Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e39342e3230382e302f32342d3234203d3e203432333636.roa
File: 34352e39342e3230382e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: U+M0TnOIsD1jT2oHU4DBasgsdJooLDa9SG41110JUnM=
Subject key identifier: 4A:33:91:3F:3B:14:24:27:87:CB:8D:96:BD:EB:A5:40:36:E3:C5:02
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 032CBA30517D452DD007B699D3FE0C37B3854203
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e39342e3230382e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:21:05 +0000
ROA not before: Mon 10 Apr 2023 08:16:05 +0000
ROA not after: Mon 08 Apr 2024 08:21:05 +0000
asID: 42366
IP address blocks: 45.94.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2c:ba:30:51:7d:45:2d:d0:07:b6:99:d3:fe:0c:37:b3:85:42:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:16:05 2023 GMT
Not After : Apr 8 08:21:05 2024 GMT
Subject: CN=4A33913F3B14242787CB8D96BDEBA54036E3C502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:7a:e2:26:16:8e:56:79:2d:d4:23:75:0f:
0e:53:cd:0e:3c:c4:b9:7f:e1:7b:19:8e:33:45:b1:
51:76:4f:6b:2d:84:dc:6c:a2:d7:ac:73:39:09:f8:
5a:bd:d8:03:00:0d:1d:9a:6c:0e:e9:57:ba:7e:3a:
ff:b5:62:48:af:39:c8:71:d8:ac:91:0e:d5:fc:f4:
1a:1a:72:de:68:19:a3:11:8f:d5:63:32:3e:de:16:
80:3c:0e:c2:d6:cc:c0:50:86:8e:c5:b4:99:ee:47:
d9:62:3c:95:00:a6:9f:bf:de:6b:4e:d0:e2:41:49:
45:4c:fe:bc:8e:10:1f:f5:fd:d2:a3:d9:62:0a:51:
7b:fb:9f:ec:43:15:60:a0:9a:28:d4:c2:7b:3e:77:
15:a3:08:52:d0:5c:ad:71:d1:4e:1c:3b:8b:c4:ce:
c9:bb:dc:aa:35:a2:a9:a1:c8:a1:d1:0d:9c:81:05:
6c:6a:13:87:9d:2a:ca:1e:81:92:bd:f8:ee:eb:ac:
e6:2c:69:17:90:6a:3b:f3:6a:fe:50:ea:fc:e3:7e:
5d:06:a2:18:16:1d:30:11:13:7c:ce:65:96:ec:ea:
0d:3b:ee:7e:04:af:4c:de:12:4c:86:8f:38:21:ce:
af:9d:46:66:ee:3d:f1:e5:1d:f6:f4:1a:15:dc:54:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:33:91:3F:3B:14:24:27:87:CB:8D:96:BD:EB:A5:40:36:E3:C5:02
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e39342e3230382e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.208.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b6:7b:5c:f9:f0:44:65:cd:fb:26:4a:19:4a:2f:69:0e:43:
07:f9:be:64:a0:b5:60:90:d4:11:42:f4:85:0f:3f:da:14:5a:
58:4e:ff:33:1a:28:cb:10:f1:8c:a5:8d:71:9e:f0:89:fd:ae:
08:de:f3:b8:02:da:f1:0a:c8:64:0f:7f:82:28:5d:3f:22:98:
d4:d3:7c:5c:ce:3c:79:e1:4f:a7:ff:ab:c4:14:71:5a:13:a4:
ad:8c:76:15:1a:70:fc:cd:15:3e:71:bc:c6:55:a1:37:36:df:
62:07:0b:5f:da:cb:1d:8f:f5:e9:6d:7f:fa:f7:a4:b3:2e:81:
be:d0:76:bf:79:86:17:ac:8e:f2:2e:fb:f1:c8:fe:bb:11:99:
da:c4:fb:ae:6f:aa:00:ba:64:79:ed:c5:4a:ae:45:3d:33:d7:
78:80:9c:9d:25:bf:39:36:fd:55:b4:36:44:d2:45:48:ea:1e:
02:28:12:90:cb:8e:fe:b4:23:26:b0:90:5f:6f:0b:28:21:b8:
7b:d7:14:02:ca:f6:41:62:6b:e0:dd:77:c7:0b:be:9e:23:45:
ed:ea:71:7a:f9:0d:43:f3:70:bd:66:a0:84:bd:7c:60:4b:31:
ef:18:09:82:71:54:b2:10:a9:44:0d:41:a9:bd:b3:e2:f1:f8:
bc:65:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org