Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e36312e32392e302f32342d3234203d3e203432333636.roa
File: 3139342e36312e32392e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: suHagWK2rdR2/3odeXNzGghOAkiT80iZJwULFrwfdGg=
Subject key identifier: 90:19:8A:D9:26:F6:0B:D4:E9:65:0D:4C:A4:CD:DB:87:67:62:D7:D6
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 18C2B4425B7660B554339DEE53483B9B7E31E055
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e36312e32392e302f32342d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:18:45 +0000
ROA not before: Fri 31 Mar 2023 12:13:45 +0000
ROA not after: Fri 29 Mar 2024 12:18:45 +0000
asID: 42366
IP address blocks: 194.61.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c2:b4:42:5b:76:60:b5:54:33:9d:ee:53:48:3b:9b:7e:31:e0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:13:45 2023 GMT
Not After : Mar 29 12:18:45 2024 GMT
Subject: CN=90198AD926F60BD4E9650D4CA4CDDB876762D7D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:21:67:d9:69:67:ed:0f:ae:4d:dc:66:1f:
09:73:05:c7:15:7c:e1:d1:b0:02:1c:f4:ef:01:cc:
8d:e3:7f:f2:70:39:f9:46:20:99:00:4b:fa:96:ed:
12:7d:c0:86:bf:e0:25:8a:86:ea:da:4a:98:c6:1a:
68:e4:68:3c:e0:91:bc:e4:05:70:53:ee:1c:0f:d9:
a9:37:7f:fe:a4:31:db:f7:40:36:dd:cb:25:16:15:
ad:41:b7:a3:34:53:a8:19:7d:4d:30:bd:89:6e:4a:
55:70:56:b2:fc:e8:1b:3a:98:6a:c7:9b:84:2e:aa:
d3:c4:9e:12:91:aa:02:37:81:5c:24:58:31:60:85:
f2:d5:49:da:34:a9:6a:77:d7:e0:ad:0e:d8:b9:1e:
e8:dd:4b:c7:19:51:0a:35:ab:06:39:92:af:8c:42:
ee:e9:7e:49:5e:4f:f5:60:d2:11:c8:eb:47:08:2a:
ee:39:e5:8b:a8:ea:cb:50:a9:1f:1c:1f:7e:3d:89:
e3:b9:90:87:ab:2c:8e:ef:17:68:27:89:a3:99:59:
6b:29:5c:36:ba:68:c2:21:f4:c9:06:99:ee:44:09:
d7:25:fe:87:94:b9:19:84:41:cc:c9:72:da:32:0b:
c1:f3:8a:bd:14:e9:2b:0f:58:df:85:5d:a2:2b:95:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:19:8A:D9:26:F6:0B:D4:E9:65:0D:4C:A4:CD:DB:87:67:62:D7:D6
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e36312e32392e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e2:47:ee:d0:56:9a:4c:72:31:96:2e:bd:bd:00:c5:ff:06:
43:c0:b4:11:14:e6:a3:c7:f8:d9:92:ce:94:7e:56:fe:21:3c:
0b:3d:88:c1:cd:1d:e3:2e:1f:37:22:63:07:b3:93:2b:ac:fc:
71:22:e7:03:bb:af:40:5a:45:c8:16:f3:bf:e3:b1:0d:ec:dd:
4d:70:e7:87:43:56:8f:16:48:09:2f:1f:df:57:cf:7a:c1:89:
0a:6a:76:99:b4:05:1b:dd:07:c5:59:7d:e7:df:72:18:a0:94:
42:9d:10:10:92:1e:79:c1:5a:70:11:f2:a7:3b:b8:b4:c3:9e:
65:c9:72:8e:86:43:7d:1c:b0:d3:74:da:b4:63:e4:01:bc:34:
ff:81:76:a7:55:5b:3f:2b:0c:64:6e:13:93:bb:f1:9a:29:02:
be:cd:2b:35:4f:5c:43:56:d8:bf:c1:f9:29:66:01:29:a8:1c:
54:97:bd:7b:f0:28:aa:13:74:fa:32:1e:ed:25:1f:3a:d8:9b:
67:37:3a:d3:3b:7b:b7:ee:5c:fe:3a:6b:52:3e:fb:e6:83:b2:
3a:dc:00:7d:7e:67:de:b1:1b:a7:3f:db:f1:c0:98:a5:4c:e9:
de:8d:c2:e2:9b:d9:a5:24:c5:58:08:37:40:6f:c2:eb:5b:ca:
cc:d2:7e:3b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGMK0Qlt2YLVUM53uU0g7m34x4FUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yMzAzMzExMjEzNDVaFw0yNDAzMjkxMjE4NDVaMDMxMTAvBgNV
BAMTKDkwMTk4QUQ5MjZGNjBCRDRFOTY1MEQ0Q0E0Q0REQjg3Njc2MkQ3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDijSFn2Wln7Q+uTdxmHwlzBccV
fOHRsAIc9O8BzI3jf/JwOflGIJkAS/qW7RJ9wIa/4CWKhuraSpjGGmjkaDzgkbzk
BXBT7hwP2ak3f/6kMdv3QDbdyyUWFa1Bt6M0U6gZfU0wvYluSlVwVrL86Bs6mGrH
m4QuqtPEnhKRqgI3gVwkWDFghfLVSdo0qWp31+CtDti5HujdS8cZUQo1qwY5kq+M
Qu7pfkleT/Vg0hHI60cIKu455Yuo6stQqR8cH349ieO5kIerLI7vF2gniaOZWWsp
XDa6aMIh9MkGme5ECdcl/oeUuRmEQczJctoyC8Hzir0U6SsPWN+FXaIrleEfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUkBmK2Sb2C9TpZQ1MpM3bh2di19YwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzEzOTM0MmUzNjMxMmUzMjM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMjMzMzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI9
HTANBgkqhkiG9w0BAQsFAAOCAQEATOJH7tBWmkxyMZYuvb0Axf8GQ8C0ERTmo8f4
2ZLOlH5W/iE8Cz2Iwc0d4y4fNyJjB7OTK6z8cSLnA7uvQFpFyBbzv+OxDezdTXDn
h0NWjxZICS8f31fPesGJCmp2mbQFG90HxVl9599yGKCUQp0QEJIeecFacBHypzu4
tMOeZclyjoZDfRyw03TatGPkAbw0/4F2p1VbPysMZG4Tk7vxmikCvs0rNU9cQ1bY
v8H5KWYBKagcVJe9e/AoqhN0+jIe7SUfOtibZzc60zt7t+5c/jprUj775oOyOtwA
fX5n3rEbpz/b8cCYpUzp3o3C4pvZpSTFWAg3QG/C61vKzNJ+Ow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org