Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/P4-MUCJGmW4lkOw3e59zU5tHBZQ.roa
File: P4-MUCJGmW4lkOw3e59zU5tHBZQ.roa (raw, json)
Hash identifier: 1/yz/+xTBRY2CRWp5gz+y2t79JqIC8V6d1tIttSHP48=
Subject key identifier: 3F:8F:8C:50:22:46:99:6E:25:90:EC:37:7B:9F:73:53:9B:47:05:94
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 44883EBC
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/P4-MUCJGmW4lkOw3e59zU5tHBZQ.roa
Signing time: Sat 01 Jan 2022 03:58:35 +0000
ROA not before: Sat 01 Jan 2022 03:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39694
IP address blocks: 83.206.141.0/24 maxlen: 24
83.206.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149779644 (0x44883ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f8f8c502246996e2590ec377b9f73539b470594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b4:5a:03:71:43:3e:09:0a:2a:7f:64:17:e6:
c1:4b:c2:18:c8:c8:fa:ac:71:c9:f6:3a:f3:0e:b5:
49:7f:3c:df:17:4f:1c:e2:8d:94:28:9f:dc:1d:1b:
e5:1f:b2:fd:3f:74:59:33:7e:bf:2d:be:ab:81:73:
0c:cb:a7:5f:75:f0:1f:45:c7:e3:c1:64:bc:5e:f4:
76:3c:f9:50:f0:84:dd:61:c0:23:86:95:00:2b:5c:
3b:e7:02:96:ad:27:ee:0f:c3:6b:ea:7b:4a:e8:6c:
b6:e8:c4:6d:6d:80:f7:e7:bc:b0:cb:3a:f0:87:64:
39:99:19:f9:58:72:ff:d6:0c:cb:94:48:fa:33:bd:
8a:7f:da:49:85:d7:2a:4d:c8:cb:b9:23:00:7d:77:
b0:77:29:15:88:a4:7b:84:2b:9a:04:6d:81:c6:3b:
a3:46:ce:8f:5d:7c:54:1f:4d:b4:ff:fd:cc:d6:b0:
35:83:39:02:e1:cd:06:bc:eb:6b:fb:76:f9:30:49:
11:d0:51:f7:67:00:70:3c:09:4f:50:95:37:46:56:
f7:5f:d8:e8:7b:96:67:df:f3:1a:26:ac:48:52:47:
78:d5:8a:e5:ac:8a:11:b6:95:7b:8c:ba:e6:9c:fa:
7e:f9:cc:ce:f0:f8:3d:d7:03:70:cb:32:c2:ad:e0:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:8C:50:22:46:99:6E:25:90:EC:37:7B:9F:73:53:9B:47:05:94
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/P4-MUCJGmW4lkOw3e59zU5tHBZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.206.141.0/24
83.206.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:96:1b:eb:9f:99:e7:bc:d7:8f:e1:eb:ee:85:cb:56:00:33:
11:53:a5:42:7a:67:eb:09:ed:ba:d3:7a:bf:15:72:fe:75:3d:
d1:5b:5f:18:75:db:fb:99:6f:5f:7e:86:57:b1:ba:69:0e:3b:
99:c9:9a:14:66:22:2f:8e:35:f8:9c:d8:0c:c4:18:b2:15:0d:
9b:36:a7:df:5a:24:eb:f8:51:0e:87:fd:da:be:c4:2d:51:d8:
56:b9:14:7d:ab:6e:4e:8e:92:9d:25:17:28:9c:85:1c:c7:ff:
b0:bd:ed:a5:c7:c5:45:13:bb:5e:5c:d6:85:58:92:ea:57:63:
a2:0a:7c:6f:f0:96:94:b5:7f:e6:26:ee:4e:7b:9d:5d:15:78:
f3:8c:23:57:8b:7e:0b:ce:25:ef:2b:5a:15:b1:79:60:37:80:
96:46:be:ea:30:e1:2e:8a:5a:5d:71:6a:e8:b0:d9:3e:87:46:
30:b8:18:ed:d8:a8:b0:f6:5b:0d:b3:fc:85:62:b5:ce:cc:4a:
8f:10:3c:3c:f8:be:5e:c6:28:6b:91:dc:45:24:f4:b3:c7:d4:
1d:34:a7:30:45:ef:5d:a1:53:91:48:77:d7:d3:91:97:4d:b4:
29:1d:82:ef:06:7a:36:eb:35:c9:ed:f8:3c:ff:80:da:13:3d:
0d:6f:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org