Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139322e3134352e33382e302f32332d3234203d3e203432333636.roa
File: 3139322e3134352e33382e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: pLj3vCdv3ilPnk5PzxpGqcDTLAUIbRPx7kkYlS69NP0=
Subject key identifier: B4:73:33:2B:06:43:81:E4:A3:9A:27:0C:D4:15:F6:EE:F2:DE:ED:93
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4B8AF0673459BB7011088214E8D7FDB9750023BE
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139322e3134352e33382e302f32332d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:19:04 +0000
ROA not before: Fri 31 Mar 2023 12:14:04 +0000
ROA not after: Fri 29 Mar 2024 12:19:04 +0000
asID: 42366
IP address blocks: 192.145.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8a:f0:67:34:59:bb:70:11:08:82:14:e8:d7:fd:b9:75:00:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:14:04 2023 GMT
Not After : Mar 29 12:19:04 2024 GMT
Subject: CN=B473332B064381E4A39A270CD415F6EEF2DEED93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:9d:81:26:f9:6e:cd:c4:45:95:da:9b:1e:
67:4b:13:1f:61:f3:23:44:c6:39:e2:c6:c4:74:e9:
cf:e0:d1:0b:f5:9f:f3:8c:2e:c6:48:ec:a7:2d:a5:
56:c3:92:ca:6e:02:ad:37:c5:0f:a4:6e:a3:b3:9c:
aa:5a:04:14:1c:96:24:73:73:d2:43:75:e5:d7:4c:
d4:1c:47:2d:a5:de:67:9a:eb:62:a0:d1:45:63:10:
32:d4:ad:34:43:83:c9:94:5d:bb:ef:92:da:44:da:
a8:c4:a1:be:47:47:1f:5c:6b:0b:1a:cb:a1:a8:60:
55:d6:a9:a4:ce:fc:72:b3:69:49:cc:48:03:c5:ab:
c1:eb:4f:3e:b4:f6:39:8b:46:d7:0e:8e:58:81:1a:
14:60:20:61:56:3c:f8:ad:6c:56:1c:c9:85:31:36:
4b:71:df:8e:dc:1e:30:e1:c4:21:f7:c6:90:b2:d0:
02:e8:8a:db:fe:e9:74:5d:6a:0b:19:f7:7f:89:b1:
1b:f8:e1:54:9b:0c:34:37:54:01:99:9c:a4:5b:52:
c7:14:cc:5d:c8:af:a0:ae:68:7e:e5:a0:4d:eb:e2:
bb:7b:a2:06:a8:94:4c:1b:45:ce:a2:97:dc:04:40:
17:61:1e:13:1d:1c:70:e4:e0:a4:c1:ab:c7:73:65:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:73:33:2B:06:43:81:E4:A3:9A:27:0C:D4:15:F6:EE:F2:DE:ED:93
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139322e3134352e33382e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.38.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:43:76:67:9a:d1:3d:31:09:7c:38:fc:b3:08:2b:99:7b:db:
18:d6:53:c0:86:76:03:72:cb:6c:a1:e4:f0:70:8a:95:27:e8:
4f:93:d2:50:a4:e4:54:5b:1e:1c:99:49:36:c6:62:d3:af:84:
07:6e:ec:b8:6b:8c:c3:58:2a:6f:76:89:49:6e:a8:d4:c2:15:
d6:4c:30:b4:fd:81:4d:2c:25:65:bf:93:75:ee:da:e3:74:cc:
8f:55:7f:89:b4:ae:cd:8e:1e:37:13:95:04:c4:00:ac:2d:30:
90:1e:82:51:f0:fb:10:7f:32:12:cf:6d:1e:4d:66:be:1a:28:
b4:31:ec:c8:c7:f5:87:2e:6f:73:db:66:f2:9b:45:9b:d7:b3:
8a:db:cf:c1:87:2d:ba:7b:47:9f:b4:f3:1c:42:ad:bf:0d:e3:
d3:42:5d:29:3c:a0:3d:2a:a9:f3:06:e1:2e:b5:f9:8a:de:f6:
00:20:f2:fd:60:cf:73:4a:f8:dd:b5:24:a1:65:ad:ee:5d:ab:
ca:66:78:ea:be:dc:56:8d:1c:3a:8c:3c:4c:af:62:9b:ef:b0:
48:8c:62:da:a7:e1:d9:de:7e:48:f9:44:54:31:77:26:57:8d:
d1:77:70:8d:0c:f0:dc:10:ac:00:8c:be:91:7f:63:ca:ca:0c:
7b:29:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org