Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39352e3231342e3231362e302f32332d3234203d3e203432333636.roa
File: 39352e3231342e3231362e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: bvjHZeUR5+alGpN8mv5sL79drZc/cA/QlENUL+Z9KWg=
Subject key identifier: 3A:BA:D3:97:65:3A:6C:10:72:5C:DD:41:1F:FD:FD:C9:B1:85:19:9F
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 160C827678F1B35E79220C0E45397638E883A301
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39352e3231342e3231362e302f32332d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:19:10 +0000
ROA not before: Fri 31 Mar 2023 12:14:10 +0000
ROA not after: Fri 29 Mar 2024 12:19:10 +0000
asID: 42366
IP address blocks: 95.214.216.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:0c:82:76:78:f1:b3:5e:79:22:0c:0e:45:39:76:38:e8:83:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:14:10 2023 GMT
Not After : Mar 29 12:19:10 2024 GMT
Subject: CN=3ABAD397653A6C10725CDD411FFDFDC9B185199F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:46:73:2f:89:e9:8d:be:47:6f:54:ef:5f:
28:cb:98:d1:6c:5a:de:91:ad:bc:35:44:ac:e9:70:
e3:0a:93:04:0b:0f:cb:bd:d6:a5:66:24:f0:89:75:
b9:bf:2d:12:d0:b0:6b:fc:19:43:83:be:6c:a0:10:
63:2d:1f:42:88:bb:7f:49:94:5d:d5:31:e1:39:ca:
db:72:fb:1d:8a:fe:56:a7:45:3b:6d:b9:12:e0:9d:
7a:72:3f:c6:a8:29:be:23:bb:56:f0:5e:3b:d1:ec:
2d:28:01:83:4a:4d:20:40:82:8f:6f:44:11:fb:ec:
8f:ed:62:34:cf:01:31:17:8a:83:7e:93:ea:53:1a:
85:c9:00:5e:c2:75:62:c1:c1:4b:19:70:ea:8b:5d:
87:e7:4b:57:7c:03:e0:15:59:c1:21:24:1c:82:32:
db:b7:86:18:20:9d:a5:8d:cf:34:83:ff:a0:be:a5:
96:24:d8:4a:62:fd:9b:2f:e2:0f:c9:17:f9:66:c1:
c8:b1:3b:bb:f5:89:0a:83:f6:7b:57:76:2b:85:39:
79:b7:5c:f2:d9:5b:b3:6f:f2:2e:33:09:07:2a:c7:
a1:0c:6b:9a:fb:42:7b:ae:82:cd:b0:1b:a8:d0:58:
14:5f:f4:98:fb:b0:ff:44:44:21:e8:ad:b2:a9:6e:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BA:D3:97:65:3A:6C:10:72:5C:DD:41:1F:FD:FD:C9:B1:85:19:9F
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39352e3231342e3231362e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.216.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:36:3d:98:00:98:0c:11:89:ec:7a:23:ea:09:36:49:71:66:
ac:b5:fb:45:47:51:57:d6:5c:7a:bd:5c:16:3a:1a:6b:5d:1d:
58:7d:cd:a7:33:bc:b2:4a:c6:9a:8c:ac:cb:ab:3d:6b:07:69:
2f:a5:2e:06:45:e4:26:e3:cc:e9:49:2c:91:69:5f:df:ed:ee:
0d:bd:b3:7f:19:da:8a:07:5f:43:4e:e8:89:da:54:bd:c9:6a:
9d:10:80:24:8b:4b:88:3d:89:15:1a:6d:63:e5:6a:6b:8f:be:
42:f7:43:78:86:9f:ef:03:a6:1f:a8:49:a4:e3:0c:4f:f8:3b:
03:93:fe:83:95:90:07:47:28:7c:9e:30:82:cb:4d:4f:90:28:
de:5e:22:76:6f:e7:31:69:e6:da:20:59:68:9c:47:b1:3e:c8:
59:b3:82:d9:7d:74:a7:15:4f:56:25:57:6a:a4:ad:b7:af:46:
9d:87:7b:54:19:40:67:05:53:44:fb:da:e2:67:ef:43:9b:00:
2c:fd:ce:6e:08:ba:60:b8:9e:7f:d1:54:67:b4:83:47:4f:cd:
30:39:a4:72:cc:a9:2c:64:c9:b0:14:f2:12:26:f2:ce:39:b2:
e3:e5:44:13:74:e1:da:8f:bb:72:87:f9:10:81:e4:d1:3b:93:
47:2c:f7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:13 2024 by rpki-client on console-ams.rpki-client.org