Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/F5zP6dbkGiXRDue7DrYiV1OSKwI.roa
File: F5zP6dbkGiXRDue7DrYiV1OSKwI.roa (raw, json)
Hash identifier: 0KCJ+GgUhbznghmi8LSuv8lpOzKgeoXFMXPwsSNLZKM=
Subject key identifier: 17:9C:CF:E9:D6:E4:1A:25:D1:0E:E7:BB:0E:B6:22:57:53:92:2B:02
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 0182BB14245F3E77393FAC3BB4CAB218B2B3
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/F5zP6dbkGiXRDue7DrYiV1OSKwI.roa
Signing time: Sat 20 Aug 2022 11:47:15 +0000
ROA not before: Sat 20 Aug 2022 11:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15828
IP address blocks: 185.83.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bb:14:24:5f:3e:77:39:3f:ac:3b:b4:ca:b2:18:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: Aug 20 11:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=179ccfe9d6e41a25d10ee7bb0eb6225753922b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:96:77:fa:3c:b0:fa:69:c8:f6:a1:7a:a4:
e2:09:98:ef:4b:5e:59:18:f9:84:0f:2d:ea:6e:4b:
f8:38:8d:f5:b1:42:21:26:ee:4f:cb:f7:dd:46:78:
12:8a:ac:88:a2:c1:3e:2c:5b:99:a2:7c:ed:fa:71:
22:3b:62:9b:16:43:68:91:e5:34:6a:e5:93:e8:0b:
2a:8b:1e:c2:9a:e4:ac:38:47:59:59:f5:c9:b5:34:
04:e4:66:37:c0:5a:47:66:de:73:f5:d5:c4:22:d1:
d0:a0:31:82:da:0c:6a:26:86:98:e4:be:be:0d:c5:
00:3a:18:15:96:87:2c:71:44:67:22:6c:50:11:75:
15:5f:0e:8d:27:31:a7:3c:56:51:76:3a:ad:16:19:
a0:0b:b0:dc:da:20:e8:d8:e4:35:fb:ae:c2:7c:f3:
9a:47:5f:df:df:68:31:26:6b:83:2c:7c:60:3d:ad:
e4:ed:db:fc:74:70:96:79:42:af:78:74:de:a3:b8:
da:ad:27:0a:96:86:5c:1a:aa:bc:49:10:19:da:a3:
19:86:84:32:6e:d3:a4:45:2d:76:64:9e:d6:11:45:
20:c9:5a:f1:05:f2:bc:63:43:e4:0b:0a:39:33:63:
b6:42:e4:80:89:69:3e:c4:b9:b7:75:27:9b:a5:7a:
4c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9C:CF:E9:D6:E4:1A:25:D1:0E:E7:BB:0E:B6:22:57:53:92:2B:02
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/F5zP6dbkGiXRDue7DrYiV1OSKwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d5:f6:26:b4:93:80:56:54:2b:94:f0:55:d3:aa:91:65:2d:
da:c2:b2:27:85:85:74:1c:3f:c9:77:3f:28:7a:57:13:a8:cb:
1a:d1:0c:1f:c6:ea:7b:3a:46:75:fd:47:9d:d2:a8:10:7d:21:
1f:52:ee:06:5c:8e:b6:2f:8f:e3:4d:5e:46:e7:02:7e:20:bb:
82:94:12:e3:98:42:68:f5:df:30:02:51:f8:40:66:4d:91:11:
d9:62:d0:f5:ff:13:a5:10:ef:09:26:91:d2:90:dd:e5:0f:31:
30:f2:d4:3f:79:d0:23:91:ed:01:26:ae:67:30:84:43:58:dd:
02:5b:1a:e1:ae:21:75:37:f5:61:1b:40:d8:2e:70:1e:b0:c2:
9b:a6:2a:9f:1d:b7:22:d7:ef:3e:4b:f4:29:62:de:51:ec:7b:
db:5a:d5:da:a6:ba:07:0b:af:3e:e2:c9:b5:dd:0f:67:41:92:
22:fd:3d:58:00:17:60:bf:6a:01:9e:32:18:d7:16:0d:fe:ff:
b2:ec:39:5f:51:61:73:cb:c2:a9:6e:ea:ab:36:88:99:3f:2b:
5b:b2:0e:03:ca:8a:1b:47:83:ee:67:46:fb:17:a3:ec:6f:18:
ff:f9:8b:11:60:c2:f2:e2:37:d4:95:da:cc:58:60:00:29:86:
9e:66:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:38 2023 by rpki-client on console-ams.rpki-client.org