Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e34362e3234302e302f32342d3234203d3e2030.roa
File: 3139332e34362e3234302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: ua8zy9IArjNqfeXd90VqBhg+XDD086EVgJvnWw7Dj2Y=
Subject key identifier: C0:DA:ED:4F:1B:24:E4:37:46:7E:AF:BD:27:42:25:D0:98:F6:F6:38
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 179FFD92E5ACE98946FC4275918E161E38CFAC83
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e34362e3234302e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:51 +0000
ROA not before: Mon 27 Mar 2023 08:22:51 +0000
ROA not after: Mon 25 Mar 2024 08:27:51 +0000
asID: 0
IP address blocks: 193.46.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9f:fd:92:e5:ac:e9:89:46:fc:42:75:91:8e:16:1e:38:cf:ac:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:51 2023 GMT
Not After : Mar 25 08:27:51 2024 GMT
Subject: CN=C0DAED4F1B24E437467EAFBD274225D098F6F638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:a9:cf:fd:89:a9:34:c9:a7:2a:42:bb:0e:
dc:17:41:4d:90:4f:89:fa:87:ae:30:ae:90:fb:0f:
27:f8:41:14:b6:c3:53:04:e9:6d:f8:e3:52:38:3d:
b8:56:cd:03:be:e6:d4:c4:cb:44:a5:09:05:2b:3a:
8b:44:6e:19:1a:44:4b:98:4b:52:ff:4b:7d:4e:26:
38:b3:9c:23:90:e2:07:74:50:5c:16:2d:8b:c4:95:
1e:e2:df:66:67:cf:0a:61:02:93:8b:51:18:78:75:
8e:4e:3a:e6:7c:aa:67:2b:ed:af:c5:c2:7f:c0:b8:
84:ff:2c:26:98:06:22:ff:6c:5f:74:c3:76:9f:9f:
21:77:af:26:29:74:5d:27:36:98:62:f9:c4:98:40:
e3:a5:82:35:51:19:a3:96:79:24:1b:7c:fb:3a:40:
0d:e4:e2:3c:af:40:75:b8:81:75:f6:c4:a7:8e:79:
ae:15:7d:ad:a0:cd:70:fe:f4:97:30:a8:5d:c6:93:
91:fa:9e:c9:ab:51:57:0b:93:a6:d7:d7:57:08:56:
56:ea:dc:fb:4e:db:3a:74:10:e5:bb:59:3c:d8:17:
99:13:63:02:31:6f:35:2e:df:6c:56:df:9e:b9:5a:
40:f6:b7:e6:4a:03:36:2d:d1:f7:fd:78:1a:9d:ce:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:ED:4F:1B:24:E4:37:46:7E:AF:BD:27:42:25:D0:98:F6:F6:38
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e34362e3234302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.240.0/24
Signature Algorithm: sha256WithRSAEncryption
43:6a:c0:cd:ff:79:93:b0:1f:d4:ff:12:93:6b:fa:78:a1:59:
6d:ce:42:73:81:8f:b4:4c:b7:54:12:7f:be:2c:48:5e:a2:e2:
23:92:b3:23:66:3e:f4:c6:ed:fb:1b:d4:15:6f:d9:a3:19:d6:
b7:fb:22:f0:fb:7e:20:6d:9b:43:a7:18:75:4a:ad:54:7a:8c:
31:48:3c:1d:66:a1:c9:a3:89:c2:a3:7d:ec:47:95:6a:ad:1b:
77:bc:9e:11:59:87:c8:01:95:db:2c:b1:9f:fc:7a:90:ba:93:
61:11:6a:df:c6:81:ca:db:de:02:67:eb:ed:bb:5b:74:4a:b5:
f8:64:06:2a:e7:94:92:dd:48:2b:85:57:a0:86:6a:56:6e:d3:
5e:02:3e:48:7d:5b:82:64:70:37:85:13:9e:e9:39:92:aa:4e:
81:5f:64:9c:32:c3:20:a3:1e:9f:c0:b6:89:46:f0:cb:bb:c2:
de:41:56:39:cb:a0:6b:da:28:57:48:4b:c1:43:15:09:39:07:
37:98:9c:40:32:67:2f:5f:9b:78:3a:40:ee:02:c5:04:f4:dd:
26:1b:15:b5:4c:3e:ee:8f:70:cc:f3:8f:94:97:95:31:d4:12:
c3:c4:71:3c:d6:9c:5d:50:1b:7c:a1:64:46:cb:62:53:a7:b8:
6f:c7:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org