Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33382e302f32332d3234203d3e203432333636.roa
File: 38312e32322e33382e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: Jzp3NZf4bg7nSUDMR2bEJFzt1XzCAV9VeHwbYrteZmc=
Subject key identifier: F1:93:1D:9C:E9:67:9E:35:96:86:72:9A:C0:B1:06:BA:69:CE:27:30
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4251592D6B9A66DEE073482642B0FFD6C7A068EE
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33382e302f32332d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:17:23 +0000
ROA not before: Fri 31 Mar 2023 12:12:23 +0000
ROA not after: Fri 29 Mar 2024 12:17:23 +0000
asID: 42366
IP address blocks: 81.22.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:51:59:2d:6b:9a:66:de:e0:73:48:26:42:b0:ff:d6:c7:a0:68:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:12:23 2023 GMT
Not After : Mar 29 12:17:23 2024 GMT
Subject: CN=F1931D9CE9679E359686729AC0B106BA69CE2730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:23:2c:03:78:49:d7:de:0f:c6:21:cc:8a:
2c:df:4c:cc:0a:a0:65:61:a4:0f:6a:3a:24:cc:1b:
5a:f2:fb:e1:ce:e8:ab:c5:56:62:71:d1:e4:fe:4c:
9d:c0:06:b1:e9:ee:eb:e3:67:70:ce:4e:9d:9f:2c:
8c:ab:27:bf:26:72:e6:76:31:45:9d:77:30:39:4d:
d0:04:cb:c5:3a:90:91:10:6f:6f:95:16:45:36:0d:
d3:a7:b4:a9:3c:5f:2a:06:ae:6d:0a:1a:34:ac:bd:
e9:00:4b:df:0b:3e:ab:7e:ec:db:40:6d:a1:d6:58:
ea:2e:67:4d:27:a2:1f:53:3c:e4:3c:41:52:8b:bb:
37:f2:f9:c8:31:fa:5d:e0:42:93:cc:24:ff:ff:0d:
11:5d:4c:4c:9a:30:f2:1c:fa:85:40:16:4d:1f:88:
91:b4:c4:cb:43:a8:de:cd:4c:88:2c:91:55:bc:b4:
44:45:9a:7f:15:79:80:23:07:5f:f7:00:78:54:ba:
25:eb:d5:08:66:26:89:32:c0:4a:2e:6c:64:13:99:
8a:89:ac:f9:bd:37:08:14:00:84:e3:c9:a5:ea:10:
c2:8a:96:5f:94:bc:84:36:c4:4c:1e:be:ac:77:e5:
7b:26:34:3b:6d:1c:d4:3e:95:e6:78:20:c8:ab:0b:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:93:1D:9C:E9:67:9E:35:96:86:72:9A:C0:B1:06:BA:69:CE:27:30
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33382e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.38.0/23
Signature Algorithm: sha256WithRSAEncryption
22:73:53:b0:e8:22:34:2c:71:43:c7:41:04:b6:cb:96:dc:60:
bf:fe:34:7c:47:53:86:36:db:c6:25:d2:d5:c1:fd:ea:58:f0:
6a:b7:de:d2:00:61:2a:4e:f4:bd:f2:f1:47:b7:41:d5:78:98:
08:03:b4:68:74:ca:a8:76:46:d4:4a:56:41:05:a3:24:93:85:
68:9a:ef:16:e6:14:46:17:df:00:2c:7c:b1:e7:07:f2:d2:7f:
ed:d6:63:16:ad:c4:ee:10:4e:1a:99:a2:eb:6b:b9:6e:5e:68:
55:d1:ec:a9:f2:3e:15:2b:65:ad:47:75:b2:d8:87:48:b7:fd:
0c:a3:84:7c:5b:61:5d:9b:24:87:c1:4a:3c:2f:5b:4e:cc:2f:
fa:2b:3b:f3:34:7e:90:29:5a:8e:83:76:9f:e7:12:3f:e1:21:
41:82:1b:94:c3:6c:07:50:94:3a:69:96:20:d3:5d:d2:36:f9:
1a:bd:11:54:b8:90:0b:33:22:14:74:0c:f3:db:6e:38:56:1d:
fe:8c:4f:c4:61:19:fb:45:81:05:e2:5a:74:a1:ac:ca:bb:bd:
5a:4f:35:ee:52:dc:6c:cf:af:0d:c0:ef:f8:bc:d5:de:66:4f:
e5:82:c0:a3:0d:e6:95:e7:96:00:14:fc:a5:dc:49:f1:71:86:
1e:47:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org