Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e3134382e37342e302f32342d3234203d3e2030.roa
File: 3139332e3134382e37342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: sdW6YUj6wBwuyWL1s66BpkGzxJQrhW3cx71OUzCdF+s=
Subject key identifier: 6E:7C:5D:99:EA:5C:D5:C8:66:7B:8D:B1:22:63:AE:5F:D1:87:AF:88
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 3FB49EB5ADF593436276B3A35CB0F05835B45BDE
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e3134382e37342e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:52 +0000
ROA not before: Mon 27 Mar 2023 08:22:52 +0000
ROA not after: Mon 25 Mar 2024 08:27:52 +0000
asID: 0
IP address blocks: 193.148.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b4:9e:b5:ad:f5:93:43:62:76:b3:a3:5c:b0:f0:58:35:b4:5b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:52 2023 GMT
Not After : Mar 25 08:27:52 2024 GMT
Subject: CN=6E7C5D99EA5CD5C8667B8DB12263AE5FD187AF88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:4e:23:58:9f:82:f5:c4:67:49:20:48:98:
38:99:f3:43:4d:3a:c2:72:ab:7e:e7:e0:74:8c:44:
e2:60:2f:2c:ad:8a:70:dc:31:a6:25:76:82:14:8b:
bd:b7:7e:5b:8f:c7:9e:a6:fb:65:5d:68:ba:21:71:
72:67:18:db:d9:b1:61:aa:00:66:a7:6a:77:59:7b:
18:03:54:82:b9:67:1b:54:c3:c3:9d:f7:ff:1a:e8:
e1:2d:a9:81:58:5e:a5:b2:2c:67:8f:7f:49:b1:5f:
81:df:75:0c:f9:fd:f8:2f:ff:81:84:2c:3c:a3:77:
4b:fa:f3:87:02:be:a7:fc:6d:6a:46:cd:f0:72:31:
62:4e:31:8c:d2:1b:5a:c2:74:fb:d5:ed:e5:c3:84:
85:ef:b6:65:d2:90:16:c7:0a:19:e1:33:f4:a3:8d:
14:9b:68:9b:c0:d5:9e:ba:4a:93:25:d8:35:2c:88:
7d:81:22:f4:05:36:4a:61:56:bb:46:58:9d:7d:30:
75:c5:67:89:3d:5e:dc:dc:51:00:7b:95:b6:17:54:
83:9e:98:be:e5:7d:bc:11:60:3b:6f:aa:f3:31:77:
fd:f5:d6:d8:42:16:63:80:da:c9:46:e4:ed:ba:8b:
49:a7:d3:99:13:6f:fb:aa:35:f0:86:4e:8b:11:3a:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7C:5D:99:EA:5C:D5:C8:66:7B:8D:B1:22:63:AE:5F:D1:87:AF:88
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e3134382e37342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:12:fd:65:45:5b:79:e1:ee:4f:5d:bf:d5:87:be:23:b9:2a:
a9:a1:a5:33:01:2f:62:85:c0:94:e3:ad:b8:45:8b:c9:22:87:
fe:41:a0:19:34:41:18:40:72:8d:20:36:ef:dc:5d:e2:af:95:
b1:03:15:88:d1:2c:5a:0b:d6:79:ab:40:0a:03:d5:0b:d2:9a:
8b:fa:28:21:87:9c:7c:d2:69:57:0a:5d:80:67:4c:c7:8b:bb:
62:6f:28:a7:04:55:42:82:8c:6e:67:2b:94:14:4b:b7:d6:a1:
2a:52:59:de:44:73:16:a1:d9:f2:0a:d5:48:32:6a:37:41:d3:
f1:41:33:c0:52:19:e3:99:f3:e8:67:74:15:e5:0b:14:70:98:
dc:19:cc:a8:0d:d2:c3:a4:62:27:eb:fe:e7:b2:29:7c:04:e7:
8c:42:29:1b:78:fb:ae:dc:46:1d:0d:dd:33:11:69:d0:74:04:
21:4b:9e:29:6f:a5:c4:f7:7a:1d:7f:45:ab:9a:a0:55:7f:13:
7f:44:61:a1:57:e0:8a:b0:cf:06:26:25:b2:38:79:34:96:9f:
a9:86:9b:d1:18:b6:fe:f5:39:ab:cf:80:09:c4:e5:27:87:9a:
53:73:39:38:91:d9:7f:ef:d0:d2:56:24:95:9e:0b:7e:0a:3a:
7c:b7:e3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org