Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3133322e302e302f32322d3234203d3e2030.roa
File: 39312e3133322e302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: ugTt7W+1z1MjKf4OKii72X60k+/TRrg/uaEz4ytJKgI=
Subject key identifier: 57:4E:09:BC:D3:D4:C7:16:1A:21:56:BD:FA:9F:3B:B1:59:C1:31:26
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 6D5FE849079887C88BDF76BB27FC7687C6ECA4D4
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3133322e302e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:33 +0000
ROA not before: Mon 27 Mar 2023 08:22:33 +0000
ROA not after: Mon 25 Mar 2024 08:27:33 +0000
asID: 0
IP address blocks: 91.132.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:5f:e8:49:07:98:87:c8:8b:df:76:bb:27:fc:76:87:c6:ec:a4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:33 2023 GMT
Not After : Mar 25 08:27:33 2024 GMT
Subject: CN=574E09BCD3D4C7161A2156BDFA9F3BB159C13126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:fe:95:7f:e4:fd:5f:5e:e0:ac:ad:5e:b2:
8c:c7:6c:ec:03:46:0e:07:15:68:da:0e:d3:3a:79:
3b:75:e1:47:60:4d:c6:5a:d4:2d:fa:f9:92:a0:b5:
f8:c5:b5:da:8b:f8:aa:78:1f:b2:e8:b3:10:ec:fd:
6a:b0:ad:8e:60:1e:dd:71:c9:fb:ea:c1:c3:44:eb:
33:1a:9d:9d:5e:54:37:c9:e4:bf:13:b2:35:62:84:
84:df:1a:5c:82:9c:90:c2:a7:ba:3e:aa:44:36:fb:
e5:4e:a6:25:c7:d5:5a:9c:25:12:17:65:ac:f4:74:
cf:be:a8:60:a4:18:65:5f:a8:7c:c1:16:56:36:72:
f4:10:d6:11:dd:38:7a:08:51:a4:ac:a2:f3:f1:01:
cd:1f:87:a0:07:fb:3b:43:86:8d:f4:ec:e1:78:c7:
f1:d5:ff:26:df:7a:70:c9:57:1f:3a:cc:f2:5c:49:
f9:fd:17:0a:72:7c:47:c1:fd:c5:f6:a2:df:36:26:
ab:9f:1a:b1:e8:7e:5c:44:f4:47:ca:af:ad:65:7e:
a2:d2:1a:9b:4f:47:19:cd:0e:35:10:9b:2d:3c:10:
6f:a6:34:a7:41:06:be:df:a8:ca:32:4b:be:f0:a8:
dc:a3:f9:f1:f8:6b:50:af:59:2b:6f:1c:58:b2:d3:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4E:09:BC:D3:D4:C7:16:1A:21:56:BD:FA:9F:3B:B1:59:C1:31:26
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3133322e302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.0.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:4b:38:78:d4:c5:c9:df:27:4f:11:62:94:05:8a:08:ec:ff:
94:8a:af:79:4e:f8:6b:99:32:95:8c:f6:fd:80:3e:19:28:60:
a1:4d:fd:23:97:2b:75:fd:3c:83:93:d8:d2:72:3f:57:41:53:
66:8e:0d:ed:c5:d9:b6:67:6a:01:1b:b8:86:98:e8:52:e1:6f:
f6:82:e5:7e:50:26:c4:69:69:f1:8c:52:5e:25:99:44:0a:bf:
9e:36:f5:7c:f4:fa:d3:76:35:41:d6:5e:3e:4b:b2:31:3a:47:
f5:0e:d0:73:f0:21:14:9b:59:7f:4a:06:d0:11:be:2f:9d:62:
97:15:eb:1b:b4:c3:bf:ec:8c:dc:01:19:08:ab:51:14:67:10:
f1:7f:8c:04:a7:87:b2:06:1a:77:3d:f7:11:cc:9e:cd:f6:b2:
ae:17:d6:65:ec:20:c1:30:28:33:3e:4b:59:ce:7c:9d:c2:9e:
3c:43:6a:9b:03:d4:b0:27:3a:b3:25:9a:46:ba:d4:97:5f:35:
83:d9:5c:de:8e:16:ac:65:cf:49:11:74:b6:bb:69:57:6f:77:
b4:a2:1c:e9:25:7d:19:8b:07:18:1a:eb:3f:d6:9c:3e:3b:37:
75:49:a5:84:37:24:6b:b7:c4:70:b8:6c:ed:f3:d5:33:6d:b5:
33:5b:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org