Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131352e302f32342d3234203d3e2030.roa
File: 39342e3130312e3131352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: KDazeG4IwBgYDO0USheD4BB+l5uzXevhB/pqIskijMo=
Subject key identifier: BA:5E:52:4E:11:AB:EE:7B:45:5E:56:FE:AB:B0:D1:08:82:24:B2:87
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 7C1D7A588349C4F423BF552D308376243BF7997B
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131352e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:56 +0000
ROA not before: Mon 27 Mar 2023 08:22:56 +0000
ROA not after: Mon 25 Mar 2024 08:27:56 +0000
asID: 0
IP address blocks: 94.101.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:1d:7a:58:83:49:c4:f4:23:bf:55:2d:30:83:76:24:3b:f7:99:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:56 2023 GMT
Not After : Mar 25 08:27:56 2024 GMT
Subject: CN=BA5E524E11ABEE7B455E56FEABB0D1088224B287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:43:29:7b:89:61:44:28:45:8b:61:9d:fa:
ee:fc:76:c9:be:a0:d6:5c:9b:51:24:f2:9e:d5:43:
68:48:7a:06:45:61:25:d8:a0:cb:a1:a8:e8:58:90:
85:c3:10:6d:53:39:29:9e:8c:65:e3:68:7b:93:f2:
65:c1:b0:12:9a:45:91:62:8b:90:cf:3d:8b:56:87:
ba:02:fd:24:9a:ca:c6:4a:c6:93:47:e4:d2:bf:c1:
83:31:93:4c:56:60:d9:e6:42:2e:35:f9:b1:3e:fc:
63:fa:2c:c9:de:9c:6d:61:d6:68:3b:18:e9:86:2c:
68:01:9f:81:37:e9:ec:c2:6a:f2:ce:f2:02:be:5f:
1e:08:3a:04:bc:f2:47:25:93:86:b0:fc:18:8e:91:
2d:52:b3:94:7b:05:b6:2f:8b:74:b8:d9:9f:22:87:
b4:79:b4:28:f5:d5:ec:e2:b4:31:89:a0:09:df:10:
ea:a4:5c:dc:fc:88:90:9e:1f:57:fd:81:6b:0b:43:
df:5f:11:84:ca:b0:03:e1:e0:5c:dd:3c:c6:ac:cf:
64:2d:12:fb:f4:d7:3f:e8:1b:62:c6:a4:90:3a:5a:
9f:57:24:92:8f:3a:20:4a:86:b1:18:f7:0a:f8:05:
2e:3b:74:0f:98:35:84:54:88:02:91:0a:48:df:b8:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5E:52:4E:11:AB:EE:7B:45:5E:56:FE:AB:B0:D1:08:82:24:B2:87
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ed:ab:8e:f3:e9:4c:77:74:12:00:88:de:9f:8c:40:b1:f5:
80:15:5c:14:aa:e0:74:72:5f:fd:c2:d8:95:74:de:e4:f0:54:
14:7a:29:b0:a8:f0:c1:92:99:0d:7e:3d:b7:02:de:7a:dc:53:
fe:ef:69:13:7a:88:ad:8b:6f:97:6b:b6:59:09:be:4d:eb:25:
4b:00:77:c7:44:ee:e0:a9:e8:98:4c:66:0d:2a:3f:d3:3a:37:
47:b6:46:9c:e1:df:c2:3e:94:16:84:fc:e5:d6:cc:08:97:ec:
56:53:1b:3b:37:56:a6:87:fe:94:8f:bf:5a:d1:b8:e4:35:6d:
0b:9c:b5:6e:74:bd:34:8c:66:46:d3:9a:17:9e:20:7b:c8:47:
16:7b:8f:e5:01:e5:ad:1f:10:f4:2c:d1:f6:07:aa:e9:ce:05:
32:b6:9e:67:32:2b:78:96:d4:4a:a2:00:f7:44:ac:fa:39:7f:
4e:ed:39:dc:5b:9d:ed:32:54:4d:ec:1e:84:cd:68:94:18:a5:
7b:08:23:02:21:db:83:72:19:71:24:b3:fb:8a:4e:b8:94:e0:
f9:17:40:34:00:d4:b1:fe:7b:95:18:c0:14:59:7a:5b:f3:01:
cc:29:34:86:41:12:3e:ac:0a:54:0c:dd:4e:53:c9:8e:90:0d:
f5:43:8d:60
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUfB16WINJxPQjv1UtMIN2JDv3mXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQ3MDg0NTgyMmE2MTQwOGVjMmE1ZmQ1ODBjMTMyZGE3
NzdmMDlkMTAeFw0yMzAzMjcwODIyNTZaFw0yNDAzMjUwODI3NTZaMDMxMTAvBgNV
BAMTKEJBNUU1MjRFMTFBQkVFN0I0NTVFNTZGRUFCQjBEMTA4ODIyNEIyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEv0Mpe4lhRChFi2Gd+u78dsm+
oNZcm1Ek8p7VQ2hIegZFYSXYoMuhqOhYkIXDEG1TOSmejGXjaHuT8mXBsBKaRZFi
i5DPPYtWh7oC/SSaysZKxpNH5NK/wYMxk0xWYNnmQi41+bE+/GP6LMnenG1h1mg7
GOmGLGgBn4E36ezCavLO8gK+Xx4IOgS88kclk4aw/BiOkS1Ss5R7BbYvi3S42Z8i
h7R5tCj11ezitDGJoAnfEOqkXNz8iJCeH1f9gWsLQ99fEYTKsAPh4FzdPMasz2Qt
Evv01z/oG2LGpJA6Wp9XJJKPOiBKhrEY9wr4BS47dA+YNYRUiAKRCkjfuKMPAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUul5SThGr7ntFXlb+q7DRCIIksocwHwYDVR0j
BBgwFoAUXXCEWCKmFAjsKl/VgMEy2nd/CdEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzgvNUQ3MDg0NTgyMkE2MTQwOEVDMkE1RkQ1ODBDMTMyREE3NzdGMDlEMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hYQ0VXQ0ttRkFqc0tsX1ZnTUV5Mm5k
X0NkRS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzgvMzkzNDJlMzEzMDMxMmUzMTMx
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF5lczANBgkq
hkiG9w0BAQsFAAOCAQEADO2rjvPpTHd0EgCI3p+MQLH1gBVcFKrgdHJf/cLYlXTe
5PBUFHopsKjwwZKZDX49twLeetxT/u9pE3qIrYtvl2u2WQm+TeslSwB3x0Tu4Kno
mExmDSo/0zo3R7ZGnOHfwj6UFoT85dbMCJfsVlMbOzdWpof+lI+/WtG45DVtC5y1
bnS9NIxmRtOaF54ge8hHFnuP5QHlrR8Q9CzR9geq6c4FMraeZzIreJbUSqIA90Ss
+jl/Tu053Fud7TJUTewehM1olBilewgjAiHbg3IZcSSz+4pOuJTg+RdANADUsf57
lRjAFFl6W/MBzCk0hkESPqwKVAzdTlPJjpAN9UONYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-fra.rpki-client.org