Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e36312e33302e302f32342d3234203d3e203432333636.roa
File: 3139342e36312e33302e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: TjvQA0IxCYZqOJFnWIScqUajj3U/kdZ7lOp0GXNIzzE=
Subject key identifier: E5:8C:18:38:44:01:F0:19:A9:D1:4F:48:F0:37:67:31:CD:D0:34:95
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4B6CE69A2834DD8AA4434E968BE67BA97A30917F
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e36312e33302e302f32342d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:18:52 +0000
ROA not before: Fri 31 Mar 2023 12:13:52 +0000
ROA not after: Fri 29 Mar 2024 12:18:52 +0000
asID: 42366
IP address blocks: 194.61.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:6c:e6:9a:28:34:dd:8a:a4:43:4e:96:8b:e6:7b:a9:7a:30:91:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:13:52 2023 GMT
Not After : Mar 29 12:18:52 2024 GMT
Subject: CN=E58C18384401F019A9D14F48F0376731CDD03495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:29:11:d8:a2:46:32:6f:bd:ac:70:be:c6:
14:2a:ba:97:51:f9:d6:50:dc:b7:f1:fd:a1:03:69:
b6:ed:8e:a9:33:94:10:ff:20:c2:ea:81:f7:18:fb:
a7:d9:50:e2:32:f4:e4:35:5c:70:4e:0b:db:89:c8:
89:10:db:22:2f:36:20:53:1c:5e:98:44:31:fd:c4:
88:d1:13:90:ed:7a:37:19:ad:56:49:e7:01:7d:e2:
6b:d0:a1:12:8d:ec:06:e8:7a:d6:ce:9a:15:44:46:
04:1c:3c:19:ae:fc:64:1f:65:65:1a:75:1e:3d:8a:
d1:7e:02:6d:f0:a5:e8:c7:e2:49:d2:7e:80:80:41:
df:02:a5:ed:2d:75:44:c6:ad:1a:16:49:b1:87:c9:
08:6b:d8:d2:63:3e:5f:3b:80:7c:09:c3:09:78:b3:
af:22:52:19:b9:b5:71:24:ea:45:63:25:ce:9e:b7:
0c:bb:55:5b:8d:b0:ea:02:df:d5:8c:46:cd:b6:c8:
03:6d:7d:8f:12:38:43:39:98:58:87:89:88:66:a9:
d9:31:38:d4:b5:38:4f:48:3d:20:39:53:70:8e:c9:
bb:42:9d:4a:97:e8:82:e7:29:67:5b:ba:1d:38:10:
08:7a:4e:11:37:7b:5b:c3:9e:67:d9:6b:db:bc:e7:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8C:18:38:44:01:F0:19:A9:D1:4F:48:F0:37:67:31:CD:D0:34:95
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e36312e33302e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:cb:3f:c9:04:e5:f1:78:f4:86:ef:cf:3d:91:01:cc:ee:b9:
d6:9e:3b:94:77:f3:ad:ae:01:8c:76:d2:2a:2b:9a:fa:14:b4:
de:02:44:25:c8:4e:6c:aa:8d:9e:eb:99:88:4e:a2:fe:73:b2:
e8:1f:b8:2c:12:f0:76:37:b0:47:28:70:de:54:af:0f:3e:e0:
82:8f:28:5c:13:17:92:21:b7:a1:1c:17:5f:12:e6:9e:75:0e:
96:42:73:99:b4:c1:72:26:c6:ae:9a:8c:8d:61:e7:8b:2d:38:
3a:c2:4d:57:98:39:93:a9:ab:3f:ff:32:60:c8:82:64:d2:9c:
f8:d6:50:73:5c:1c:68:95:cd:0e:8a:b0:3d:7f:36:68:a2:58:
e1:f6:ba:60:0d:05:90:fc:34:0d:e5:14:fe:81:3a:2b:bb:5f:
76:56:18:1f:c1:cb:3c:80:df:ad:ab:36:6c:68:42:23:2e:7c:
f8:96:1a:99:5f:3c:bc:f2:25:6c:46:ef:0c:db:a8:dd:02:80:
bc:69:ff:da:9c:cd:f2:72:ce:8f:73:a7:4d:00:40:ff:1a:f7:
fd:77:ab:73:65:0d:f3:23:16:86:04:5f:5f:18:cc:88:28:25:
29:c6:89:5a:43:ec:b4:70:51:a8:6c:ee:d5:ec:0e:a3:57:f7:
53:72:a5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org