234099998199E8B7175C6F39E
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233372e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:18:53 +0000
ROA not before: Mon 10 Apr 2023 08:13:53 +0000
ROA not after: Mon 08 Apr 2024 08:18:53 +0000
asID: 42366
IP address blocks: 193.36.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b6:f1:be:7a:96:75:02:34:09:99:98:19:9e:8b:71:75:c6:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:13:53 2023 GMT
Not After : Apr 8 08:18:53 2024 GMT
Subject: CN=1FEDF7E180A357EDA0732FC33AC7B643D35599AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:7a:5f:ab:4d:02:f1:54:f9:2f:31:44:8b:
05:56:65:7e:3b:d3:c5:a6:29:36:ce:e9:4e:71:4b:
e3:bb:f3:ef:48:cf:85:99:e6:10:9a:b4:95:9b:45:
08:e1:c1:ef:39:9c:ad:46:f3:8f:dd:fd:a8:29:da:
0f:f3:b4:f6:f7:ad:97:d0:29:35:d7:33:6d:3c:f3:
42:28:95:96:2d:d2:34:03:de:22:df:3e:48:9f:22:
97:ab:75:9f:d3:2a:45:01:1f:9c:5d:7a:c7:5e:aa:
29:c7:54:b3:e1:76:0b:89:05:30:02:10:77:ca:ff:
c5:5b:86:a1:46:dd:6d:d9:b1:fc:51:91:ff:3d:bd:
18:bf:cd:8b:e1:b0:02:64:39:05:c0:4e:8f:be:46:
31:e3:54:56:9b:92:82:15:bd:5a:63:cd:ed:23:da:
9c:d8:62:79:2e:72:16:80:13:e1:9a:5a:7a:f7:03:
ca:06:e5:d6:e8:84:3c:a8:d4:49:35:9e:7d:66:26:
5c:b0:67:9c:73:c5:99:65:72:7f:3a:cd:fa:c6:c5:
7f:27:3a:4e:48:e3:58:b4:cd:1d:2f:a3:d8:fb:2c:
50:36:79:97:fd:f2:20:66:6d:ce:9f:ab:8f:5a:b3:
db:52:c2:ac:e4:ba:f5:42:32:a0:4e:16:66:6c:a7:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:ED:F7:E1:80:A3:57:ED:A0:73:2F:C3:3A:C7:B6:43:D3:55:99:AE
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233372e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.237.0/24
Signature Algorithm: sha256WithRSAEncryption
99:53:68:e7:58:71:15:59:9a:01:87:89:34:0f:b4:d2:e6:11:
ba:38:ca:dc:75:70:eb:96:1f:73:c2:2b:f5:23:bf:49:ea:2a:
7d:80:dc:4b:b4:05:dc:ee:ff:3a:7b:3c:b3:6e:a4:55:f8:ef:
8c:7c:5e:51:17:8e:d4:24:df:be:65:83:53:07:29:4c:b7:12:
e8:24:18:7a:d2:e7:5d:a1:c8:2e:aa:d9:db:42:30:af:3a:97:
81:ef:0a:fc:3f:a9:bb:4f:6f:96:19:ac:0b:d3:f5:4e:c0:37:
09:e3:c0:32:67:ba:c8:8d:70:b2:e1:27:b2:9a:55:3c:f8:81:
4d:6f:b9:00:73:d5:af:bc:b0:f2:7a:35:cd:67:4e:05:55:c2:
b8:d3:01:5f:7e:c3:d9:97:60:51:1a:9e:9e:b9:1a:ec:e0:1e:
13:5e:6a:2a:aa:08:4f:58:7a:5a:a6:96:1e:0e:93:4f:ed:2e:
ad:1b:20:cf:0b:88:11:66:19:7b:d9:84:c1:f7:e9:3d:a4:8a:
24:8a:5d:e9:62:38:22:30:34:d8:76:cb:89:16:ef:2c:2e:15:
77:b9:c8:f1:cb:0f:9a:bf:61:9a:01:8a:3a:50:77:40:eb:4a:
ab:bf:db:76:1f:99:b9:06:40:a5:e8:9d:02:f2:c9:4f:01:bd:
4f:9c:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org