Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137372e302f32342d3234203d3e2030.roa
File: 3139342e3138302e3137372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: pJrLOcqZFdga6AntC1vWXKTR0Ew2kCKAkRRdk4q5UvQ=
Subject key identifier: AC:93:1C:DA:EB:77:EE:20:C2:67:08:EC:EE:75:D1:1D:A5:99:01:1D
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 6EC722F30EC5F0402EFF0D91F2232504EF706552
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137372e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:55 +0000
ROA not before: Mon 27 Mar 2023 08:22:55 +0000
ROA not after: Mon 25 Mar 2024 08:27:55 +0000
asID: 0
IP address blocks: 194.180.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c7:22:f3:0e:c5:f0:40:2e:ff:0d:91:f2:23:25:04:ef:70:65:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:55 2023 GMT
Not After : Mar 25 08:27:55 2024 GMT
Subject: CN=AC931CDAEB77EE20C26708ECEE75D11DA599011D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:a8:e5:bd:9e:e9:ef:d6:f1:43:82:2d:db:
02:7a:3a:a1:32:d3:f3:0a:9f:92:b4:81:82:de:1d:
db:25:98:d4:a3:98:cc:c9:87:a6:e7:0b:44:79:e3:
f4:12:e8:4d:84:26:5b:2b:e2:65:c7:b2:8d:1d:8e:
06:f1:4c:87:6a:3d:64:a7:67:0f:1c:c9:76:ed:15:
0a:d6:cf:a2:73:5b:92:a4:4b:3e:11:bc:aa:fe:42:
65:69:c6:9c:10:70:5b:b6:1e:7c:6c:d1:fa:fd:e6:
82:82:32:e1:4c:0b:fa:dc:22:7b:fb:a7:0b:66:2d:
50:ae:e8:33:95:a2:12:2e:74:ec:2c:6a:ed:97:b9:
c5:6b:57:d7:32:2d:3c:35:ea:83:2f:12:70:0d:c4:
77:0e:0f:49:86:e7:23:6c:be:86:27:81:d2:8d:da:
a1:71:65:8b:8a:d2:8b:e8:74:30:ae:82:3c:b9:6d:
fc:80:38:5b:46:90:9e:66:df:be:47:ad:bc:bd:e5:
eb:8e:eb:d5:e2:16:1c:a2:0f:3c:d0:de:2c:9e:a8:
06:9e:f1:da:c2:51:bd:f2:12:35:57:7c:2e:c3:2e:
0c:3e:73:b2:ba:59:aa:a7:5d:cc:10:45:1b:25:d0:
6e:67:5d:77:90:b4:37:1e:04:6c:42:60:08:ff:45:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:93:1C:DA:EB:77:EE:20:C2:67:08:EC:EE:75:D1:1D:A5:99:01:1D
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.177.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4a:95:b4:5b:bb:7f:cd:01:27:84:3d:9f:f1:63:7c:f7:33:
6b:55:91:fa:b5:d4:33:47:5a:be:c7:cb:ae:63:f9:5f:69:39:
36:20:44:ed:bc:6d:d9:25:d3:c4:27:53:5a:04:21:b0:41:f1:
7d:14:60:9c:21:38:d2:f4:90:67:a6:3d:6a:8e:2f:dd:81:a8:
33:1e:c1:bb:f8:a9:c4:2e:5e:df:3d:b7:dd:f5:1d:0a:95:94:
85:2b:00:97:80:fc:da:35:bf:4f:f4:5b:5b:cf:c3:aa:22:d4:
da:ee:01:28:e2:a0:0c:d9:74:09:81:cf:84:7d:63:03:05:17:
11:9a:2d:ff:cf:ed:53:7c:3e:c9:93:c3:37:1d:af:93:cc:1f:
b3:9f:15:8d:28:6c:d9:35:8c:d7:a0:5e:f7:38:fb:54:8a:c3:
ce:e7:70:47:a3:4c:5e:dd:d1:0d:4b:26:29:eb:86:08:70:08:
84:f0:bc:e0:0d:32:65:c3:1a:c2:ce:3c:a9:75:5f:f9:76:5f:
a4:a5:89:a4:63:a0:cb:1d:42:3b:3d:46:6a:5b:d7:e9:a9:83:
a8:1d:ff:31:bf:2f:8d:05:5d:10:8b:54:68:58:64:58:ae:45:
94:38:8f:f8:ca:65:f6:44:e2:8e:14:d1:2b:1b:b0:7d:8e:58:
ba:a8:3e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org