Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137382e302f32332d3234203d3e203432333636.roa
File: 3139342e3138302e3137382e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: sxjkAc28LSlkRhlMV0UBZst+lOXSEC8fZ+EtgwpZf7Q=
Subject key identifier: 36:8D:44:99:D0:B3:CF:6B:79:C4:CD:F6:3C:1A:CC:1E:C7:94:33:D3
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4FE58F41048ABDB01F6097B88A7AD8363B0C5F84
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137382e302f32332d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:17:11 +0000
ROA not before: Fri 31 Mar 2023 12:12:11 +0000
ROA not after: Fri 29 Mar 2024 12:17:11 +0000
asID: 42366
IP address blocks: 194.180.178.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e5:8f:41:04:8a:bd:b0:1f:60:97:b8:8a:7a:d8:36:3b:0c:5f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:12:11 2023 GMT
Not After : Mar 29 12:17:11 2024 GMT
Subject: CN=368D4499D0B3CF6B79C4CDF63C1ACC1EC79433D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:37:ff:2c:01:5a:5d:12:2c:4e:35:05:da:
81:c2:26:03:93:eb:0c:4f:66:ca:ae:3e:d0:70:79:
40:1e:7a:11:37:bb:5f:7c:45:f2:53:ee:be:4a:bc:
ba:c8:24:95:31:b8:19:f4:bc:4d:33:e8:82:e9:d4:
1a:a1:fa:d4:bf:fb:96:23:1d:03:3f:ae:37:77:98:
e7:0e:73:bb:ee:e5:7b:7b:3a:e9:e9:45:fc:fd:20:
c5:cc:c1:67:01:5c:92:3b:32:df:b9:87:cd:ee:16:
3c:54:e1:86:fe:c6:f6:82:39:a0:3d:f9:ac:ff:d5:
a0:3d:de:63:c1:a7:6e:47:70:82:b2:37:aa:a8:12:
3a:7d:fa:6c:0a:74:68:e5:22:39:9a:73:ed:88:a5:
ee:c3:4f:6b:83:3d:ec:aa:4b:09:c4:9f:de:24:ba:
6b:ba:e4:66:f3:4c:5c:64:b7:4c:dd:8b:22:77:08:
c5:ef:86:98:98:59:d5:4e:70:1f:0c:35:79:22:12:
5f:58:4e:18:c5:b0:9c:73:13:fb:63:92:04:e2:b8:
00:aa:5d:01:6f:57:e5:b6:1c:a3:6b:a6:85:4f:83:
05:68:67:db:8c:87:b2:84:87:11:51:a5:9b:68:ec:
66:06:ba:0b:49:eb:83:16:c0:f5:d2:32:1b:6b:37:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:44:99:D0:B3:CF:6B:79:C4:CD:F6:3C:1A:CC:1E:C7:94:33:D3
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e3138302e3137382e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.178.0/23
Signature Algorithm: sha256WithRSAEncryption
67:45:4e:17:c3:91:a2:e1:16:05:9b:92:0b:50:47:33:28:9f:
c3:77:57:b8:e5:8b:50:fd:f0:b6:63:89:fb:3d:4d:ac:6c:48:
52:04:75:2d:17:25:d9:8f:37:11:86:1a:71:92:fa:3e:75:bf:
5c:96:15:fa:bb:ee:34:d6:c4:f1:da:95:54:a0:96:57:99:de:
15:89:9d:03:16:91:8f:93:ae:a2:6d:f8:80:47:6b:14:f9:2d:
da:10:7f:05:ce:61:6a:12:aa:6a:7a:66:88:5f:e9:66:3a:fb:
fc:9a:c2:80:32:dc:41:55:69:44:e1:42:07:ff:a7:16:ed:7a:
16:1e:f0:ef:96:4e:56:ca:fa:ed:b9:0b:f7:c4:23:2f:07:d6:
84:56:4f:40:71:e7:26:a4:aa:2e:dd:70:88:46:a2:0a:6b:d7:
b8:91:b1:b6:2f:51:5e:ea:f9:c4:25:80:79:e8:a6:13:b1:99:
d9:05:e9:8c:2c:45:c0:06:2e:9e:78:85:e4:c3:ed:22:df:9e:
7e:1b:62:c0:53:e1:59:22:82:f7:1b:88:be:b3:5d:96:85:99:
de:81:07:d8:f5:67:29:b8:90:76:04:60:7f:ec:19:9c:40:e7:
7c:d7:30:aa:24:6d:5b:d2:38:af:87:03:72:48:1a:cb:d7:0a:
45:88:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org