Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e203631333137.roa
File: 34352e3134312e32302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: i/lKF6Lfpc4Vkmxw1eZjJumFNVW26cQD53dcM5KEiiw=
Subject key identifier: 23:5F:3C:91:AE:BA:A3:44:DC:47:32:47:84:F5:75:5D:7C:B5:FF:02
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 58A1D07D95C1F9506B8A9E5773ACBFFF68846C00
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e203631333137.roa
Signing time: Sat 29 Apr 2023 09:04:58 +0000
ROA not before: Sat 29 Apr 2023 08:59:58 +0000
ROA not after: Sat 27 Apr 2024 09:04:58 +0000
asID: 61317
IP address blocks: 45.141.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a1:d0:7d:95:c1:f9:50:6b:8a:9e:57:73:ac:bf:ff:68:84:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 29 08:59:58 2023 GMT
Not After : Apr 27 09:04:58 2024 GMT
Subject: CN=235F3C91AEBAA344DC47324784F5755D7CB5FF02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:47:92:3a:f6:a5:a5:5e:df:19:50:e4:b4:
d1:0b:fd:2e:1d:e7:09:f8:90:89:ea:15:86:44:27:
e4:8a:01:8e:9a:6f:6e:b5:9a:a3:b5:53:e4:f9:5a:
1e:ef:aa:f8:59:6d:7e:60:c4:ad:74:fd:e3:ed:7e:
0e:49:2f:0f:34:36:6a:9c:d6:65:79:4f:28:f7:fc:
f5:ae:ab:6f:cc:94:a5:37:62:5a:89:a2:56:eb:5f:
54:32:4e:6c:0b:ac:18:98:35:7c:0e:ac:c8:1c:0a:
52:a1:44:5c:67:32:f9:be:6e:88:4e:41:eb:7b:0e:
5b:c2:df:1a:a0:91:03:ef:bb:58:2b:f6:7c:40:33:
86:3d:5f:93:ca:4c:79:cc:80:ac:82:17:0a:a3:cc:
b9:f6:6d:0c:76:1a:84:fe:72:c6:fd:30:85:44:5d:
37:20:b6:49:c4:45:bf:80:dd:17:84:30:32:70:35:
b4:4a:f0:99:8f:bc:70:91:1f:91:bb:95:b4:0a:b4:
d9:88:81:6a:a9:77:81:15:2a:5e:f0:20:58:d2:1b:
59:48:f6:3b:cf:03:2b:3f:60:fd:d5:29:4b:19:07:
38:24:b0:c7:7c:b9:fc:aa:83:56:21:07:ad:8a:08:
42:d9:56:8c:07:e4:c2:57:c4:b2:fc:fa:82:f9:ca:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5F:3C:91:AE:BA:A3:44:DC:47:32:47:84:F5:75:5D:7C:B5:FF:02
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3134312e32302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.20.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3f:cb:b9:5a:82:a5:95:d8:a1:fa:ba:94:7c:88:24:85:b2:
36:cb:a1:18:d4:10:70:82:78:d7:02:42:6d:3f:0f:d5:22:55:
49:9a:1a:34:2d:71:a5:fa:34:6c:5b:e9:f0:9c:f5:58:57:e2:
6a:ac:e1:30:f4:88:42:ac:6f:79:f3:2b:63:d3:69:93:43:4d:
7c:4c:59:2d:72:64:d1:b9:cf:a2:a0:b8:d1:d7:2b:2a:6d:77:
db:59:b8:28:b5:ac:a3:4b:dc:0c:93:97:8c:fe:5f:4d:66:ef:
2c:d7:87:00:16:6d:3a:7b:5d:3d:85:f5:5b:ca:9f:f9:1b:58:
73:ed:c5:90:af:e9:23:88:6c:e2:79:98:6d:33:a1:f1:64:9c:
c7:23:f3:a4:95:a3:75:27:19:af:04:62:f8:c7:97:98:53:bb:
75:11:7f:62:50:ee:9b:21:21:b9:f3:68:a9:0c:9d:1e:57:95:
3c:cd:af:f4:b0:db:93:e9:7a:7f:bb:80:4c:5b:4e:c4:10:2b:
d4:42:b1:02:05:9b:42:08:ad:48:4e:b5:53:3d:b7:b4:92:6e:
24:52:6f:24:49:c7:e8:31:60:e8:e6:0f:73:93:ea:35:9f:71:
59:37:91:8c:0c:e8:22:32:12:4f:6d:7c:03:68:ff:2d:79:99:
30:d8:af:f9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUWKHQfZXB+VBrip5Xc6y//2iEbAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yMzA0MjkwODU5NThaFw0yNDA0MjcwOTA0NThaMDMxMTAvBgNV
BAMTKDIzNUYzQzkxQUVCQUEzNDREQzQ3MzI0Nzg0RjU3NTVEN0NCNUZGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jEeSOvalpV7fGVDktNEL/S4d
5wn4kInqFYZEJ+SKAY6ab261mqO1U+T5Wh7vqvhZbX5gxK10/ePtfg5JLw80Nmqc
1mV5Tyj3/PWuq2/MlKU3YlqJolbrX1QyTmwLrBiYNXwOrMgcClKhRFxnMvm+bohO
Qet7DlvC3xqgkQPvu1gr9nxAM4Y9X5PKTHnMgKyCFwqjzLn2bQx2GoT+csb9MIVE
XTcgtknERb+A3ReEMDJwNbRK8JmPvHCRH5G7lbQKtNmIgWqpd4EVKl7wIFjSG1lI
9jvPAys/YP3VKUsZBzgksMd8ufyqg1YhB62KCELZVowH5MJXxLL8+oL5yjXdAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUI188ka66o0TcRzJHhPV1XXy1/wIwHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzQzNTJlMzEzNDMxMmUzMjMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2N
FDANBgkqhkiG9w0BAQsFAAOCAQEAdz/LuVqCpZXYofq6lHyIJIWyNsuhGNQQcIJ4
1wJCbT8P1SJVSZoaNC1xpfo0bFvp8Jz1WFfiaqzhMPSIQqxvefMrY9Npk0NNfExZ
LXJk0bnPoqC40dcrKm1321m4KLWso0vcDJOXjP5fTWbvLNeHABZtOntdPYX1W8qf
+RtYc+3FkK/pI4hs4nmYbTOh8WScxyPzpJWjdScZrwRi+MeXmFO7dRF/YlDumyEh
ufNoqQydHleVPM2v9LDbk+l6f7uATFtOxBAr1EKxAgWbQgitSE61Uz23tJJuJFJv
JEnH6DFg6OYPc5PqNZ9xWTeRjAzoIjIST218A2j/LXmZMNiv+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org