Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3135352e34302e302f32322d3234203d3e2030.roa
File: 34352e3135352e34302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: j89fY8RLL3ux3yr59PErlWrN/JUfPYUKD2eKbzOZE7c=
Subject key identifier: 05:47:59:AF:40:44:BC:B6:C6:41:36:A2:30:B7:31:5F:D0:24:2E:9D
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 53832FC0FBE82DCD2B4014209921A5B3A04661FD
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3135352e34302e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:29 +0000
ROA not before: Mon 27 Mar 2023 08:22:29 +0000
ROA not after: Mon 25 Mar 2024 08:27:29 +0000
asID: 0
IP address blocks: 45.155.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:83:2f:c0:fb:e8:2d:cd:2b:40:14:20:99:21:a5:b3:a0:46:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:29 2023 GMT
Not After : Mar 25 08:27:29 2024 GMT
Subject: CN=054759AF4044BCB6C64136A230B7315FD0242E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:9e:b5:03:6c:df:ed:9e:97:ac:20:14:37:
bd:da:0e:d5:72:4f:ad:32:d4:95:09:75:b3:8b:6f:
3e:ec:07:c7:fa:5b:83:46:aa:bc:64:12:b4:45:93:
38:08:07:0e:1a:ea:4c:aa:15:55:66:f7:37:f9:5a:
0e:d2:12:3e:8c:ea:ba:e9:ec:a2:b3:90:fa:2a:14:
85:48:8f:17:a5:63:07:3c:93:15:d5:62:3d:e4:64:
38:53:52:26:16:d1:c9:7c:c3:33:c5:ad:53:16:da:
3d:fd:af:cc:09:58:ae:56:60:8d:49:9e:c0:be:db:
4e:59:97:fa:e5:6a:69:e5:f4:f9:ef:ef:2f:6e:0b:
26:bf:91:b7:85:7c:28:52:b2:1f:b4:65:2d:60:ea:
07:40:f4:b1:2e:2c:d3:5c:06:58:30:23:ad:04:bb:
ed:d3:de:69:25:d6:e0:1e:0f:09:d7:0b:d2:90:d7:
15:bc:ce:0b:4d:1d:1b:94:d8:4c:8a:ab:72:84:dd:
6e:f9:2b:17:7d:4d:30:48:a0:90:78:05:ab:2d:17:
37:0b:e1:67:3c:b8:e1:13:f0:9c:c9:6e:08:02:a6:
d6:22:c1:cd:08:6e:a8:c8:e4:a4:d5:c3:78:ac:8d:
33:23:90:12:1e:79:07:83:b2:cc:96:47:69:ea:fa:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:59:AF:40:44:BC:B6:C6:41:36:A2:30:B7:31:5F:D0:24:2E:9D
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3135352e34302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.40.0/22
Signature Algorithm: sha256WithRSAEncryption
17:c0:23:25:08:31:f4:b7:48:b4:19:eb:59:3e:29:41:18:28:
99:c2:cb:55:d8:85:77:9a:dc:04:56:f9:39:b7:4c:48:26:b0:
11:b8:91:ea:79:32:c2:df:96:31:5a:04:0e:97:79:09:09:05:
bd:f6:08:05:a4:af:b8:eb:b2:d2:c6:a3:8c:10:89:5b:12:02:
88:93:c6:42:df:02:05:80:e7:00:e1:98:2a:e6:50:72:1d:00:
cc:de:d9:fa:b4:60:d4:4b:f2:1f:3e:69:5e:5e:78:13:11:23:
16:3a:9f:7f:e5:b6:a6:a6:0c:fb:9c:7a:df:f9:66:cb:18:10:
7a:5a:91:0f:b3:a9:17:3b:e8:74:da:3b:59:a9:e9:8c:1a:5c:
f0:72:a9:54:fd:0f:96:b7:9c:bc:08:75:ab:9c:10:95:9d:29:
08:ed:6b:1f:9c:a8:7b:3a:69:2f:a0:a3:86:7e:0c:2f:82:fa:
00:e5:d0:03:2a:63:87:6b:5d:e5:5e:d1:41:5a:b5:14:47:90:
d0:ca:cc:12:8c:4c:e3:77:fd:43:c2:aa:ed:82:72:50:55:33:
13:9b:bb:97:22:01:f4:6e:4a:57:89:f4:37:df:e2:20:c4:ef:
4c:f7:f1:01:8a:44:49:93:6d:80:cd:3a:65:2d:58:7e:7f:46:
12:d8:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org