Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e3134382e37342e302f32342d3234203d3e203432333636.roa
File: 3139332e3134382e37342e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: HoAgZQjx9hH3hBlyI6jrnVjRQcDlYoRaN+afIwheDSU=
Subject key identifier: 55:C2:07:68:24:09:D9:64:49:8A:90:BB:A1:C3:06:C6:D5:03:09:26
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 53099464C5EB2DEE0D9FCAC63AEC7F9785455FEB
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e3134382e37342e302f32342d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:18:32 +0000
ROA not before: Fri 31 Mar 2023 12:13:32 +0000
ROA not after: Fri 29 Mar 2024 12:18:32 +0000
asID: 42366
IP address blocks: 193.148.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:09:94:64:c5:eb:2d:ee:0d:9f:ca:c6:3a:ec:7f:97:85:45:5f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:13:32 2023 GMT
Not After : Mar 29 12:18:32 2024 GMT
Subject: CN=55C207682409D964498A90BBA1C306C6D5030926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:33:df:4c:85:a8:e1:c1:67:dc:20:c9:b5:
7f:26:d3:1b:23:2c:86:b2:ff:e8:4e:6b:e4:30:fc:
94:8d:c8:17:17:f7:19:0c:a7:ef:1c:bd:59:13:9e:
b6:9f:d0:3f:22:74:30:80:3d:40:55:02:79:9e:05:
17:70:c0:01:66:c6:f0:f1:a0:65:ce:90:44:c9:e4:
eb:04:49:21:04:3f:b5:16:12:b3:f1:a1:db:dc:9a:
28:b8:3b:0f:0c:bb:6a:44:44:3a:23:13:81:fb:ca:
84:d8:2e:41:29:6b:b2:26:db:9d:05:6d:e3:0f:ef:
d3:5e:62:9b:42:86:fb:0d:2f:d4:09:ff:7d:27:63:
b1:35:9c:4d:e6:2f:e2:92:86:0f:8b:2d:3f:5f:ec:
57:9c:9b:99:92:88:51:64:e7:6a:79:ba:65:ef:10:
de:19:f4:d7:f4:23:38:0e:de:4e:ab:a7:ac:3b:c3:
b3:ed:03:5e:8d:3a:a3:9b:84:19:08:7c:16:e3:b3:
63:e0:01:19:09:c6:3b:95:1a:f7:7e:62:79:c5:39:
fb:a1:a4:50:50:db:80:a8:f8:32:24:9b:53:4a:d0:
1c:91:58:f2:db:bb:b8:63:9c:b3:fa:9c:0c:b8:ba:
8c:b8:63:f6:bf:ff:d3:02:e9:6b:c3:f2:0f:c3:86:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C2:07:68:24:09:D9:64:49:8A:90:BB:A1:C3:06:C6:D5:03:09:26
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e3134382e37342e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.74.0/24
Signature Algorithm: sha256WithRSAEncryption
55:20:f8:dd:e3:27:f2:71:27:0e:47:7d:55:60:ee:42:ac:48:
e3:34:93:8b:3e:ae:a6:0c:b9:bf:ee:c6:39:ff:eb:a9:93:e8:
8d:1c:6c:f2:24:12:58:41:9a:62:2b:96:49:da:6a:80:65:9d:
37:8b:c3:f1:01:be:a0:ad:53:c4:93:81:b3:08:d0:a4:42:52:
6e:53:09:12:76:07:5b:c6:a6:40:f6:a6:dd:4c:ce:c4:50:4f:
08:54:ce:a7:a2:80:6a:25:71:85:58:ad:26:d7:4c:6a:b7:5c:
a6:56:5a:b3:71:7c:1d:9e:d9:df:f4:59:09:13:0a:1f:4d:2c:
f1:62:b3:b7:8a:87:42:d4:ec:75:b6:70:af:ef:3d:38:ef:c3:
27:08:2a:af:07:6d:e2:af:25:9c:c6:ab:7b:5b:cd:c2:59:1d:
b0:dd:29:a0:80:23:9f:04:5c:f8:ec:b0:ae:7f:32:eb:78:4d:
2f:9d:cc:e1:49:f3:7d:74:83:c1:3c:b0:c6:b0:df:89:f7:80:
ba:48:26:f8:13:5d:6d:9e:b9:68:b3:74:3c:8a:28:7c:cd:9b:
af:0a:15:e2:fc:a2:34:ae:c6:6d:b9:df:c7:06:26:4a:1d:f3:
5d:d9:58:70:00:d5:6b:0a:ac:2e:7d:3b:fd:d3:3f:50:ed:3a:
a5:a7:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org