Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/322e35382e37342e302f32342d3234203d3e2030.roa
File: 322e35382e37342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: b0NaC0ntBCwxIzZ2AFOLU7C4fN/t//AxGPXmMooNo7c=
Subject key identifier: 32:FE:C7:4C:6C:92:6B:0B:D4:F9:B0:FF:C7:E7:F5:F7:54:CF:43:9F
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 206A4C8D9C88D517D0F84F785CB785CE24B706B2
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/322e35382e37342e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:36 +0000
ROA not before: Mon 27 Mar 2023 08:22:36 +0000
ROA not after: Mon 25 Mar 2024 08:27:36 +0000
asID: 0
IP address blocks: 2.58.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6a:4c:8d:9c:88:d5:17:d0:f8:4f:78:5c:b7:85:ce:24:b7:06:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:36 2023 GMT
Not After : Mar 25 08:27:36 2024 GMT
Subject: CN=32FEC74C6C926B0BD4F9B0FFC7E7F5F754CF439F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3b:23:8f:62:fe:04:7e:5f:05:56:5b:58:61:
4f:35:4c:a8:f2:d7:74:55:e7:45:c4:a7:c2:4f:21:
43:8d:9a:4e:14:96:91:0f:c4:9d:06:04:88:de:ba:
80:ef:0d:bc:6d:6c:6c:4e:cb:96:93:d1:c7:c1:c4:
9c:30:20:f5:ec:27:16:6b:9f:3a:01:8f:84:23:4c:
6e:b3:68:5e:02:a5:af:2e:38:83:a7:ed:7b:7a:75:
8f:e0:65:ec:54:ef:bc:8b:e6:1b:c8:56:a8:70:01:
77:31:85:19:55:a7:d0:ca:8f:67:69:33:c6:7f:bc:
65:6e:be:4d:b4:e0:e1:47:dc:42:6e:a6:6a:1d:07:
e2:f3:ea:c9:8b:92:a7:3b:0f:b5:1d:b2:86:69:96:
70:e3:0f:6c:3f:22:2a:54:a1:8d:8b:fb:04:de:e0:
b7:b1:39:6a:e7:e1:80:69:82:0f:c1:4f:f6:1a:b6:
eb:21:e8:23:77:2b:f8:95:ea:0b:d2:7e:99:b5:67:
dc:7d:fa:99:ff:84:15:33:62:23:9b:f5:43:2c:c1:
04:09:65:24:fe:56:0a:e4:b9:df:f7:fd:b6:a9:f4:
1b:b0:49:d0:35:4e:45:fc:f0:39:e9:cb:57:5c:7e:
2a:0e:1e:5f:73:4d:8c:34:17:78:00:c8:f3:f7:0a:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:C7:4C:6C:92:6B:0B:D4:F9:B0:FF:C7:E7:F5:F7:54:CF:43:9F
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/322e35382e37342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:81:22:9c:82:af:e4:f6:5c:ac:b7:48:5c:08:7a:39:9e:10:
ca:6c:84:4e:62:05:fd:ea:38:c5:cd:1e:48:67:68:76:8e:60:
81:13:ca:8a:13:fb:d5:85:fa:60:54:9f:e5:11:c8:90:a7:b3:
21:b7:ec:13:0c:6e:78:8c:64:51:c6:cc:43:5a:76:b5:af:ec:
ab:cd:2d:f2:da:cd:bc:87:e8:04:22:fe:ab:26:f4:6b:a7:f2:
62:56:35:34:e6:a6:40:c3:7d:17:20:18:c7:da:3f:45:43:c8:
00:51:bd:33:b3:bf:d4:aa:c2:13:3e:d6:68:de:72:a6:50:5d:
ed:87:47:4c:a2:91:74:65:69:d3:b2:3e:65:83:8b:86:dd:ec:
12:a4:7c:af:79:b9:99:69:7a:3b:08:23:ce:74:5b:e8:88:4b:
8a:69:9d:9f:ac:ff:15:0a:4e:20:dd:d5:7f:da:54:af:ec:e3:
cd:00:bd:94:cc:f3:fc:92:0f:7f:e8:0d:90:ff:66:33:aa:5f:
a6:38:91:90:3b:a3:0c:87:8b:99:cb:0c:2a:53:05:77:09:7f:
b7:16:17:ef:bd:da:b0:7f:94:ee:b4:9d:96:2f:d1:61:68:0f:
f8:bc:70:80:a2:b9:0a:3b:f4:2c:55:43:09:2b:bb:cb:8b:4f:
1c:19:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org