Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e3134382e37352e302f32342d3234203d3e203432333636.roa
File: 3139332e3134382e37352e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: GAxqpPqbOfqDjgD9x7CR3BsNBaiXxtKneJPtd0EI6M4=
Subject key identifier: 64:98:06:BC:83:C5:15:BF:D6:FA:FC:5B:10:90:02:37:BA:9B:75:7E
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4454AE0F1E42AB8E33C223BB9FC6BBE6CCA30A59
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e3134382e37352e302f32342d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:18:38 +0000
ROA not before: Fri 31 Mar 2023 12:13:38 +0000
ROA not after: Fri 29 Mar 2024 12:18:38 +0000
asID: 42366
IP address blocks: 193.148.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:54:ae:0f:1e:42:ab:8e:33:c2:23:bb:9f:c6:bb:e6:cc:a3:0a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:13:38 2023 GMT
Not After : Mar 29 12:18:38 2024 GMT
Subject: CN=649806BC83C515BFD6FAFC5B10900237BA9B757E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:c8:9f:36:f2:e8:8c:e3:e0:2e:a3:3d:3b:
7e:36:ec:f8:a1:1d:30:ea:0f:4c:93:bf:95:59:ca:
33:c2:bf:a8:62:32:86:06:02:8f:7d:c6:91:d9:00:
44:e9:ca:f2:13:fd:39:c5:ea:36:76:18:f5:bd:76:
16:55:f8:fb:95:c6:ca:ea:05:e2:70:99:cc:db:34:
98:69:fd:e5:82:a1:9f:22:27:33:2f:98:aa:93:13:
8e:09:11:8d:79:98:31:18:db:1a:7c:f7:ca:3f:9f:
e4:8a:40:75:ee:a7:ae:87:e8:a6:e7:9d:fa:8e:2c:
b6:29:fe:b6:c6:d1:cc:30:77:98:1f:5f:ae:48:85:
7b:58:8f:df:dd:3e:11:24:0b:c0:5a:e6:27:db:2b:
21:b1:e1:78:aa:b9:4c:76:61:66:bd:a0:02:87:50:
de:0e:68:f4:5c:7a:e3:3f:bc:04:fe:db:7b:9a:da:
ab:0b:0b:ef:12:e6:d6:81:02:0d:fc:d6:98:81:a0:
37:c8:99:bb:6c:27:f5:3c:9a:cc:09:88:bd:d8:30:
6a:a3:c3:4c:81:da:f7:a6:64:c6:9f:14:68:d9:56:
8f:7a:45:5a:20:e3:07:6e:4b:75:3a:9b:18:20:3c:
91:5e:b5:4a:eb:3e:12:8b:c7:77:c9:2e:22:a1:f7:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:98:06:BC:83:C5:15:BF:D6:FA:FC:5B:10:90:02:37:BA:9B:75:7E
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e3134382e37352e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.75.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f7:b2:7c:a1:b8:1b:6b:53:8b:2e:42:29:7c:b3:21:6b:a8:
77:3a:9c:80:58:53:dd:9f:b8:10:c1:69:57:f7:e4:db:c7:07:
36:1e:7a:2c:59:8c:f8:8c:da:19:98:06:79:dc:28:42:76:1e:
c7:f8:a8:02:52:8a:fb:3c:af:35:1b:92:a1:b9:11:1b:a9:a7:
eb:07:84:19:97:d8:4f:4a:08:cd:6c:31:b4:db:31:a3:a3:15:
4d:37:b1:9e:40:03:66:1e:e1:b6:15:03:2b:8b:ad:7c:c1:ec:
ef:39:ec:14:43:80:ab:ae:cd:34:e9:4d:17:24:84:35:ce:13:
23:b4:d7:cb:ea:d4:8b:22:20:5c:f6:66:26:f4:ad:4b:88:ff:
e9:de:e0:d9:ae:c5:d4:ab:bd:d1:97:af:a2:3d:20:6a:15:c5:
04:6a:1f:92:fb:b2:3f:ee:d3:58:3d:03:9d:d0:69:f8:30:e1:
10:cd:a7:14:a2:70:e8:96:c2:6d:a7:6f:d3:ab:46:2d:8d:c0:
34:71:8e:22:0b:ba:17:1d:09:df:92:e6:74:dd:cc:29:cf:9b:
4e:3b:bd:82:f8:d7:2f:a2:75:f5:1b:9f:43:f8:69:e2:82:28:
18:ad:27:98:53:e7:74:20:7f:37:93:39:aa:aa:50:d8:f0:e1:
66:90:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org