Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/4dULqj9IkSIAaXKbQQrxjawkDDs.roa
File: 4dULqj9IkSIAaXKbQQrxjawkDDs.roa (raw, json)
Hash identifier: DHMSr/NH+EmlKNzFZDnNjeT8Jo0E1tS155tOiLszKA8=
Subject key identifier: E1:D5:0B:AA:3F:48:91:22:00:69:72:9B:41:0A:F1:8D:AC:24:0C:3B
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 018474DEB7453930917366731A3DC88751A6
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/4dULqj9IkSIAaXKbQQrxjawkDDs.roa
Signing time: Mon 14 Nov 2022 06:41:03 +0000
ROA not before: Mon 14 Nov 2022 06:41:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206065
IP address blocks: 185.83.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:74:de:b7:45:39:30:91:73:66:73:1a:3d:c8:87:51:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: Nov 14 06:41:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1d50baa3f4891220069729b410af18dac240c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:77:f4:ee:a2:a1:bf:f5:32:f7:2d:40:c5:
11:61:27:00:77:16:f6:3e:47:96:bd:d9:53:e2:f3:
da:e9:3b:f0:39:fc:d5:54:d5:14:be:45:45:cb:65:
af:ab:5e:48:0b:9c:47:73:63:e6:41:a2:fc:96:27:
06:3e:a6:c0:8a:dd:6c:84:c0:be:a2:95:f8:bf:3f:
c3:29:9d:c4:98:2d:12:74:65:4c:29:00:04:a5:3c:
1b:97:7d:9a:6b:fd:16:95:92:9b:fd:b6:07:ff:e5:
3a:23:96:c6:fd:db:00:3a:08:99:9d:19:6a:6b:a5:
d9:54:15:88:70:9c:b9:69:15:06:08:7b:ce:c4:91:
95:90:0f:31:eb:33:8b:4e:b3:c3:a3:1a:f7:0f:d4:
d8:b4:e4:16:d8:64:31:7c:72:a0:bb:e3:52:40:1c:
6a:f6:07:dd:98:0a:11:a9:db:f1:91:35:fb:81:8a:
27:df:73:1d:b1:34:81:cc:f6:62:02:14:83:3e:30:
50:cf:3c:fe:88:cc:aa:f5:c5:cb:65:f0:72:15:45:
e9:7c:76:c6:ef:69:2a:9b:96:90:9c:93:ab:69:49:
f7:d3:e0:6a:21:12:ea:cb:b6:a9:6f:ae:09:ba:74:
47:ab:5c:8a:23:70:4a:3d:bc:3a:ac:cd:88:e0:d8:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D5:0B:AA:3F:48:91:22:00:69:72:9B:41:0A:F1:8D:AC:24:0C:3B
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/4dULqj9IkSIAaXKbQQrxjawkDDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cb:84:1c:a2:90:b4:fd:37:99:ea:14:cd:5b:34:df:18:94:
ab:fb:5b:7e:bd:51:72:ff:81:be:af:80:1a:1c:8a:56:63:00:
33:fa:57:34:12:f6:fa:d1:6f:40:26:8c:af:47:ea:2f:65:e8:
75:67:24:37:3c:cd:ee:63:68:a4:1f:56:32:73:c4:dd:17:3b:
7a:d0:a0:63:68:53:74:52:22:32:47:55:a6:fd:e9:b6:0e:2a:
26:b2:3b:03:95:a3:a1:0a:11:bf:06:60:ae:a1:fb:b3:33:50:
62:a6:b5:d9:30:d7:98:e1:f7:6e:6d:08:4a:25:cc:40:05:1f:
03:79:12:ce:b6:1b:0c:c6:b0:69:04:f6:39:98:90:c4:d0:ad:
a3:ca:73:96:3a:07:3e:94:5f:5b:25:30:fa:99:28:81:6d:b6:
cd:47:ab:c5:12:ae:44:5c:f7:4a:53:18:c6:e3:cd:6d:bf:12:
b4:2a:1f:e6:ed:3c:84:16:1a:51:d5:86:01:23:74:fa:0c:00:
17:38:a5:62:5a:28:48:e9:de:6d:99:6f:bd:99:ed:6b:87:69:
df:b9:28:e0:d0:72:0d:5f:e1:fc:41:f3:de:31:13:e1:b8:7a:
cb:5b:f0:6a:94:ec:24:7b:2d:de:a7:13:5d:4d:80:96:80:1c:
44:5c:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org