Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3137382e3231322e33332e302f32342d3234203d3e2030.roa
File: 3137382e3231322e33332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: kxRHYa/1eiVutf43MPe5cZIFQWe0BUbm0mcLLtP0DXk=
Subject key identifier: 39:F2:ED:03:9C:E7:10:90:A0:94:0C:D9:E7:35:6B:20:F5:BE:A3:A6
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 524D9FB1B1C196D0100943A680343B7C6BE2072E
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3137382e3231322e33332e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:50 +0000
ROA not before: Mon 27 Mar 2023 08:22:50 +0000
ROA not after: Mon 25 Mar 2024 08:27:50 +0000
asID: 0
IP address blocks: 178.212.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:4d:9f:b1:b1:c1:96:d0:10:09:43:a6:80:34:3b:7c:6b:e2:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:50 2023 GMT
Not After : Mar 25 08:27:50 2024 GMT
Subject: CN=39F2ED039CE71090A0940CD9E7356B20F5BEA3A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:db:98:11:2d:90:59:26:79:86:17:c2:dc:
a9:6c:08:0a:2d:26:da:94:04:52:ab:a9:c5:43:25:
8b:71:09:12:bf:f0:4b:76:e4:1c:c5:58:e0:db:58:
f5:d1:87:be:c5:e7:90:0c:ce:8d:93:76:7c:f4:a8:
d3:c4:cd:a0:2c:91:d8:6c:3b:d4:e1:50:a0:63:d4:
0f:7f:92:e0:b0:b4:23:74:07:23:94:2d:69:9c:fa:
4b:9f:83:18:ce:fb:78:45:ca:91:8e:b4:ac:4c:42:
03:ed:35:7b:f9:9b:08:2f:51:3d:cc:62:36:13:74:
61:65:5b:53:ce:60:fe:25:6e:d1:3e:56:7c:ba:81:
13:bd:00:18:6a:d4:0e:42:71:9d:aa:d7:f8:f1:3f:
59:e1:85:c3:d8:3e:a3:fa:53:62:13:5e:25:4d:7a:
dc:f1:4c:27:c3:27:de:24:0e:d6:2a:de:fd:ff:df:
53:36:7d:68:b8:8c:83:39:28:ce:24:af:8e:42:3f:
fb:46:0f:f3:da:2b:92:7a:b2:3b:5e:54:cf:6a:b2:
66:19:bc:5c:e0:a2:9e:43:7b:e9:b7:37:8b:53:2e:
eb:74:b7:a8:d3:3b:bf:90:49:79:b5:41:58:fe:d5:
8b:af:be:94:11:d2:97:77:4d:5d:28:4a:39:b0:75:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F2:ED:03:9C:E7:10:90:A0:94:0C:D9:E7:35:6B:20:F5:BE:A3:A6
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3137382e3231322e33332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:7e:d1:b1:a2:05:54:5e:12:19:da:30:af:d6:b2:9c:38:5d:
62:97:bd:5b:4f:64:bf:b6:b1:3f:55:be:21:c4:fa:22:8a:69:
f3:5c:f6:4a:4c:a5:b1:71:ff:02:c6:2e:f5:52:62:37:d1:4a:
7c:58:0e:23:bb:c3:8c:0e:7a:3a:64:5a:c9:65:88:4d:df:a6:
e3:99:7f:bc:06:8f:e8:1d:f5:e4:b4:ec:aa:6e:7c:a7:09:e0:
4c:91:31:93:35:d0:b5:07:1c:5e:76:d7:df:ae:54:89:33:ff:
67:d5:39:82:03:3f:92:4a:9b:4f:0d:e3:21:8a:ce:1d:d8:0a:
39:c4:c6:70:b4:66:9c:41:b5:f2:65:6c:ad:a9:b3:0d:dd:c3:
3e:40:62:9b:83:16:fe:93:1d:a6:e1:9b:55:b8:f8:1b:fb:34:
4d:77:7d:13:a3:e0:1f:10:81:fb:b3:c5:79:c6:37:91:7d:d3:
e4:df:0f:e8:1f:90:ae:55:cb:28:5b:4b:4b:f4:77:f4:7d:cb:
dd:6e:54:ce:0d:df:f6:5e:da:35:f8:18:b8:89:04:29:29:b4:
92:bd:d8:c7:39:10:72:b3:02:b1:77:a7:41:18:c7:43:26:4f:
4f:f9:ce:e9:89:b0:47:c2:db:ae:62:95:6c:de:00:36:db:bf:
93:30:93:1b
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUUk2fsbHBltAQCUOmgDQ7fGviBy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yMzAzMjcwODIyNTBaFw0yNDAzMjUwODI3NTBaMDMxMTAvBgNV
BAMTKDM5RjJFRDAzOUNFNzEwOTBBMDk0MENEOUU3MzU2QjIwRjVCRUEzQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqtuYES2QWSZ5hhfC3KlsCAot
JtqUBFKrqcVDJYtxCRK/8Et25BzFWODbWPXRh77F55AMzo2Tdnz0qNPEzaAskdhs
O9ThUKBj1A9/kuCwtCN0ByOULWmc+kufgxjO+3hFypGOtKxMQgPtNXv5mwgvUT3M
YjYTdGFlW1POYP4lbtE+Vny6gRO9ABhq1A5CcZ2q1/jxP1nhhcPYPqP6U2ITXiVN
etzxTCfDJ94kDtYq3v3/31M2fWi4jIM5KM4kr45CP/tGD/PaK5J6sjteVM9qsmYZ
vFzgop5De+m3N4tTLut0t6jTO7+QSXm1QVj+1YuvvpQR0pd3TV0oSjmwdW+hAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUOfLtA5znEJCglAzZ5zVrIPW+o6YwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzEzNzM4MmUzMjMxMzIyZTMz
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLUITANBgkq
hkiG9w0BAQsFAAOCAQEAm37RsaIFVF4SGdowr9aynDhdYpe9W09kv7axP1W+IcT6
Iopp81z2SkylsXH/AsYu9VJiN9FKfFgOI7vDjA56OmRayWWITd+m45l/vAaP6B31
5LTsqm58pwngTJExkzXQtQccXnbX365UiTP/Z9U5ggM/kkqbTw3jIYrOHdgKOcTG
cLRmnEG18mVsramzDd3DPkBim4MW/pMdpuGbVbj4G/s0TXd9E6PgHxCB+7PFecY3
kX3T5N8P6B+QrlXLKFtLS/R39H3L3W5Uzg3f9l7aNfgYuIkEKSm0kr3YxzkQcrMC
sXenQRjHQyZPT/nO6YmwR8LbrmKVbN4ANtu/kzCTGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org