Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3137382e3231322e33342e302f32342d3234203d3e2030.roa
File: 3137382e3231322e33342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 2wnGYlbec/3eFGO9aDHdYDNxCgUypf0kiUVO75LsNds=
Subject key identifier: 1E:56:9D:AD:D6:73:B6:09:95:41:BC:86:E2:70:63:1B:CA:1A:A4:8B
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 30943DC586EE0630B65607765BA93EA5A2B11EFD
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3137382e3231322e33342e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:50 +0000
ROA not before: Mon 27 Mar 2023 08:22:50 +0000
ROA not after: Mon 25 Mar 2024 08:27:50 +0000
asID: 0
IP address blocks: 178.212.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:94:3d:c5:86:ee:06:30:b6:56:07:76:5b:a9:3e:a5:a2:b1:1e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:50 2023 GMT
Not After : Mar 25 08:27:50 2024 GMT
Subject: CN=1E569DADD673B6099541BC86E270631BCA1AA48B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:fc:14:86:dc:be:ae:8c:b0:da:b5:13:2b:
14:fc:5f:04:4e:f9:e7:58:50:8e:b5:aa:06:da:a4:
c8:3d:ee:55:1d:fe:1f:99:a8:dd:90:b7:4d:5c:23:
b6:55:af:ae:de:0b:cf:32:74:d2:d7:93:3f:8b:b1:
49:15:71:8f:75:91:c8:16:44:d2:e1:75:28:22:61:
fe:c5:fa:05:dd:12:90:ea:d2:d1:f9:c8:08:19:55:
12:18:84:74:0f:62:5f:d0:e2:3b:4f:7f:c1:34:93:
10:8e:7b:db:ea:13:fa:9e:ed:07:1d:63:20:fe:8a:
72:e0:a0:8d:f3:49:c7:ca:73:e7:b8:bc:33:05:15:
1a:35:e4:13:d8:e1:34:7f:05:ac:d7:f4:a1:d7:67:
30:07:ee:ed:0a:ae:d9:ae:3a:83:ea:4f:5c:c8:5f:
c1:ce:f4:01:1f:09:6f:1d:9d:9b:23:17:53:e0:7f:
41:24:c7:da:13:dd:0c:29:9c:30:6e:5b:d5:05:ca:
38:b3:c7:d4:bb:87:22:e2:75:7b:1a:fe:b9:ad:ec:
4f:0a:d7:e0:43:ad:8f:fd:29:51:f3:c9:32:b6:9c:
e8:07:a7:4d:e1:8a:7e:ed:e0:66:b2:68:e0:b3:3d:
00:10:b5:c3:e2:c5:2d:fe:bc:c6:e4:6b:9d:9d:06:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:56:9D:AD:D6:73:B6:09:95:41:BC:86:E2:70:63:1B:CA:1A:A4:8B
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3137382e3231322e33342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2d:0b:4a:1e:d2:56:13:69:86:f2:e3:07:bf:7d:99:6d:65:
75:e4:4c:5e:53:60:aa:9c:de:f7:d9:2d:a5:e4:89:65:34:39:
55:ff:65:b8:06:d0:83:e2:2b:69:f4:8d:d1:15:fe:c4:94:83:
58:d1:34:df:c9:be:f5:fc:3a:69:0f:b3:41:f2:3b:d2:25:5f:
22:7f:95:8a:26:71:cc:3f:6b:78:63:56:dc:e8:9e:61:7e:63:
75:17:31:5c:3d:f2:f9:6a:18:35:ed:cc:3a:af:c7:62:85:33:
7d:28:e0:00:98:49:4b:6a:a7:f4:e9:1c:78:c7:58:a9:8c:70:
a2:9e:b5:ba:09:1a:d8:18:34:4e:e1:e0:d3:61:aa:84:db:e5:
77:10:c7:fa:e0:33:e1:79:8c:46:01:3a:bf:c5:1d:98:8e:52:
5a:7b:dd:75:2a:14:51:1e:bd:e1:29:23:5c:85:a0:9b:3b:e4:
e4:01:6a:41:d9:af:a8:3d:28:3e:a0:01:5c:47:73:27:0c:97:
bf:36:b7:79:05:6a:a1:9f:ba:4a:b4:f8:4e:39:e8:dc:3e:2b:
da:0b:b8:29:d5:47:3f:52:2a:74:4e:5d:5c:b4:f1:b0:c6:1d:
c8:28:a6:ce:fb:44:2a:5f:ed:95:d7:a9:e9:09:b9:3e:34:b5:
c5:a1:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org