Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137382e302f32332d3234203d3e2030.roa
File: 3139342e3138302e3137382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: sTeuVNQgYFWHL5bKNuTHesSuZnv8otl5o/uu/YrCb+c=
Subject key identifier: 62:9D:65:D0:55:2A:2B:E6:7F:C1:68:61:74:28:61:8A:B6:42:68:F6
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4508E32B88A18BD9B54A68A5FD7B3F1EE78E0061
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137382e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:54 +0000
ROA not before: Mon 27 Mar 2023 08:22:54 +0000
ROA not after: Mon 25 Mar 2024 08:27:54 +0000
asID: 0
IP address blocks: 194.180.178.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:08:e3:2b:88:a1:8b:d9:b5:4a:68:a5:fd:7b:3f:1e:e7:8e:00:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:54 2023 GMT
Not After : Mar 25 08:27:54 2024 GMT
Subject: CN=629D65D0552A2BE67FC168617428618AB64268F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:46:64:78:57:c6:a5:3e:f6:c5:e9:22:68:
94:c6:20:6a:92:20:17:52:08:4c:69:66:84:84:d0:
01:89:a8:c7:6b:26:06:02:dd:1e:e9:9d:a6:63:3c:
37:52:9f:84:b2:2a:44:9f:04:dd:1b:6e:06:8e:8a:
e2:8e:ea:45:fd:75:26:d1:4b:b2:2d:a7:50:29:a7:
4d:31:f4:90:d1:7e:09:ef:ef:f2:79:ed:99:1a:62:
b8:2f:b0:63:79:e6:96:39:30:1a:98:ff:9b:fe:2f:
08:12:01:68:30:8a:da:0a:8a:3a:67:85:bb:0f:1a:
b9:62:f5:b0:23:2d:bc:b2:8b:c6:17:2a:39:db:9c:
0b:93:8a:89:84:2a:ac:96:e8:16:e2:aa:1d:bf:88:
41:f2:43:5a:bc:97:68:f7:4d:41:de:23:a4:3b:3d:
54:8b:c9:59:8a:01:8a:8e:9d:b0:e1:5e:27:54:8c:
d9:ee:c7:ab:ab:b7:af:e6:41:97:2c:48:10:ea:c8:
43:b7:12:05:4a:95:bd:ae:89:82:35:48:88:2c:80:
c3:49:70:f2:d5:9e:3f:5d:75:63:fe:55:20:04:d1:
0d:c4:e9:10:9d:3f:aa:6a:5e:b3:a1:b7:cb:04:12:
d6:63:a0:06:a9:76:32:a9:f4:40:f6:0a:da:f9:a6:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9D:65:D0:55:2A:2B:E6:7F:C1:68:61:74:28:61:8A:B6:42:68:F6
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.178.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:12:7d:b2:49:79:3b:79:0e:98:9e:df:f4:d2:87:c0:b2:80:
35:ee:34:8e:66:6e:3b:28:ec:d8:4a:ba:a4:8d:fb:ce:de:44:
e2:de:2c:1a:4a:e5:82:16:f3:ed:08:61:82:59:d3:e7:b4:ac:
a2:c2:c8:0f:53:09:25:43:11:ab:ec:cf:a5:f8:29:e2:54:fd:
d9:d9:ea:f7:db:a3:b7:87:0a:5f:2b:97:2c:e9:0e:3e:89:43:
45:99:0e:21:ae:4a:94:35:37:30:65:52:7e:aa:c1:90:63:2f:
2f:53:05:65:0a:4f:d0:e2:b8:7b:64:36:4f:dc:26:9b:3e:f1:
dc:72:7d:58:f7:89:18:b3:14:38:99:99:65:11:13:61:15:3a:
89:ca:93:fa:76:f3:7a:87:ee:5f:6b:4b:07:af:39:ab:98:23:
ac:9d:f0:8a:91:8e:ee:aa:20:13:c3:27:02:c4:5f:a5:4b:e8:
67:a4:04:85:84:b5:b0:50:5f:e6:47:81:79:1e:3d:0d:18:81:
a3:08:30:ff:88:29:21:b7:17:05:fa:49:13:9a:a9:14:d7:f3:
50:8f:97:09:56:46:e4:32:a0:80:03:41:94:85:d4:e9:6c:c0:
a8:d0:d6:22:4b:31:62:91:e7:60:92:69:ec:f9:b4:38:c5:29:
1c:1d:66:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org