Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e39342e3231312e302f32342d3234203d3e203432333636.roa
File: 34352e39342e3231312e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: mjatz//nqW1ynlNVXA1/1BhGdZ0/ajiu9NvbrkJN35g=
Subject key identifier: C2:D9:F0:E9:C6:40:2D:51:7D:DE:8A:93:7E:B9:24:AE:4E:AE:0C:94
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 2A936AA366D52282792B4BCEECBA9D1F56050791
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e39342e3231312e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:21:11 +0000
ROA not before: Mon 10 Apr 2023 08:16:11 +0000
ROA not after: Mon 08 Apr 2024 08:21:11 +0000
asID: 42366
IP address blocks: 45.94.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:93:6a:a3:66:d5:22:82:79:2b:4b:ce:ec:ba:9d:1f:56:05:07:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:16:11 2023 GMT
Not After : Apr 8 08:21:11 2024 GMT
Subject: CN=C2D9F0E9C6402D517DDE8A937EB924AE4EAE0C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:a7:6b:ea:42:11:fe:66:e4:7f:7e:53:b3:
a2:ad:fc:12:79:cd:04:7a:25:19:b9:c4:55:10:57:
73:2e:1b:32:59:20:2c:29:76:3b:3f:c5:2b:fd:13:
3c:78:53:fe:97:d0:08:d0:26:45:b6:3e:5e:f4:32:
4e:02:b2:ec:b0:3d:f2:77:5a:df:e8:82:2e:ce:fb:
b1:6f:b2:fe:3e:53:53:f8:f9:96:56:58:01:72:4a:
26:72:d0:bd:c8:db:18:73:ed:48:2f:6b:6d:23:b0:
3e:06:ba:c9:75:01:f1:52:ce:f7:72:b0:d3:49:05:
1f:e3:30:3b:be:ff:0c:c2:72:df:80:29:c8:c2:e7:
2b:df:df:3e:36:a1:84:1a:8a:af:6f:be:62:6c:2e:
cc:87:11:d8:26:52:ad:72:81:a3:64:26:89:36:8c:
49:47:02:e6:b8:ad:25:61:4f:a8:25:d7:18:b3:b1:
1f:43:64:e4:06:b4:ec:9b:2f:32:af:c7:af:81:dc:
4a:31:80:dc:b9:e1:fa:63:74:3d:b6:25:2a:6c:90:
3a:52:44:66:69:1a:5d:1d:15:58:62:81:3c:28:d7:
a7:c5:ea:36:70:82:86:cc:f1:53:49:96:28:c7:d5:
cd:0a:a2:b8:a0:99:52:6a:0b:0a:fc:e2:3f:5b:b1:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D9:F0:E9:C6:40:2D:51:7D:DE:8A:93:7E:B9:24:AE:4E:AE:0C:94
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e39342e3231312e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.211.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fa:63:d2:74:f4:a5:47:d2:8e:71:d8:5e:98:48:df:8c:a1:
d2:99:86:32:12:df:b4:31:05:40:96:31:51:39:39:ff:b6:bc:
c2:18:62:c7:6a:00:f1:f4:e3:c5:9c:14:ee:b0:e5:d7:9c:23:
c3:0f:3d:77:40:8e:a7:c1:06:16:81:2a:0f:70:de:e3:09:be:
48:34:81:c9:59:6f:3d:74:b8:12:88:b3:22:bf:5f:d1:5b:84:
11:2c:3f:6c:d1:57:4a:b8:21:f4:43:02:c7:83:11:2b:c3:1e:
42:02:b1:62:02:68:0d:45:ed:e1:72:2b:ce:3a:df:df:40:8a:
e6:fc:ff:6c:0f:4f:8e:f2:1d:f9:34:bc:0e:55:bb:71:5d:3f:
e7:a4:8e:5b:48:30:b0:49:9f:36:97:74:0e:79:d5:5e:d8:38:
84:11:9a:c8:6a:9f:13:2c:8e:61:fb:c1:19:41:1e:dd:5a:b6:
b7:8b:47:fb:36:fd:58:67:d1:e2:51:2f:5b:72:4c:09:96:7d:
d5:0c:30:44:df:c5:81:a0:86:35:c9:90:b3:9d:85:06:a9:c6:
f5:cc:ac:a3:4d:c9:7d:07:8c:27:a5:29:d6:fc:9e:bd:f3:aa:
4e:2d:a2:4e:e3:f0:d0:4e:31:2d:48:16:a7:e5:c3:ed:40:93:
96:01:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org