Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38342e32312e3136382e302f32332d3234203d3e203432333636.roa
File: 38342e32312e3136382e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: So2/gLV9MXDLQy0HskUuXHSCQcoOX4X1bvvtZu1qDcg=
Subject key identifier: 5E:22:38:B1:1D:4E:FD:E0:7C:CD:70:A2:A2:DF:62:53:56:FA:C4:28
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 2E2141325F270E24997078E161B2F412722BFB3B
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38342e32312e3136382e302f32332d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:18:13 +0000
ROA not before: Fri 31 Mar 2023 12:13:13 +0000
ROA not after: Fri 29 Mar 2024 12:18:13 +0000
asID: 42366
IP address blocks: 84.21.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:21:41:32:5f:27:0e:24:99:70:78:e1:61:b2:f4:12:72:2b:fb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:13:13 2023 GMT
Not After : Mar 29 12:18:13 2024 GMT
Subject: CN=5E2238B11D4EFDE07CCD70A2A2DF625356FAC428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:d5:6c:2a:f0:cf:7e:00:27:70:c4:bf:5c:
a0:db:9a:dc:51:7d:f0:0c:b0:81:01:3c:2e:20:3d:
8d:0e:a6:4e:74:e1:90:bc:f6:60:4f:77:6e:a5:2c:
e2:52:77:4d:f4:c1:98:35:d7:4b:a5:76:05:ec:b5:
07:41:4d:a7:73:fe:4b:14:0b:db:ba:c5:21:51:dc:
a9:e6:8a:6c:67:07:2e:02:00:38:eb:c1:1e:9f:38:
a5:98:4c:95:71:92:02:63:d6:5c:bc:66:64:a9:09:
ed:76:7c:4d:32:f4:be:7c:93:98:42:2b:ea:da:26:
f3:0e:d5:30:47:c4:32:31:5f:b1:9f:6c:1c:d5:74:
82:bd:f1:df:b6:ba:61:87:67:f8:70:f6:d1:1f:4a:
10:2d:c9:5a:e4:7f:76:8a:f7:f2:d0:d0:1f:ca:0d:
3f:89:90:11:ca:06:51:50:10:c2:8c:12:d7:49:57:
8d:1d:62:dd:fd:03:49:6b:f7:07:74:af:4f:05:38:
32:df:cd:60:b6:0b:c6:ba:c5:8d:9f:42:c1:62:3a:
e5:68:1f:00:e4:eb:fb:6a:bc:9e:6c:17:23:05:f9:
86:43:2f:92:bd:82:84:80:de:01:15:27:69:70:6c:
92:b1:a7:62:f6:86:30:dd:d8:69:d1:9a:54:ee:a4:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:22:38:B1:1D:4E:FD:E0:7C:CD:70:A2:A2:DF:62:53:56:FA:C4:28
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38342e32312e3136382e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.168.0/23
Signature Algorithm: sha256WithRSAEncryption
60:7e:65:fa:96:fa:fd:de:9f:61:da:54:8b:86:0d:68:7c:7d:
5a:7c:c2:d6:d6:43:8b:51:df:54:b3:10:fd:04:ae:2b:9f:23:
be:2c:1a:f9:a0:b9:fd:ad:cf:24:52:59:b2:8c:8c:8d:b5:0e:
92:6b:9d:73:8d:81:dd:b0:41:bc:9b:e0:ff:fb:b2:4e:a5:45:
cb:8d:7c:03:6b:b8:e8:ae:1d:66:97:ee:b2:5d:8a:33:2f:95:
dd:24:e9:3b:5e:4d:79:c8:81:54:ad:ed:62:c8:ee:87:7e:39:
84:ad:79:55:1d:d2:2b:90:45:d2:7f:00:ea:33:d0:8b:7e:bb:
f1:d9:a4:7b:ac:c0:7a:13:89:55:00:04:11:56:25:57:40:f5:
f2:7f:80:4a:66:d8:e9:b5:d7:b3:6b:70:c8:8e:f3:cf:30:f2:
4c:49:e4:ac:03:fb:d0:e9:a6:5e:e9:dd:dc:e7:59:b9:a6:33:
2d:fb:81:67:76:c2:f1:c0:5a:1e:3a:b7:67:72:22:16:6b:ad:
e2:23:88:b2:22:1c:f9:98:99:61:25:78:5d:e9:cd:5b:dd:8f:
dd:da:d6:ed:e1:b5:03:b8:f8:66:60:ab:b8:77:4c:43:95:c2:
bd:ec:6d:82:35:50:f5:08:af:30:1b:47:79:7a:88:62:fc:73:
a4:1c:14:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org