Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e31332e3233322e302f32322d3234203d3e2030.roa
File: 34352e31332e3233322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: kMsFEJiC3QgUv9/N+u+tw/TyUbQWikgWq45X6qx9Rcw=
Subject key identifier: 2A:5A:FF:32:82:23:CD:44:13:C5:08:12:F4:28:3B:2B:98:F9:B1:30
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 7262D9E6C4C68B698247A2DED512B9B234607D9F
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e31332e3233322e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:35 +0000
ROA not before: Mon 27 Mar 2023 08:22:35 +0000
ROA not after: Mon 25 Mar 2024 08:27:35 +0000
asID: 0
IP address blocks: 45.13.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:62:d9:e6:c4:c6:8b:69:82:47:a2:de:d5:12:b9:b2:34:60:7d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:35 2023 GMT
Not After : Mar 25 08:27:35 2024 GMT
Subject: CN=2A5AFF328223CD4413C50812F4283B2B98F9B130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:c0:e4:60:9c:c7:10:96:8d:b0:e0:a8:36:
3f:a7:f5:d4:8a:50:84:96:46:87:4a:a3:01:23:45:
d3:bf:50:b4:db:ec:c5:0f:15:e0:e5:01:48:b9:e3:
cb:9a:49:ed:a5:03:74:54:d3:2b:e3:4e:2b:18:84:
73:d2:d1:c2:37:84:00:fe:83:bd:af:22:78:c1:ef:
89:6f:6b:06:04:6a:6a:3a:85:5a:35:3e:d8:95:8b:
91:4a:a4:2f:14:ec:b8:8f:c5:51:20:45:9f:99:dc:
77:03:6d:c4:22:a5:b7:59:5e:98:f0:2e:d3:d6:6a:
19:8e:0a:c3:40:00:74:51:f3:60:1c:4f:43:09:3c:
3d:ad:86:7b:43:8a:86:52:cf:ab:34:25:88:27:18:
6f:11:db:30:7e:8f:46:d9:98:85:3c:04:82:a4:fd:
38:8c:42:34:ba:c4:1f:fa:c1:34:ef:87:b0:b1:99:
2a:2d:27:96:16:08:b6:51:9b:db:22:59:be:82:90:
8c:62:19:5a:62:92:20:6e:5f:c8:64:8b:5d:1c:ab:
f3:6f:57:e8:ae:8b:52:8b:53:06:e3:1b:78:96:83:
6f:eb:dc:2b:e9:65:68:07:e4:db:6d:7e:8d:91:70:
ea:a0:55:a0:48:0c:e0:1c:31:ee:0c:80:74:03:93:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5A:FF:32:82:23:CD:44:13:C5:08:12:F4:28:3B:2B:98:F9:B1:30
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e31332e3233322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.232.0/22
Signature Algorithm: sha256WithRSAEncryption
89:b3:bb:2e:76:ba:15:c6:32:04:1d:7b:4f:b6:4b:a9:82:de:
83:f2:be:b8:f8:88:e6:50:e8:4c:52:f1:75:78:77:1a:99:e1:
f1:e1:83:9d:5e:5f:57:79:5e:19:b4:20:c9:f3:8e:45:e6:b9:
a7:8f:2a:05:35:da:61:5f:98:4f:0a:26:f5:59:ec:c2:80:13:
3e:f4:9f:bf:6f:6e:18:9a:36:7d:b4:a3:94:62:b5:00:a5:82:
8d:36:25:c7:6b:5e:17:11:5c:d6:c7:33:09:3f:f0:96:e7:63:
35:7a:b8:68:be:b8:32:61:3d:de:66:c5:0d:42:75:f7:3b:8e:
63:f2:3e:58:a6:18:49:58:84:72:0c:1a:97:d0:a9:b5:42:2c:
f7:1e:51:a6:39:e3:6d:75:eb:36:df:6d:9c:9c:fc:41:5a:17:
7e:de:fd:29:10:5f:6d:4d:b9:9e:c8:d5:11:7b:a8:91:e6:6c:
5e:45:4e:2e:5e:92:94:64:fb:3a:a5:3e:13:67:58:57:9d:f8:
73:bc:aa:ec:60:36:b2:67:7f:61:87:8f:58:ac:aa:e1:31:98:
ec:3e:b9:17:de:66:0f:0f:f8:4f:2b:2d:00:1b:76:9f:fb:26:
ec:1b:a5:9c:24:e3:46:c1:2e:52:56:90:ce:16:d4:c9:98:44:
69:b6:bb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org