Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3130392e3233362e36312e302f32342d3234203d3e203332313831.roa
File: 3130392e3233362e36312e302f32342d3234203d3e203332313831.roa (raw, json)
Hash identifier: NdaBStIryE73fjECvaExDKGw/Q3QqfTZnkcZOlzbyOk=
Subject key identifier: E4:B3:88:6E:C3:66:66:21:E9:ED:B4:F3:27:91:81:55:91:6F:A7:4C
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 663FD9D79E70DA69986595C40D2483327BC18220
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3130392e3233362e36312e302f32342d3234203d3e203332313831.roa
Signing time: Mon 27 Mar 2023 08:27:52 +0000
ROA not before: Mon 27 Mar 2023 08:22:52 +0000
ROA not after: Mon 25 Mar 2024 08:27:52 +0000
asID: 32181
IP address blocks: 109.236.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3f:d9:d7:9e:70:da:69:98:65:95:c4:0d:24:83:32:7b:c1:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:52 2023 GMT
Not After : Mar 25 08:27:52 2024 GMT
Subject: CN=E4B3886EC3666621E9EDB4F327918155916FA74C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:94:de:ea:21:69:2c:d7:7d:43:bb:5f:48:
67:c0:1f:8a:d2:bd:66:3d:90:2e:d1:4e:a1:ed:cf:
d8:04:ef:51:62:d2:57:7e:f2:5d:56:56:c3:67:78:
b1:81:ca:47:e3:00:0c:2c:89:75:07:63:07:06:80:
b5:2d:0d:b6:a8:83:69:f2:47:0e:e9:4d:f7:32:57:
88:4d:61:6e:3b:62:be:6a:43:76:17:37:72:18:27:
17:7c:88:38:e4:e5:1e:6d:c4:fa:a9:7e:64:7c:ff:
27:11:cb:53:aa:42:06:e0:cf:00:eb:96:6a:90:3d:
3f:e3:a0:39:67:37:83:26:02:1d:49:c1:e5:44:08:
9c:28:c6:e7:35:14:e7:e9:9e:c2:c1:53:f5:34:ab:
98:13:1f:ff:f3:e4:08:53:4c:84:fd:38:18:42:ae:
08:9b:ea:1e:42:15:ba:ea:03:ee:a8:a2:92:35:54:
b9:f7:6f:ac:4d:72:ab:76:15:4c:0e:99:7a:6f:44:
00:47:e7:23:38:fe:35:1a:26:e3:83:bb:f0:e2:74:
43:ac:99:6a:8c:1c:d7:04:7d:77:23:97:d3:ae:85:
bf:7c:d3:ec:ab:32:06:54:2d:79:db:25:80:fd:dc:
f7:85:62:d1:8a:84:8e:a0:41:f3:22:1f:e6:e7:bd:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B3:88:6E:C3:66:66:21:E9:ED:B4:F3:27:91:81:55:91:6F:A7:4C
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3130392e3233362e36312e302f32342d3234203d3e203332313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:83:4d:f1:13:78:1d:7a:16:c8:14:d7:fd:b4:82:90:fd:1b:
eb:79:2b:7b:62:2d:37:07:53:b4:59:26:78:8f:ae:e4:ab:15:
c0:2f:cc:44:07:58:96:99:20:e4:20:05:27:86:c1:04:a0:9e:
13:46:c2:62:6f:5a:f9:38:82:3a:9a:25:1f:39:bc:00:95:c9:
8d:bb:05:ad:5a:da:b5:b6:96:1d:ac:41:93:78:75:92:88:47:
f1:5d:93:a1:e4:d7:ba:a6:0c:0f:23:6b:a0:ed:0f:aa:c1:3f:
66:95:16:ad:bd:dd:62:c1:0f:c1:70:39:9a:c1:64:a9:82:c1:
3d:ff:a0:ca:5f:d7:e1:f5:27:43:0f:18:b4:40:77:69:a1:22:
d8:d0:b6:ce:4c:7f:09:bd:8c:6d:2a:a9:39:a4:35:a5:14:f3:
a6:76:2a:0a:89:91:d3:15:32:a4:a9:ab:32:a5:50:33:31:d9:
df:29:d8:a6:2a:a3:d3:34:3f:e9:b0:c5:09:cc:01:c1:19:6b:
b6:22:ca:08:32:b8:ee:37:4a:b1:07:da:10:18:36:a4:9d:7e:
c0:ce:9a:7a:c7:eb:43:85:52:e4:64:b7:fa:04:8f:26:39:1d:
0f:e0:53:50:b1:ae:71:63:f9:da:c7:21:41:f4:0e:e2:cc:56:
4c:1b:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org