Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e302e302f32342d3234203d3e2036383439.roa
File: 33372e35322e302e302f32342d3234203d3e2036383439.roa (raw, json)
Hash identifier: td2R/e9nEHxIiD02wsePaH5PhP4ejvU94igvcN9OgOs=
Subject key identifier: F7:28:78:3B:77:18:95:CD:16:63:EC:5C:A3:66:CA:03:15:D3:61:22
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7AC1C70B03C2DCFA932BA3050AD728AF9B9BDB16
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e302e302f32342d3234203d3e2036383439.roa
Signing time: Tue 20 Feb 2024 14:36:11 +0000
ROA not before: Tue 20 Feb 2024 14:31:11 +0000
ROA not after: Tue 18 Feb 2025 14:36:11 +0000
asID: 6849
IP address blocks: 37.52.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c1:c7:0b:03:c2:dc:fa:93:2b:a3:05:0a:d7:28:af:9b:9b:db:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 20 14:31:11 2024 GMT
Not After : Feb 18 14:36:11 2025 GMT
Subject: CN=F728783B771895CD1663EC5CA366CA0315D36122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:a1:3f:8c:92:7b:fa:59:08:03:f7:ee:c0:
78:03:8f:bc:7b:58:57:89:80:f5:81:94:81:1d:d8:
18:48:22:bb:04:c0:f0:2f:f4:a6:30:89:30:06:ef:
08:46:be:0b:46:32:06:cb:b1:35:3b:30:53:10:1d:
d6:bd:be:b2:42:a0:e7:e2:92:fc:df:2b:fb:00:e2:
00:d8:00:03:59:ee:f0:b0:85:49:60:c6:3a:67:69:
10:39:0e:e8:23:54:89:37:de:72:bf:08:71:68:20:
df:fa:04:77:26:79:50:e7:db:06:be:77:8d:ce:18:
8d:81:b1:a7:bd:4e:b1:af:dd:48:ed:69:a7:c0:e4:
73:69:87:f2:65:11:5a:6f:1f:ef:5a:82:24:90:d7:
58:be:66:5c:a2:98:f4:2a:e0:e0:bd:1d:d8:89:52:
4f:ff:65:e4:c8:5a:b5:7e:8d:df:9c:f5:4b:2c:fe:
ad:90:3d:63:a9:1b:23:e6:f9:b1:17:02:51:d8:45:
c2:99:7f:bf:e9:df:e6:2c:c8:c5:1f:ee:c4:cc:64:
0e:d5:cb:fa:df:e3:b9:5e:fa:ef:7f:cb:0b:e6:2d:
53:e7:0d:26:73:2c:c6:8a:fb:3f:33:97:0d:43:22:
29:87:c7:e7:dc:db:cc:0a:06:21:0d:3f:60:6c:96:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:28:78:3B:77:18:95:CD:16:63:EC:5C:A3:66:CA:03:15:D3:61:22
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/33372e35322e302e302f32342d3234203d3e2036383439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.52.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6f:3d:2c:5b:4d:8f:d3:eb:bd:d1:dc:07:71:c7:a2:48:b2:
30:bd:ff:f6:d3:9c:2a:84:12:57:40:2d:83:63:ea:7b:f3:2c:
70:e5:d3:9e:1f:c4:b9:8b:e6:5e:4a:57:d5:85:2e:61:f6:11:
89:5f:4c:10:f4:1c:94:86:8f:53:af:5f:68:38:2d:16:c0:cc:
5a:2f:da:12:db:1a:b5:4c:d0:03:10:10:d3:b8:3a:de:70:70:
d5:84:dd:cf:a5:0b:bb:59:d3:c9:ae:75:b8:d8:73:d6:ec:ca:
7f:7f:7b:fe:9a:1d:c2:21:5e:ae:85:24:39:46:80:e1:8b:f4:
cc:27:97:c6:a9:f6:d5:81:96:7c:1a:85:68:ca:5d:af:b2:8c:
6b:35:48:a6:74:66:5e:93:53:98:01:36:df:ac:1a:a1:d7:aa:
8a:e1:84:47:aa:15:e0:76:85:28:aa:f2:d2:b3:58:a6:91:b5:
9f:70:e5:4a:b8:a7:8c:d6:cc:78:4b:58:b1:18:56:b6:be:83:
e3:31:57:38:66:06:63:c6:05:ac:7a:3a:67:33:fe:65:a9:55:
14:77:74:31:81:95:f6:f6:3f:29:fc:3e:2f:86:bb:b7:e3:d5:
b4:86:13:3d:2f:50:3d:d6:cd:fe:e3:87:57:24:98:a0:c4:5c:
97:f9:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:12 2025 by rpki-client