Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38302e3138342e302f32322d3234203d3e2030.roa
File: 34352e38302e3138342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: SqHmRX9vOzv8/KIs0hF/Gf3jX9cNl4NpbBGWX9CvfZA=
Subject key identifier: FC:93:05:6D:EA:C0:B7:17:07:BA:03:1B:A7:3F:86:9C:4E:EF:6E:54
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 600E27DACA019DCA7125F8166C10B43738D37052
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38302e3138342e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:32 +0000
ROA not before: Mon 27 Mar 2023 08:22:32 +0000
ROA not after: Mon 25 Mar 2024 08:27:32 +0000
asID: 0
IP address blocks: 45.80.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:0e:27:da:ca:01:9d:ca:71:25:f8:16:6c:10:b4:37:38:d3:70:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:32 2023 GMT
Not After : Mar 25 08:27:32 2024 GMT
Subject: CN=FC93056DEAC0B71707BA031BA73F869C4EEF6E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:fd:e1:9c:be:52:23:80:a6:fa:0d:96:0f:
7e:89:55:fb:7f:55:09:6c:46:4a:a4:14:a4:38:3e:
99:24:42:7b:ed:d3:ac:5a:26:e9:f2:92:00:14:ab:
a7:d6:70:ec:47:41:e5:35:91:a5:c0:7e:58:a5:70:
df:41:24:04:0f:70:35:00:27:7b:78:dc:fd:89:45:
57:59:72:a3:f2:c2:3e:9a:83:17:2d:5d:9c:c5:a0:
b7:3d:c6:3d:e9:bc:45:10:4b:ef:79:6c:2f:98:8e:
a8:f7:1e:06:b3:b2:c1:b4:a2:d3:5e:5d:95:7c:bd:
21:55:d7:87:c5:50:bf:7e:b3:8b:5f:35:50:9f:15:
6d:37:75:70:e6:f5:89:53:3f:e1:69:45:10:d1:eb:
36:3c:34:ea:9f:12:c7:4c:14:6f:18:c4:d8:ca:1b:
40:1d:2c:03:1e:8e:0b:2d:a8:c3:08:83:78:5e:28:
52:21:18:bf:42:a3:98:bb:de:28:09:6b:e1:aa:77:
4a:38:0e:9b:d6:3e:07:8b:e8:82:18:3e:c8:cc:a8:
39:f1:aa:9f:9f:d4:cd:4e:04:27:7e:80:b2:0a:4d:
1a:ba:8e:89:e0:14:b7:8f:27:bf:89:6a:70:81:31:
74:b5:ee:34:ee:43:77:fb:90:6e:f5:f2:3b:b3:2d:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:93:05:6D:EA:C0:B7:17:07:BA:03:1B:A7:3F:86:9C:4E:EF:6E:54
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38302e3138342e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:d4:01:6f:01:47:3e:8a:f7:46:3d:5e:fe:54:d1:2e:41:f7:
cd:68:ad:0b:13:fb:84:a0:24:cb:6f:c4:36:9f:fd:07:28:64:
ed:36:c5:a4:09:6a:a9:c0:8d:36:b8:c7:db:2c:d3:0c:5b:5c:
d1:d7:47:6c:27:b5:50:d0:ef:83:bf:6f:c2:47:ee:80:15:42:
c5:09:b8:78:b9:0c:21:46:e2:eb:b2:d5:b6:45:af:ff:0d:d1:
2a:24:6a:8b:1e:77:48:98:1b:72:e3:bb:1d:e3:7c:1c:61:25:
62:f2:f9:26:d4:c8:e4:e6:05:2b:b2:7d:81:c5:3c:5b:11:79:
ed:41:32:df:7c:58:cf:e4:f2:39:83:e8:ed:43:6f:84:a8:57:
8a:87:91:f5:df:e4:ec:30:a8:d3:c3:76:2c:b9:26:6d:cf:60:
3d:ae:b9:58:d4:df:56:04:ee:1d:96:f3:bd:46:49:a9:64:7b:
a4:28:2e:ab:16:9f:4e:e3:a9:0d:08:c3:2c:03:bf:0b:1b:d4:
63:33:c0:98:ba:3b:98:35:06:0e:96:cc:b5:71:29:9a:e8:74:
8b:7b:9d:af:79:23:e3:a0:2a:cd:42:02:d6:32:cf:4d:37:d5:
d9:6d:07:fb:da:82:06:f6:6c:68:35:b9:e2:85:c8:c3:a9:11:
d2:01:dc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org