Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3138342e302f32312d3234203d3e20383334.roa
File: 39312e3132342e3138342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: yVrQ+kHBrdrMU4WU/rhIdLjVGZLP6mPEclnhR/qTZQU=
Subject key identifier: 8E:CC:29:BB:43:00:5A:6F:25:9A:19:65:FF:04:BF:56:F3:A1:F5:7E
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 6DF4293A037747C5667C7E7F95AE988445749B25
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3138342e302f32312d3234203d3e20383334.roa
Signing time: Thu 22 Feb 2024 06:40:39 +0000
ROA not before: Thu 22 Feb 2024 06:35:39 +0000
ROA not after: Thu 20 Feb 2025 06:40:39 +0000
asID: 834
IP address blocks: 91.124.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f4:29:3a:03:77:47:c5:66:7c:7e:7f:95:ae:98:84:45:74:9b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 22 06:35:39 2024 GMT
Not After : Feb 20 06:40:39 2025 GMT
Subject: CN=8ECC29BB43005A6F259A1965FF04BF56F3A1F57E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:6a:14:fd:e7:13:f9:d7:b1:28:cc:c7:1d:
50:37:b3:61:96:3b:ac:2f:5f:b4:5a:f5:3c:f0:0a:
a2:ec:b1:5b:4c:1b:ff:95:e9:e7:1e:cf:6d:fe:66:
4c:91:1d:7c:89:13:db:f0:50:38:7e:0a:10:65:fc:
a8:cb:59:89:58:ca:70:88:f4:7b:b4:fc:4c:05:db:
19:fc:79:d3:87:9b:35:4e:fb:ce:70:0e:c5:88:a0:
8a:b9:84:e5:5f:6c:d6:3e:c0:26:07:f8:67:98:67:
cc:96:89:43:7e:b4:43:70:1c:5e:f2:7e:30:02:5d:
2d:b8:72:6a:5b:95:b1:92:0b:53:bd:c4:8c:31:b2:
b4:f3:14:2f:8f:d4:dc:c5:58:eb:59:10:a4:26:21:
86:ca:6b:08:25:9c:0a:f0:eb:f1:14:2b:a1:ec:81:
09:59:c2:1d:5c:36:dc:a9:f5:83:b4:a9:cc:81:88:
77:ec:c3:35:fb:5e:c6:7a:81:14:88:9a:b8:2a:49:
02:e9:47:01:1f:0a:4d:99:41:04:31:eb:8e:a1:ba:
b7:69:3b:17:ef:12:6e:67:71:aa:05:55:91:3b:50:
d6:44:5b:c9:7f:f3:32:30:8c:c7:ab:33:be:11:38:
b9:46:cc:28:d0:81:42:98:f2:18:f5:d2:85:04:2e:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CC:29:BB:43:00:5A:6F:25:9A:19:65:FF:04:BF:56:F3:A1:F5:7E
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/39312e3132342e3138342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.184.0/21
Signature Algorithm: sha256WithRSAEncryption
43:85:cb:b1:9f:4f:5a:44:04:81:c5:81:5d:fb:7a:d6:a3:99:
10:a1:4b:d4:81:ba:02:df:ca:96:d5:d9:7f:ba:0e:c4:70:6b:
ce:2e:86:b1:9a:ae:ec:5d:71:2d:3e:e3:bc:e6:10:e7:d5:44:
57:22:94:e4:b5:a1:23:b9:0c:7c:91:d5:7d:0f:53:43:fe:17:
03:9c:f0:9c:2c:c0:f4:ed:22:10:4e:2f:01:a5:3b:e3:06:3e:
8c:2e:02:9c:ca:1b:83:86:ee:bf:f7:67:72:a7:11:b8:9b:97:
26:39:71:27:bd:6c:0c:59:61:6e:c4:6f:55:a0:30:41:c8:d6:
f1:9a:c4:05:ee:e5:87:a0:c7:6c:76:48:ed:1b:87:77:5f:d0:
a6:68:f0:d0:e4:a2:32:de:9e:8e:9f:f4:95:e3:98:85:93:22:
a2:20:03:6d:80:55:91:01:a7:63:d7:9d:6e:9a:55:f8:df:6f:
78:f3:20:a6:5d:11:23:56:93:74:bc:28:e9:e8:7e:e0:50:f3:
cf:46:4d:72:70:13:db:72:bb:76:17:b7:b3:14:72:81:3a:f0:
30:2b:c3:a9:05:fa:a5:c0:55:c5:50:08:64:0b:aa:f1:34:ca:
9d:e9:ee:98:5c:a2:67:94:5d:3e:92:85:e4:c3:2a:99:38:5b:
2f:44:45:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:14 2025 by rpki-client