Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130352e302f32342d3234203d3e2030.roa
File: 34352e3133302e3130352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: jXQNkyAxd5SKUoQF4HwOoPd1lo2N/uYRev5QGlWQDmQ=
Subject key identifier: FE:ED:B3:45:09:40:B1:DC:7B:26:C5:71:04:69:F5:DD:BB:7E:D2:D0
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 10B152C92CD43B38DA7145FFC6962277350F962D
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130352e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:29 +0000
ROA not before: Mon 27 Mar 2023 08:22:29 +0000
ROA not after: Mon 25 Mar 2024 08:27:29 +0000
asID: 0
IP address blocks: 45.130.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b1:52:c9:2c:d4:3b:38:da:71:45:ff:c6:96:22:77:35:0f:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:29 2023 GMT
Not After : Mar 25 08:27:29 2024 GMT
Subject: CN=FEEDB3450940B1DC7B26C5710469F5DDBB7ED2D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:60:59:2a:d8:28:36:89:3b:0f:48:00:0b:
90:0d:57:c1:6f:a8:1c:9b:c4:eb:e5:2b:8e:99:57:
90:b4:c2:02:3b:57:a6:da:c6:71:7a:03:ca:83:17:
69:60:e6:ea:a0:6a:d1:04:b5:de:46:22:0c:81:b7:
ee:91:f4:70:29:9f:36:85:a3:53:2a:39:bb:fa:5a:
a1:84:c1:f2:04:c0:84:19:26:5f:71:3c:ce:e0:64:
16:77:47:49:b2:f4:9f:74:2a:60:46:fa:8f:47:ee:
e6:03:59:29:64:3b:08:b2:bb:9d:5a:38:70:07:65:
01:b8:6a:c4:a2:f2:bd:ee:17:27:3a:25:93:03:e3:
e6:4b:e2:a7:ad:d1:84:c8:a0:70:14:65:1a:d9:71:
66:37:f9:34:21:3a:75:e7:1f:8c:e5:26:cf:c8:b4:
1d:c7:90:c8:28:2a:13:95:62:08:21:d1:71:57:ff:
11:eb:42:5f:10:91:3a:87:9d:67:9f:1e:97:2b:5f:
4f:8e:42:5d:fa:39:4f:e6:29:5c:85:50:6d:0e:ae:
98:96:0e:e5:c1:11:f4:95:09:6f:f3:7d:f6:d9:07:
d8:b8:bd:e7:47:d2:2f:3f:37:2b:66:49:d8:c5:9e:
fb:b7:54:f4:b1:47:eb:21:a2:35:dc:e3:37:7b:51:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:ED:B3:45:09:40:B1:DC:7B:26:C5:71:04:69:F5:DD:BB:7E:D2:D0
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133302e3130352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.105.0/24
Signature Algorithm: sha256WithRSAEncryption
30:97:ca:dc:fe:5a:75:6e:a7:34:99:41:fb:d5:03:c0:0c:27:
06:ad:ce:34:15:fa:e7:04:c9:4c:8b:de:15:01:44:57:0e:94:
33:ef:24:69:ed:c2:88:80:6b:7a:ed:b8:9e:38:39:b0:52:95:
b1:ab:79:0e:9c:5c:39:e0:bc:a7:bd:73:9d:dc:87:df:91:e0:
04:12:c3:fc:c5:c2:f3:f8:c3:f6:d1:42:ea:f6:48:b1:b3:b8:
18:4e:e2:70:91:d4:11:21:40:e7:5c:75:4c:d4:b0:4f:ef:36:
49:34:2e:b2:c6:36:c2:f6:df:77:f7:9e:58:34:0a:fc:bc:c5:
63:6c:e0:57:b7:5a:3e:ad:1a:3a:43:09:7e:9a:89:07:88:83:
95:8c:8b:ce:68:85:c0:b3:f0:93:96:93:f8:40:48:07:82:bf:
fc:ed:c9:4c:83:70:c8:4a:77:f8:0b:4e:c8:49:29:38:0a:84:
f3:17:83:7e:fb:08:e0:83:d6:84:79:63:6d:bc:d6:41:92:63:
9d:f5:ab:7e:a6:5b:d2:c6:0e:de:4e:02:26:a5:1f:5d:00:d2:
b6:83:f3:47:43:92:40:ce:3d:80:35:7a:43:ff:69:93:73:ff:
84:f2:89:44:dc:76:38:e6:4e:5b:a9:1d:99:48:c9:5e:ed:5c:
27:c0:0b:ee
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUELFSySzUOzjacUX/xpYidzUPli0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yMzAzMjcwODIyMjlaFw0yNDAzMjUwODI3MjlaMDMxMTAvBgNV
BAMTKEZFRURCMzQ1MDk0MEIxREM3QjI2QzU3MTA0NjlGNUREQkI3RUQyRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQWBZKtgoNok7D0gAC5ANV8Fv
qBybxOvlK46ZV5C0wgI7V6baxnF6A8qDF2lg5uqgatEEtd5GIgyBt+6R9HApnzaF
o1MqObv6WqGEwfIEwIQZJl9xPM7gZBZ3R0my9J90KmBG+o9H7uYDWSlkOwiyu51a
OHAHZQG4asSi8r3uFyc6JZMD4+ZL4qet0YTIoHAUZRrZcWY3+TQhOnXnH4zlJs/I
tB3HkMgoKhOVYggh0XFX/xHrQl8QkTqHnWefHpcrX0+OQl36OU/mKVyFUG0OrpiW
DuXBEfSVCW/zffbZB9i4vedH0i8/NytmSdjFnvu3VPSxR+shojXc4zd7UaEJAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQU/u2zRQlAsdx7JsVxBGn13bt+0tAwHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzQzNTJlMzEzMzMwMmUzMTMw
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2CaTANBgkq
hkiG9w0BAQsFAAOCAQEAMJfK3P5adW6nNJlB+9UDwAwnBq3ONBX65wTJTIveFQFE
Vw6UM+8kae3CiIBreu24njg5sFKVsat5DpxcOeC8p71zndyH35HgBBLD/MXC8/jD
9tFC6vZIsbO4GE7icJHUESFA51x1TNSwT+82STQussY2wvbfd/eeWDQK/LzFY2zg
V7daPq0aOkMJfpqJB4iDlYyLzmiFwLPwk5aT+EBIB4K//O3JTINwyEp3+AtOyEkp
OAqE8xeDfvsI4IPWhHljbbzWQZJjnfWrfqZb0sYO3k4CJqUfXQDStoPzR0OSQM49
gDV6Q/9pk3P/hPKJRNx2OOZOW6kdmUjJXu1cJ8AL7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org