Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132322e302f32332d3234203d3e2030.roa
File: 3139342e33352e3132322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: bmRG/YRl4X/Lns+QN+wvubxBvjMD48rRIiFHL2qKkVE=
Subject key identifier: 23:4A:07:51:FF:3B:F6:AB:4B:4E:47:F0:ED:B6:0D:F5:72:C0:63:0F
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 1C0EAEE68C1A2AD46888747163B168428900CB44
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132322e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:32 +0000
ROA not before: Mon 27 Mar 2023 08:22:32 +0000
ROA not after: Mon 25 Mar 2024 08:27:32 +0000
asID: 0
IP address blocks: 194.35.122.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0e:ae:e6:8c:1a:2a:d4:68:88:74:71:63:b1:68:42:89:00:cb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:32 2023 GMT
Not After : Mar 25 08:27:32 2024 GMT
Subject: CN=234A0751FF3BF6AB4B4E47F0EDB60DF572C0630F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:2d:2c:29:66:e1:25:69:1d:2a:cf:dc:87:
88:0e:70:17:5e:51:90:b7:98:91:72:54:e9:3c:40:
70:73:bf:eb:36:bf:a8:d3:45:e1:f8:4a:b5:f2:51:
36:a5:38:7e:9c:03:c9:c4:0e:91:07:ec:bb:f3:7a:
4c:87:8a:32:53:b5:58:51:aa:40:2f:99:fe:5b:02:
a6:ab:f3:cb:a5:66:0f:5f:be:f2:bc:cf:fd:e8:40:
b0:f8:39:c7:bf:43:ef:7b:af:11:89:98:2f:05:32:
9d:37:d3:9e:64:e5:7f:9b:80:12:c4:3c:45:fe:b4:
6f:0c:54:31:10:79:50:04:fe:8f:ae:b7:50:4e:b3:
52:13:63:89:78:f6:f9:00:a1:1e:cc:68:86:86:01:
f6:9b:57:89:73:c5:6e:01:86:d9:0e:48:af:4d:5c:
78:c9:15:d2:46:66:17:78:b7:e9:af:e0:c3:55:16:
54:e4:08:56:2b:24:98:7f:db:8d:28:27:36:dc:e2:
1c:96:1a:10:c2:1f:3d:11:bf:10:13:b0:f4:53:8a:
f6:43:23:2b:8a:d3:5f:f4:3b:80:5f:51:fd:51:6d:
fa:e5:ef:03:77:e5:e6:59:32:d2:11:bf:6a:f4:0d:
fe:b4:f6:2c:1d:47:43:52:a7:d3:21:fe:8a:6f:15:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4A:07:51:FF:3B:F6:AB:4B:4E:47:F0:ED:B6:0D:F5:72:C0:63:0F
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.122.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:25:89:29:3c:f1:66:51:be:96:7f:6f:7c:86:77:33:09:b0:
3b:7d:8a:59:62:79:0f:9b:5b:02:6c:c9:93:61:91:70:45:95:
3b:d7:96:f2:00:7d:e4:04:cf:e2:94:31:30:9d:4e:f2:3a:1f:
e5:5f:3d:bf:19:1d:bb:42:18:cb:00:a7:ce:38:46:90:1f:d2:
8a:73:f6:01:6b:d3:7d:db:de:68:94:52:a9:a2:d7:0e:95:ed:
23:cd:ee:19:b8:35:4b:75:a7:b5:4b:f9:eb:f3:1f:cb:65:cc:
1d:5f:bc:82:95:13:8a:9f:a0:20:27:33:0e:9f:eb:f3:d1:f9:
3f:2b:26:89:a4:cf:ab:4f:8f:d5:db:3c:9b:8e:ce:c3:fd:9a:
a8:5b:6f:ea:42:96:e1:fb:e1:47:4a:88:68:c0:3d:a2:da:fb:
5f:c8:5a:aa:0b:f4:df:46:7d:ee:bf:9d:14:3e:96:33:48:90:
4d:78:d5:64:77:f9:01:7d:40:38:49:e1:f1:8c:d5:42:22:67:
5e:e5:2e:a5:cf:87:42:be:6c:8c:9f:c6:b1:63:70:13:24:a5:
24:59:e8:37:56:1a:ec:4e:d6:56:ed:5a:9e:e8:f2:55:9e:4f:
ea:92:59:c9:61:2d:b8:66:af:32:19:b5:ac:86:99:34:35:d5:
0e:97:a0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org