Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e203537303433.roa
File: 34352e3134312e32302e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: VKXhNrOQiuhWVNgytWvUk0nt55tlSM2FF1gRALi3izk=
Subject key identifier: AB:7A:E6:9B:09:F9:90:FF:C8:E3:74:2A:5A:9A:41:62:3E:3C:E6:A2
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 4E779FB4F2CC82EB542CD8E509730618FF48836B
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e203537303433.roa
Signing time: Sat 29 Apr 2023 09:04:37 +0000
ROA not before: Sat 29 Apr 2023 08:59:37 +0000
ROA not after: Sat 27 Apr 2024 09:04:37 +0000
asID: 57043
IP address blocks: 45.141.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:77:9f:b4:f2:cc:82:eb:54:2c:d8:e5:09:73:06:18:ff:48:83:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 29 08:59:37 2023 GMT
Not After : Apr 27 09:04:37 2024 GMT
Subject: CN=AB7AE69B09F990FFC8E3742A5A9A41623E3CE6A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:11:4a:8e:b2:56:76:48:76:2d:7a:ab:0b:
f1:21:5a:0d:99:ed:de:73:7d:eb:da:98:7f:25:63:
6d:a2:97:20:48:7d:cb:b5:97:1d:6d:71:c5:60:5a:
c2:58:50:2f:b3:c8:e0:22:02:44:cb:f0:c8:73:59:
06:4a:29:a6:e9:8d:2d:b9:05:28:5b:0e:ff:85:ee:
cf:46:ca:26:cd:0d:7c:34:f4:8a:da:f6:23:cf:56:
c7:a1:f6:4f:78:f5:13:02:ac:4c:e4:5d:06:e7:08:
e3:f8:5e:2a:e7:e8:9f:5c:e4:70:83:54:c5:cb:ee:
45:e5:ed:d4:dc:55:34:7b:38:76:82:00:bc:25:ee:
9e:41:14:0c:a8:9d:f2:3b:10:51:ba:18:66:1e:e3:
a3:32:43:24:f5:81:47:fb:7d:0d:64:e2:d4:a2:f7:
b5:23:a3:f0:3a:43:bd:50:92:73:d7:0d:0f:e9:f3:
a3:58:62:67:6c:45:da:b4:38:62:bc:b2:2b:83:fa:
93:74:f3:76:3d:7f:b1:ba:22:d1:7c:17:2d:05:ed:
8a:3a:8e:f7:da:9f:b7:9c:bb:c2:cc:a6:b8:41:43:
25:25:a9:d4:c5:c9:4d:eb:57:bd:c5:35:2a:bd:97:
f3:93:5e:8a:44:e6:a5:7e:cd:33:04:2e:73:c2:c8:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7A:E6:9B:09:F9:90:FF:C8:E3:74:2A:5A:9A:41:62:3E:3C:E6:A2
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.20.0/24
Signature Algorithm: sha256WithRSAEncryption
94:69:ab:a2:3a:57:30:e3:0f:49:7a:7b:62:1d:13:24:18:3d:
8f:24:73:d5:d3:9b:37:7e:66:a0:78:84:52:64:ae:c0:b3:95:
5d:ee:64:ee:d9:b4:65:08:6a:42:fe:39:9f:f5:b0:20:9c:e2:
f7:ff:84:d5:2d:f1:0a:08:43:5a:fb:de:2a:a9:a2:f7:00:35:
df:67:06:bb:7c:4d:e1:51:b9:62:eb:15:38:2e:6b:4c:76:42:
aa:07:ff:be:9a:69:92:4a:77:66:fe:f9:b6:f7:e1:fb:70:5c:
fc:dc:78:2b:44:a7:9c:1e:18:4e:fd:0c:ac:f6:90:a9:c7:1a:
59:ea:11:1a:ac:19:7d:d7:5c:02:9e:15:09:3c:37:a3:7b:d6:
e6:69:ff:98:1a:c4:a9:4c:b1:b4:1c:5a:ba:90:71:3a:69:70:
74:ed:87:91:09:2d:40:6d:d8:e9:34:40:7a:d3:6f:15:24:83:
91:1f:d7:fc:51:ee:ac:96:f4:60:e8:bc:74:3c:eb:39:34:db:
8b:9b:c2:45:3a:88:32:4a:e9:c8:70:72:eb:a6:81:26:f8:98:
ad:89:80:75:ac:c6:65:d6:2a:1e:46:de:93:26:6c:a7:ea:b6:
52:0d:68:9d:2d:8b:77:2e:74:24:ad:31:4e:9c:0a:3e:56:27:
00:a6:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org