Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e352e3135332e302f32342d3234203d3e2030.roa
File: 3139342e352e3135332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: +TbzdyO2zpokB87qmsFKfgaGgqtgMH4bLpU7OV+8JfU=
Subject key identifier: FA:6D:70:3E:8F:52:95:4E:24:D6:DE:82:8F:76:E2:80:B6:3E:0D:62
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 6241753D3986A9D7BC926DCC7B9BBCE1395E6B92
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e352e3135332e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:56 +0000
ROA not before: Mon 27 Mar 2023 08:22:56 +0000
ROA not after: Mon 25 Mar 2024 08:27:56 +0000
asID: 0
IP address blocks: 194.5.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:41:75:3d:39:86:a9:d7:bc:92:6d:cc:7b:9b:bc:e1:39:5e:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:56 2023 GMT
Not After : Mar 25 08:27:56 2024 GMT
Subject: CN=FA6D703E8F52954E24D6DE828F76E280B63E0D62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:72:30:40:c8:f8:77:2a:96:34:55:4c:b1:
1a:7e:6f:e6:fa:84:f2:e0:9c:57:90:79:42:2d:46:
f5:23:db:1b:29:22:d9:c3:9d:3d:87:b7:ed:3c:23:
42:0e:02:b0:11:b1:61:ef:2e:c6:d1:f0:4a:e6:5d:
f9:42:88:1b:b1:58:e3:2b:71:b1:0c:97:a5:a0:d2:
74:bb:e7:94:0b:ed:e8:f7:fd:f2:f9:0e:3b:19:9c:
d1:c2:9c:7c:d7:00:bc:db:fc:df:16:fa:e8:13:e8:
5d:5d:6f:bd:ea:98:9d:65:ce:11:50:f7:5c:ce:37:
d9:fe:01:24:f2:bb:5e:e8:b9:0c:2e:53:0b:32:71:
2f:ee:12:b8:2d:6e:b0:dc:e9:1d:bf:69:e1:14:2b:
e1:96:2c:cd:77:d5:d2:8b:1a:ec:8a:f8:e2:8d:cb:
7f:4d:75:53:b0:f1:a9:fe:9d:66:51:61:89:26:35:
20:bc:f8:5a:0b:d3:0a:eb:fd:b5:cc:d5:51:ed:0c:
ab:6f:c2:36:62:a0:45:01:0c:3a:8f:17:70:1c:77:
14:40:dd:e9:0d:a7:2d:a1:20:f4:bc:93:c3:b9:b0:
99:2a:da:95:1a:96:02:1d:ad:55:63:50:15:8f:b7:
c3:74:89:ad:64:5f:88:3c:0f:03:de:3f:ff:8d:a3:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6D:70:3E:8F:52:95:4E:24:D6:DE:82:8F:76:E2:80:B6:3E:0D:62
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e352e3135332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:5d:ea:f1:2d:73:e6:e8:b6:6f:83:18:18:8c:9c:29:a8:be:
51:07:96:0d:4d:f3:96:60:e8:90:8a:38:48:59:53:a8:2b:4b:
61:57:e1:1a:a9:7c:d9:37:5e:96:dc:75:6c:32:73:c7:a7:24:
2e:d7:c0:da:02:eb:5d:bc:8d:81:6e:9e:1a:d8:e6:fd:ed:d5:
28:08:3f:02:13:09:7a:9b:54:12:99:16:b1:d6:ea:d6:5d:2e:
05:00:7b:26:e8:82:91:e2:f7:12:56:6c:2e:dc:a3:47:89:0e:
0f:36:3c:65:ea:c8:f9:7c:08:32:08:c7:b9:4a:01:de:17:97:
0f:1a:74:7c:a4:1a:5e:12:5e:51:99:0b:93:75:35:e2:10:b6:
2b:26:24:6c:1c:72:4b:21:ee:56:d9:8e:cc:07:ff:bc:dc:9f:
b8:91:97:8b:96:e2:43:35:01:b8:4f:61:e6:75:5c:a3:14:a7:
4d:a3:0e:b3:12:9d:6a:a7:40:25:19:65:c9:2d:59:2b:5c:49:
7f:68:3e:9b:92:18:d3:20:1f:93:8a:af:6f:d2:12:9e:be:d0:
7c:fa:08:f0:46:86:a3:82:0a:08:f6:7a:dd:df:77:f2:65:be:
d9:91:ca:23:2f:bd:41:fc:e2:15:98:f3:ce:51:6c:99:9f:aa:
26:06:e8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org