Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3139362e3232312e302f32342d3234203d3e203432333636.roa
File: 39312e3139362e3232312e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: R/4iQWUYnQFqxtgUaVQ14/vymuhHhrxSFgYHYDZTzcA=
Subject key identifier: 8C:E5:DC:2A:1D:04:E1:23:8B:94:F7:23:AA:76:D5:85:F9:0B:A9:EE
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 64C14079EC3020BD99D185585202FA71FA3F4EB3
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3139362e3232312e302f32342d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:18:35 +0000
ROA not before: Mon 10 Apr 2023 08:13:35 +0000
ROA not after: Mon 08 Apr 2024 08:18:35 +0000
asID: 42366
IP address blocks: 91.196.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c1:40:79:ec:30:20:bd:99:d1:85:58:52:02:fa:71:fa:3f:4e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:13:35 2023 GMT
Not After : Apr 8 08:18:35 2024 GMT
Subject: CN=8CE5DC2A1D04E1238B94F723AA76D585F90BA9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:f5:40:6f:16:ca:44:ca:f4:9e:10:90:50:
3c:e3:7f:62:ea:c2:4f:1c:3b:7c:91:02:80:a1:dd:
22:60:67:ad:86:e7:b1:e7:eb:7f:fc:65:c2:70:f9:
87:ba:88:cc:95:59:b1:fd:bf:1c:63:5a:77:2a:cc:
cd:f0:be:80:97:f5:ac:fa:96:ab:63:c6:ec:10:10:
58:36:14:d1:c0:89:67:32:d8:1e:0c:19:52:8f:1a:
8d:ee:59:e1:ba:5e:f1:4b:06:ac:04:74:28:2c:10:
56:96:79:20:c6:92:0b:a2:56:c2:53:13:78:aa:d9:
72:cb:28:f7:4a:45:59:c7:f3:64:a4:db:a6:4b:ca:
1e:b3:53:98:2d:0e:44:18:11:f9:ce:62:1b:18:c1:
d4:b9:3b:ad:af:05:43:99:5b:3f:33:84:68:8a:c9:
c4:95:3e:b2:5a:b6:5c:9b:00:40:70:47:08:de:21:
2a:9a:90:df:c9:19:74:e1:47:b7:0a:83:3d:8e:cb:
d3:f7:2a:20:a2:ec:ff:0c:0b:ac:d1:04:6b:36:2e:
79:a1:c5:4c:4d:bc:fb:bd:07:39:06:63:57:b6:53:
d2:6a:c3:2d:8f:66:f2:76:a8:2b:4f:f0:69:53:01:
d6:50:7d:93:1c:d9:a8:c8:31:bd:5c:74:b5:75:3e:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:DC:2A:1D:04:E1:23:8B:94:F7:23:AA:76:D5:85:F9:0B:A9:EE
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3139362e3232312e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5d:a2:db:50:44:eb:a8:a8:18:c2:72:14:76:c6:ff:05:86:
d5:74:2e:ba:1a:5b:bd:47:51:36:11:50:5a:75:72:f5:f4:9e:
53:86:c9:a0:cb:7e:72:12:21:9b:f2:c7:94:c5:cf:a5:aa:d5:
36:94:b2:46:25:81:18:16:ef:2c:e4:a5:35:03:0e:54:d5:5d:
47:10:e3:10:87:ad:21:31:74:ac:b5:f9:aa:5c:53:84:0e:d8:
25:f3:e8:ba:ea:f9:4c:46:ad:c2:73:2a:b8:bf:7d:5a:37:33:
f2:e6:41:bb:52:44:83:d5:03:27:21:c4:b4:e9:c9:ff:8a:9b:
aa:6c:a3:ae:3f:37:45:29:11:6c:16:9c:3f:5a:b8:82:56:fd:
8a:fc:85:a2:33:61:0d:0a:8c:d8:0e:5f:b5:7d:af:d1:99:38:
91:0d:ca:e9:92:47:5b:8e:d0:cc:da:b1:1f:94:20:0b:23:52:
db:75:4a:91:0a:a0:68:43:57:ea:2b:22:e6:84:89:fb:21:ff:
4e:32:c0:96:10:3c:9c:78:d1:eb:d4:68:35:95:ad:2e:0b:65:
20:31:59:fc:0b:b4:9e:1b:98:06:b1:5f:b6:da:a9:f0:e7:46:
88:73:48:19:62:a4:b2:58:16:46:1a:1d:fb:c2:97:76:86:17:
1e:12:87:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org