Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e34362e3234302e302f32342d3234203d3e203432333636.roa
File: 3139332e34362e3234302e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: /BgfTXE6ZRYJxlaNrnNzv04S5Lb4I2arTWIWGPZZnNc=
Subject key identifier: 94:88:DC:1E:68:6E:4A:FC:52:37:6B:FE:24:D6:C4:F4:D5:4E:4A:7E
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 5A8DB5691D0BECFF07436BF8613A1275851E3213
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e34362e3234302e302f32342d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:16:41 +0000
ROA not before: Fri 31 Mar 2023 12:11:41 +0000
ROA not after: Fri 29 Mar 2024 12:16:41 +0000
asID: 42366
IP address blocks: 193.46.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8d:b5:69:1d:0b:ec:ff:07:43:6b:f8:61:3a:12:75:85:1e:32:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:11:41 2023 GMT
Not After : Mar 29 12:16:41 2024 GMT
Subject: CN=9488DC1E686E4AFC52376BFE24D6C4F4D54E4A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:a8:c7:02:db:26:e2:59:74:06:18:c0:61:
91:12:94:12:0c:ae:99:f7:9a:89:0c:24:29:25:c7:
91:a7:22:76:58:de:1f:f1:df:8a:ab:6a:cd:b7:e6:
27:14:a4:17:04:4b:b8:64:40:98:50:e1:91:72:f3:
5e:db:1f:fd:01:1c:04:57:67:c9:89:c2:d3:f4:68:
c8:c0:3a:07:32:2c:c6:4a:2e:99:fb:6b:29:9c:16:
c8:43:2b:1a:4b:c4:14:9b:6f:b9:99:e8:ad:d5:8f:
21:2d:bb:d1:63:a1:0e:e3:a6:b2:b4:03:c7:8c:0c:
6c:67:e1:0d:8f:91:96:75:11:cd:d4:ff:a7:02:09:
e6:3d:90:0b:48:c1:40:37:8e:58:25:5c:02:ea:61:
e0:84:dc:a7:3d:95:a6:d1:02:33:01:37:30:49:08:
6a:0a:54:b2:11:4a:8d:c4:51:26:c4:8d:ae:06:e3:
87:39:1a:80:14:89:9a:37:c6:b2:6c:dc:38:4a:af:
27:b1:e5:09:8e:21:6b:6c:d7:41:13:3e:b2:d0:27:
ea:3a:41:06:48:9e:9b:b6:19:4e:11:cd:51:04:74:
10:36:33:30:a3:8c:d5:27:96:a2:34:78:54:52:88:
66:5f:ba:fc:b2:0b:8f:e5:8c:8a:cc:b5:c1:73:57:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:88:DC:1E:68:6E:4A:FC:52:37:6B:FE:24:D6:C4:F4:D5:4E:4A:7E
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139332e34362e3234302e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.240.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c4:e3:48:c1:5e:36:ee:8f:f2:c9:5e:14:25:64:09:44:3e:
af:56:8e:de:72:03:fa:17:53:0b:ea:f3:86:60:a6:cf:49:b3:
4c:61:08:4d:8b:1c:b7:b4:29:36:4b:09:a4:c5:5b:ce:7d:5a:
73:03:a0:3d:db:7a:b9:e3:a1:6d:4f:df:f5:02:25:8e:3c:9b:
24:de:9c:5b:37:65:be:26:f2:e2:d8:77:c8:df:e1:a2:ad:88:
d4:f9:be:9e:50:d0:8f:50:25:62:1d:13:6b:7a:bc:8d:b8:50:
74:cb:cc:69:90:7c:3a:65:25:ee:de:2e:dc:8b:bc:c6:27:51:
df:86:dc:74:d9:3b:36:64:65:05:2f:74:b7:8f:21:14:56:45:
54:0e:76:27:cf:f6:b7:bd:bd:b7:d7:72:4c:1d:05:0d:61:e5:
9d:8b:de:1d:52:70:d9:b7:62:67:64:f9:ae:d0:9b:f2:81:65:
fe:e0:44:fe:e0:06:37:d8:b0:ad:a4:eb:d6:9f:6b:f1:d6:46:
e2:81:14:7c:8e:22:23:ff:fc:33:ac:75:8c:cb:98:27:16:b3:
d1:4a:9a:11:be:b9:5d:6c:10:3f:56:15:ba:00:c0:b3:f3:80:
79:b1:fe:db:d6:c8:cb:b9:6c:93:fc:5e:0e:d8:ef:ef:38:7e:
18:77:bc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org