Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131332e302f32342d3234203d3e203432333636.roa
File: 39342e3130312e3131332e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: um4hMTIHHQaAKzsubVbSzBJ3GPWqypc1YT0bmxtRCFY=
Subject key identifier: 5C:FE:08:F6:8B:68:26:C3:57:26:27:6D:49:3D:3C:20:43:0A:EA:42
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 3950EA05FA3FB48E7321DE02A69695EB2F3687BD
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131332e302f32342d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:17:30 +0000
ROA not before: Fri 31 Mar 2023 12:12:30 +0000
ROA not after: Fri 29 Mar 2024 12:17:30 +0000
asID: 42366
IP address blocks: 94.101.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:50:ea:05:fa:3f:b4:8e:73:21:de:02:a6:96:95:eb:2f:36:87:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:12:30 2023 GMT
Not After : Mar 29 12:17:30 2024 GMT
Subject: CN=5CFE08F68B6826C35726276D493D3C20430AEA42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:d4:d1:84:5f:db:d5:d9:02:11:ff:45:00:
bc:50:37:ad:2b:7f:61:2d:e8:91:08:00:67:a7:6b:
87:bc:07:c2:8f:46:ee:d2:21:48:11:23:7d:c1:6f:
0f:12:66:23:df:c3:7a:b1:94:7b:c0:b4:cc:5f:15:
df:45:b6:90:ce:2e:ac:66:1c:f0:fc:64:bb:28:fc:
13:3b:f6:2e:16:e4:75:45:e3:b0:66:46:63:f8:6b:
97:b9:98:a8:0f:10:c8:44:86:32:13:d5:f2:5a:87:
6e:6a:e8:a9:0d:41:cb:9b:84:e0:3e:38:4a:b8:9b:
10:68:eb:02:21:16:e4:60:8f:71:86:64:a6:54:0d:
fd:ea:36:ec:ca:db:68:7e:e6:67:96:3b:7e:d8:17:
8e:26:00:ad:ff:f1:69:93:06:de:9b:cc:b4:aa:18:
a7:aa:ed:53:70:4c:f3:88:7d:ab:b8:bc:f4:8e:8b:
1c:bf:f8:8b:2a:49:f2:4b:b3:69:be:5b:69:9a:cf:
f7:d9:c0:ad:c3:4b:ce:3c:5c:68:0b:bf:67:b9:a5:
9b:41:f8:c7:31:75:fc:0b:05:e0:e6:64:d8:9d:11:
e5:7c:dd:1f:30:07:89:40:db:2e:dc:cd:8f:79:6c:
74:53:25:22:77:49:95:5d:b1:fa:71:8b:2b:6e:b1:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FE:08:F6:8B:68:26:C3:57:26:27:6D:49:3D:3C:20:43:0A:EA:42
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131332e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.113.0/24
Signature Algorithm: sha256WithRSAEncryption
25:61:1c:cd:48:7c:81:5e:f9:72:4d:45:0f:c1:29:88:d3:7d:
21:46:bc:8d:c8:11:c2:fd:0d:37:2d:dc:e9:32:0b:36:72:d3:
c4:8c:45:3c:31:d7:99:eb:81:a8:92:e0:87:26:55:6e:d2:25:
1a:ac:63:22:95:60:62:b7:29:63:11:b4:27:ec:11:4e:4c:28:
c5:81:2c:62:d4:88:a4:4f:68:dd:0c:c5:64:41:93:55:84:60:
b8:4c:bb:1d:7c:82:3c:51:ba:8f:72:d1:b6:f1:f6:29:6b:d3:
8d:bb:58:52:70:10:6e:1a:cd:38:fe:43:01:cd:00:39:3a:c6:
3e:bc:4e:c2:75:4b:46:d5:53:41:dc:bf:b8:47:6a:96:1c:94:
5e:5b:ed:e6:89:36:7f:63:41:4c:64:31:19:cf:74:08:c8:3f:
65:cf:54:f7:f3:24:4c:35:7f:7c:9f:2b:6f:56:33:e6:b1:40:
b2:51:64:44:a6:9d:e9:1e:37:26:4f:ed:1c:1b:02:46:43:be:
bb:20:7f:a9:e5:0e:ab:bf:63:1e:75:51:6a:12:c0:3f:ad:05:
1f:32:ab:ab:d4:9f:5e:1e:aa:2b:b0:39:7d:9f:3c:31:38:db:
86:82:47:c1:ee:e5:1b:38:d1:ee:61:8c:59:38:2e:02:99:ac:
f0:0a:10:d7
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOVDqBfo/tI5zId4CppaV6y82h70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yMzAzMzExMjEyMzBaFw0yNDAzMjkxMjE3MzBaMDMxMTAvBgNV
BAMTKDVDRkUwOEY2OEI2ODI2QzM1NzI2Mjc2RDQ5M0QzQzIwNDMwQUVBNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VdTRhF/b1dkCEf9FALxQN60r
f2Et6JEIAGena4e8B8KPRu7SIUgRI33Bbw8SZiPfw3qxlHvAtMxfFd9FtpDOLqxm
HPD8ZLso/BM79i4W5HVF47BmRmP4a5e5mKgPEMhEhjIT1fJah25q6KkNQcubhOA+
OEq4mxBo6wIhFuRgj3GGZKZUDf3qNuzK22h+5meWO37YF44mAK3/8WmTBt6bzLSq
GKeq7VNwTPOIfau4vPSOixy/+IsqSfJLs2m+W2maz/fZwK3DS848XGgLv2e5pZtB
+McxdfwLBeDmZNidEeV83R8wB4lA2y7czY95bHRTJSJ3SZVdsfpxiytusQwDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUXP4I9otoJsNXJidtST08IEMK6kIwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzkzNDJlMzEzMDMxMmUzMTMx
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XmVxMA0GCSqGSIb3DQEBCwUAA4IBAQAlYRzNSHyBXvlyTUUPwSmI030hRryNyBHC
/Q03LdzpMgs2ctPEjEU8MdeZ64GokuCHJlVu0iUarGMilWBityljEbQn7BFOTCjF
gSxi1IikT2jdDMVkQZNVhGC4TLsdfII8UbqPctG28fYpa9ONu1hScBBuGs04/kMB
zQA5OsY+vE7CdUtG1VNB3L+4R2qWHJReW+3miTZ/Y0FMZDEZz3QIyD9lz1T38yRM
NX98nytvVjPmsUCyUWREpp3pHjcmT+0cGwJGQ767IH+p5Q6rv2MedVFqEsA/rQUf
Mqur1J9eHqorsDl9nzwxONuGgkfB7uUbONHuYYxZOC4CmazwChDX
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org