Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/352e3138332e33322e302f32322d3234203d3e2030.roa
File: 352e3138332e33322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: eFkp69RxYKwYcyZIUhQQi2Emt5/9dxo+7r784sIo8Lk=
Subject key identifier: 14:66:7E:57:EE:65:92:C9:86:16:32:CD:F6:D8:84:B4:D4:61:C2:F7
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 31120CB5A3B8B0984009B05DC23B71DE8E866534
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/352e3138332e33322e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:51 +0000
ROA not before: Mon 27 Mar 2023 08:22:51 +0000
ROA not after: Mon 25 Mar 2024 08:27:51 +0000
asID: 0
IP address blocks: 5.183.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:12:0c:b5:a3:b8:b0:98:40:09:b0:5d:c2:3b:71:de:8e:86:65:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:51 2023 GMT
Not After : Mar 25 08:27:51 2024 GMT
Subject: CN=14667E57EE6592C9861632CDF6D884B4D461C2F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:59:f6:5e:19:7d:18:d6:44:b2:95:5b:0b:
b9:58:6d:c6:76:49:3e:f7:5f:48:16:2c:25:84:9a:
56:54:57:b1:be:0e:ad:bb:fa:6a:0c:5f:38:a9:e2:
5f:af:b6:0f:46:c3:25:f5:4a:51:04:30:96:55:58:
06:0c:ee:bc:12:b2:d1:d9:d0:94:ce:57:f2:80:0c:
0b:6c:4d:21:da:cb:50:2c:c8:5b:97:73:d7:1d:6b:
40:f6:e3:4e:cd:10:65:89:29:f9:0f:7e:09:67:2e:
f9:b3:04:65:28:41:ed:0d:c7:e5:c8:04:67:a6:85:
0a:e2:75:67:e1:5a:a0:8c:cb:78:d1:69:5c:42:31:
c8:6c:1c:45:77:4a:45:58:7b:6b:6a:60:53:92:fd:
fa:25:49:bd:d8:8f:6c:9b:8b:93:10:a3:cf:40:4e:
46:74:ff:cf:9b:88:5b:b6:3a:c8:cf:fe:5c:9d:27:
6d:41:df:56:6d:44:07:f5:48:2f:8a:87:6f:b2:48:
bb:4e:1b:f9:87:9a:9a:67:59:6f:5b:35:dd:1e:81:
e1:cc:93:92:e4:6a:33:de:22:be:c4:fa:17:ce:51:
41:ed:24:f2:94:20:a3:43:33:c6:82:cc:9d:2b:26:
1c:c7:e8:61:f9:3c:e4:e5:ea:80:9e:50:9b:0c:88:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:66:7E:57:EE:65:92:C9:86:16:32:CD:F6:D8:84:B4:D4:61:C2:F7
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/352e3138332e33322e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:45:7f:b1:7c:8e:f3:6f:bb:bb:a2:a5:66:fa:35:ba:7c:4f:
3c:e4:f2:74:9e:3f:f8:2c:a5:08:29:f6:70:ef:4a:27:3a:8f:
9c:c5:30:2c:41:73:22:05:77:1d:fd:5d:21:13:66:17:23:f7:
71:d7:f0:74:fc:77:3b:47:08:dd:a9:48:e3:e0:a1:d3:99:94:
ba:74:b1:1b:50:80:43:e2:64:fc:ca:bd:fa:42:3f:5f:82:01:
c0:29:31:8b:4d:0c:70:aa:7e:37:65:b8:1d:95:2f:40:3d:92:
0b:69:7a:e8:5b:37:7f:2b:7d:c6:c5:ed:aa:ca:82:4b:61:54:
31:d7:99:9e:31:24:6a:a5:58:ef:ac:13:3e:90:6e:5c:4b:51:
54:65:b5:92:ad:ea:2b:63:6d:77:9d:da:a6:97:0d:f2:65:e9:
b4:b8:3d:6b:9a:6c:b5:af:a9:79:be:78:8d:55:72:bb:c5:ae:
cd:6d:5c:f1:63:9b:1e:b0:e5:69:a2:ae:70:5d:46:5a:94:53:
c4:d2:d6:e2:1c:b4:aa:c9:aa:55:d9:63:a5:54:87:4d:64:f3:
60:91:27:c1:d0:34:f3:d3:19:79:75:c3:23:9d:85:c5:d3:65:
d2:b0:62:ff:ad:f0:e4:e8:a4:82:d0:ce:6d:c0:77:9e:7e:00:
45:f4:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org