Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36302e302f32332d3234203d3e203432333636.roa
File: 39322e3131382e36302e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: C4F71iaxCSZ/ZBsC4HbWyF84THhmf3dW41Lp+QA/QzQ=
Subject key identifier: 9D:27:82:18:60:27:33:64:85:CF:2B:8B:42:AE:3D:9B:4E:B9:15:8D
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 54B01F8CF8A73A025BC73FB0A982B086BF4E72EB
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36302e302f32332d3234203d3e203432333636.roa
Signing time: Mon 10 Apr 2023 08:19:55 +0000
ROA not before: Mon 10 Apr 2023 08:14:55 +0000
ROA not after: Mon 08 Apr 2024 08:19:55 +0000
asID: 42366
IP address blocks: 92.118.60.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b0:1f:8c:f8:a7:3a:02:5b:c7:3f:b0:a9:82:b0:86:bf:4e:72:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 10 08:14:55 2023 GMT
Not After : Apr 8 08:19:55 2024 GMT
Subject: CN=9D2782186027336485CF2B8B42AE3D9B4EB9158D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:61:52:6b:35:07:c8:4c:01:cf:8e:57:ad:b1:
d7:77:a9:f0:8f:c6:b6:b8:c8:2a:4b:9f:f2:6f:7b:
7a:c7:d7:c7:8a:0a:17:07:95:02:f2:3f:64:9f:5f:
6e:99:bb:fd:1e:ec:c1:27:69:0e:db:10:a2:cb:3d:
20:fd:89:98:e1:3b:4c:45:cb:fd:2e:b9:87:a2:a7:
a7:34:88:26:a6:b3:cb:92:79:19:e1:de:83:e9:98:
46:db:5f:34:ec:5c:12:1b:47:e6:f7:f0:68:3d:6b:
24:85:1c:a4:11:c2:a9:91:70:c4:b4:69:d4:77:79:
da:f2:e5:c2:e2:9f:e7:ec:71:00:83:b7:f7:86:3f:
53:34:0f:4b:76:99:a0:bf:15:ad:6a:79:09:de:43:
1f:74:e9:71:a2:65:66:a8:51:9c:01:f3:a8:53:da:
9a:0e:7a:05:27:89:27:45:d6:64:ba:39:a4:d5:62:
82:99:d5:37:47:fd:25:ad:65:20:7a:43:38:50:fd:
b5:5c:cb:73:89:dd:f7:56:8c:00:d5:21:c0:82:de:
1d:d5:a2:85:5b:76:f8:55:3b:0c:f3:db:49:25:15:
07:72:aa:31:f4:bf:fb:ac:14:80:15:fb:64:d0:22:
f6:5b:3e:cd:c3:8a:37:af:8b:be:ab:aa:44:eb:2d:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:27:82:18:60:27:33:64:85:CF:2B:8B:42:AE:3D:9B:4E:B9:15:8D
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36302e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.60.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:f7:ed:eb:00:c9:55:35:ad:7f:9c:84:9f:1a:4f:fe:0b:86:
08:5d:11:13:33:71:21:21:bf:29:fa:f8:32:4b:b6:39:bc:e5:
fa:9d:10:42:b1:68:0d:38:c0:91:75:62:f6:8d:1b:a2:8f:7a:
90:8b:b9:e9:b5:81:cb:6c:36:55:4a:b8:e7:04:39:51:18:80:
d0:92:9d:70:f4:88:39:c7:3a:6a:56:56:1d:b5:ee:90:99:2b:
f9:a7:24:f4:2c:68:ca:7c:7d:e5:fe:a6:e5:cc:cd:5d:cb:01:
42:1c:32:33:4a:b1:58:a3:2e:74:13:f6:26:4e:6c:53:d6:09:
34:7d:e2:d4:80:90:42:60:e2:e9:66:0c:e9:ac:9a:52:5f:5a:
74:41:0e:6c:94:57:e6:58:08:31:4e:b3:23:a4:6c:c2:cb:f8:
57:f9:e8:57:e5:75:2b:6a:ba:7c:31:c1:2b:44:a6:66:93:6e:
3f:21:69:b4:ae:b2:ad:5f:3c:18:a5:32:c0:55:27:97:8f:00:
d0:99:f9:38:06:77:92:49:31:ab:3b:03:93:f4:13:03:22:b0:
ee:87:41:97:bb:b1:d1:96:1b:ae:2d:49:3c:04:47:8b:ac:57:
75:d1:49:9f:fa:b8:cd:7e:0b:15:4f:97:30:19:1d:c3:24:9e:
b9:8d:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org