Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38342e3133392e302f32342d3234203d3e2030.roa
File: 34352e38342e3133392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: FdwohaEcvXre++uQ7XMX5JnlWNIHNpua76B0kDG6Kg0=
Subject key identifier: 31:99:66:04:10:8A:B4:8F:F8:D4:19:91:CB:64:F6:E7:2F:FB:75:8E
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 3F5482FF13C32A8DCA2BD1108B7E40DDEDD09C63
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38342e3133392e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:36 +0000
ROA not before: Mon 27 Mar 2023 08:22:36 +0000
ROA not after: Mon 25 Mar 2024 08:27:36 +0000
asID: 0
IP address blocks: 45.84.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:54:82:ff:13:c3:2a:8d:ca:2b:d1:10:8b:7e:40:dd:ed:d0:9c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:36 2023 GMT
Not After : Mar 25 08:27:36 2024 GMT
Subject: CN=31996604108AB48FF8D41991CB64F6E72FFB758E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:60:c9:00:94:b9:2c:ce:c0:ae:1e:78:30:
65:a4:24:5c:60:3b:bb:24:d5:a4:ea:68:0f:12:c8:
47:3e:07:48:c2:cc:3d:3f:a0:0a:d1:78:20:60:ed:
59:09:2f:aa:12:fb:b6:de:1d:ac:67:30:0b:dc:aa:
b8:11:d0:59:6a:00:80:e7:47:a6:f3:3a:61:e4:a0:
3a:ef:d0:d3:f3:b5:21:c4:26:11:43:98:98:fe:92:
aa:ce:b5:35:02:6a:00:45:70:25:cd:16:64:8d:1d:
c6:bf:c2:b5:02:bb:b3:79:3d:04:57:99:c7:10:1b:
6a:58:f1:3e:b0:09:63:88:c1:28:14:12:40:11:74:
47:0e:4b:3e:82:b2:ce:62:e6:9e:45:b2:d4:b0:61:
b6:9c:61:8a:b5:ee:62:d1:2c:15:cb:b8:c3:ea:35:
06:9a:64:ba:26:58:75:bc:40:6d:4e:12:63:ed:a7:
e3:0c:b5:5c:bc:f7:2b:c3:ec:8d:9b:f3:7d:d9:48:
25:3d:05:3b:d5:e5:09:c2:3b:4c:c7:dd:c2:49:3d:
56:31:b0:88:26:51:7b:bc:87:89:bc:30:18:8b:db:
31:ff:f2:67:02:05:75:b5:7e:8a:d3:80:ca:ac:ce:
32:29:e1:18:08:c6:bf:86:e8:a6:b1:0a:89:e0:ee:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:66:04:10:8A:B4:8F:F8:D4:19:91:CB:64:F6:E7:2F:FB:75:8E
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e38342e3133392e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.139.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1f:0a:b8:e8:71:57:7b:bf:b0:e9:fe:ff:80:8f:9f:53:b0:
24:e0:6c:38:45:df:26:cb:7c:70:13:6c:08:eb:c5:30:5f:97:
ee:1d:c0:e8:cc:64:46:b8:8a:a8:3a:7b:29:45:46:c7:fd:6f:
4d:48:fd:3b:06:db:94:e7:2e:81:61:41:fa:25:ca:49:c0:60:
7f:a7:bb:98:6b:02:a4:a5:c2:0d:a3:67:d2:78:19:8e:43:69:
86:ed:ed:d2:d0:c3:b8:bd:35:1b:0a:32:5f:9c:20:e9:e5:ab:
ae:bc:58:cd:ad:90:04:c4:b8:84:16:2c:b2:1b:1b:66:a4:2f:
cb:d6:2b:b2:9f:71:ff:a4:5f:d9:3f:84:69:20:53:7a:16:bc:
58:5e:fd:47:51:08:ee:2b:b0:56:4d:f6:84:3a:d6:a0:6a:56:
ee:04:47:a6:fa:b2:da:39:ce:81:7c:ab:30:7c:9b:57:d2:cd:
b8:02:51:e3:00:35:8d:aa:fd:74:97:b8:21:9c:70:70:f4:6e:
93:af:90:ee:2c:8f:e7:e2:ee:1b:c0:ee:7e:3f:52:8f:36:08:
f2:32:ea:6d:61:9a:b2:11:b6:e8:89:8d:84:80:21:ad:bf:02:
dd:63:85:67:d4:22:ff:f6:99:79:52:19:f3:25:87:ec:67:02:
24:3e:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org