Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e31352e3131302e302f32332d3234203d3e2030.roa
File: 3139342e31352e3131302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: waqHOk/TN+0GZwz5ERl1tJQg6+M3nAYbw1JHI4fhe3g=
Subject key identifier: C4:B7:AD:52:14:C2:87:FC:D4:40:1C:6F:B9:81:03:1F:6E:C5:4D:B7
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 56A678D0F4BE787E3262241ADF43CC2B319CE8FF
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e31352e3131302e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:50 +0000
ROA not before: Mon 27 Mar 2023 08:22:50 +0000
ROA not after: Mon 25 Mar 2024 08:27:50 +0000
asID: 0
IP address blocks: 194.15.110.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a6:78:d0:f4:be:78:7e:32:62:24:1a:df:43:cc:2b:31:9c:e8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:50 2023 GMT
Not After : Mar 25 08:27:50 2024 GMT
Subject: CN=C4B7AD5214C287FCD4401C6FB981031F6EC54DB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:bd:6c:76:79:41:d1:ec:ab:f4:56:d8:24:
64:85:c6:89:ed:46:79:4f:00:a1:ef:1a:76:ef:68:
27:c1:e5:c7:2a:2e:4e:d2:fd:08:96:4d:26:26:e6:
47:44:62:3b:8e:a0:77:a9:23:ee:09:16:0b:4b:88:
6c:77:fb:5c:ac:f1:34:36:73:83:3d:97:90:05:a6:
50:d8:c9:e8:f7:2c:e1:a5:31:6c:be:cc:4c:09:69:
7a:64:4b:9f:70:ec:44:b3:e3:68:4e:18:0c:4c:bf:
36:34:aa:b9:b3:42:67:a1:ad:a8:2d:5b:c7:8e:84:
d9:74:5c:94:d9:fb:6d:bc:53:a2:aa:28:8d:07:67:
d5:2e:93:93:15:c2:ba:d0:46:8a:ef:fa:99:ba:e4:
ce:b6:3a:c6:56:51:e8:f0:31:5a:94:ee:64:79:72:
a3:c9:39:3c:e9:21:c6:e1:b6:c1:d2:2d:96:38:af:
37:05:c1:df:55:c8:c8:6b:a2:9e:a3:67:4c:e3:75:
90:f0:a7:70:25:dc:fb:c7:a2:67:f9:1e:04:c6:3a:
84:fa:55:39:be:d0:e7:99:93:59:1f:53:43:7a:f0:
c4:1d:0f:47:3c:3a:a0:c9:b8:89:2d:88:6d:76:17:
0e:8c:1f:86:fd:75:05:b1:b1:01:69:f8:ba:e9:2a:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B7:AD:52:14:C2:87:FC:D4:40:1C:6F:B9:81:03:1F:6E:C5:4D:B7
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e31352e3131302e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.110.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:0f:f6:03:20:d4:b1:b6:5c:f5:99:bf:f4:d4:b8:91:4a:7f:
11:a1:1a:c6:d4:e2:7e:f9:7f:ab:55:8d:4c:0d:4d:11:3b:cc:
b6:ab:ca:be:7c:00:fb:a3:d3:92:f6:9d:ce:98:e9:cd:a4:43:
35:3b:9e:7c:58:41:9d:f4:f9:f5:d0:8c:e8:31:cc:9f:d0:01:
30:fc:cd:3f:a4:05:e2:5f:cf:3d:b5:57:30:7d:89:4b:0a:03:
a1:23:55:ba:8a:53:a6:f3:61:ad:07:ef:26:74:6b:55:b0:a0:
e1:ac:fb:7c:2f:42:22:58:ab:e3:6e:86:a2:c8:c7:7e:39:ee:
51:6e:df:e7:d3:18:cb:2f:24:f8:5a:df:44:07:38:de:11:d9:
b2:ac:63:79:3b:1b:d7:2e:72:a6:37:d8:1a:17:56:30:00:17:
55:f9:58:11:36:7f:36:65:46:b4:00:77:1f:b0:94:3b:c4:71:
e6:1a:7a:ce:be:2b:4c:cd:e9:fe:4c:d6:87:7a:9e:d1:04:c9:
61:06:d2:7b:03:fe:98:47:c9:16:5b:a3:15:de:71:1f:99:35:
e4:28:bd:dc:dd:af:4c:c7:59:07:a7:89:ce:25:78:85:bc:b3:
f2:a2:75:ad:21:38:8a:3b:54:b9:3e:c4:64:cb:9e:a0:e0:7b:
dc:e1:67:da
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUVqZ40PS+eH4yYiQa30PMKzGc6P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yMzAzMjcwODIyNTBaFw0yNDAzMjUwODI3NTBaMDMxMTAvBgNV
BAMTKEM0QjdBRDUyMTRDMjg3RkNENDQwMUM2RkI5ODEwMzFGNkVDNTREQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvL1sdnlB0eyr9FbYJGSFxont
RnlPAKHvGnbvaCfB5ccqLk7S/QiWTSYm5kdEYjuOoHepI+4JFgtLiGx3+1ys8TQ2
c4M9l5AFplDYyej3LOGlMWy+zEwJaXpkS59w7ESz42hOGAxMvzY0qrmzQmehragt
W8eOhNl0XJTZ+228U6KqKI0HZ9Uuk5MVwrrQRorv+pm65M62OsZWUejwMVqU7mR5
cqPJOTzpIcbhtsHSLZY4rzcFwd9VyMhrop6jZ0zjdZDwp3Al3PvHomf5HgTGOoT6
VTm+0OeZk1kfU0N68MQdD0c8OqDJuIktiG12Fw6MH4b9dQWxsQFp+LrpKpdpAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUxLetUhTCh/zUQBxvuYEDH27FTbcwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzEzOTM0MmUzMTM1MmUzMTMx
MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcIPbjANBgkq
hkiG9w0BAQsFAAOCAQEAfw/2AyDUsbZc9Zm/9NS4kUp/EaEaxtTifvl/q1WNTA1N
ETvMtqvKvnwA+6PTkvadzpjpzaRDNTuefFhBnfT59dCM6DHMn9ABMPzNP6QF4l/P
PbVXMH2JSwoDoSNVuopTpvNhrQfvJnRrVbCg4az7fC9CIlir426GosjHfjnuUW7f
59MYyy8k+FrfRAc43hHZsqxjeTsb1y5ypjfYGhdWMAAXVflYETZ/NmVGtAB3H7CU
O8Rx5hp6zr4rTM3p/kzWh3qe0QTJYQbSewP+mEfJFlujFd5xH5k15Ci93N2vTMdZ
B6eJziV4hbyz8qJ1rSE4ijtUuT7EZMueoOB73OFn2g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org