Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/uOVTgLD9vlAnSsDr92X1SYka_Cg.roa
File: uOVTgLD9vlAnSsDr92X1SYka_Cg.roa (raw, json)
Hash identifier: AjDjpnluZkXFVfCKEbYw4C6zKsvARhT8l+X6X2nyNx8=
Subject key identifier: B8:E5:53:80:B0:FD:BE:50:27:4A:C0:EB:F7:65:F5:49:89:1A:FC:28
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 05975B30
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/uOVTgLD9vlAnSsDr92X1SYka_Cg.roa
Signing time: Sat 01 Jan 2022 15:02:08 +0000
ROA not before: Sat 01 Jan 2022 15:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59842
IP address blocks: 45.82.210.0/23 maxlen: 23
45.82.208.0/22 maxlen: 22
45.82.208.0/23 maxlen: 23
45.82.208.0/24 maxlen: 24
45.82.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93805360 (0x5975b30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Jan 1 15:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8e55380b0fdbe50274ac0ebf765f549891afc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:65:e2:d5:59:7b:37:74:0b:64:9d:1b:af:
78:dd:5a:4e:21:a0:ec:29:b8:0e:b5:04:40:58:2a:
1b:a7:c0:3c:95:30:d1:7d:b2:51:22:72:49:f2:cd:
6a:28:90:ba:24:a7:20:cc:c1:57:7b:92:ae:fd:a5:
cd:00:d1:1c:22:e1:1d:0b:37:d1:69:0c:fe:56:e8:
03:3a:7e:ec:46:a3:1c:19:da:7f:dc:c9:4a:86:9d:
6b:73:3b:f3:1c:40:d5:cb:da:8e:8f:8a:ff:c9:23:
33:bc:bd:e3:27:6b:3f:47:3b:64:16:1d:00:27:05:
76:45:0b:86:fa:e9:30:9f:18:fa:d0:2f:41:60:38:
89:09:c4:16:ae:28:e7:cd:b0:e6:23:7b:de:81:eb:
23:85:62:a7:40:15:88:c1:a6:5f:34:9a:db:b3:d1:
c3:b2:d5:ce:eb:30:dc:05:99:06:2e:1e:60:3e:35:
6f:7a:3f:f6:56:79:d2:0b:85:d8:2b:fa:1f:08:28:
54:6d:2f:db:05:5a:7f:d4:b4:7c:11:c9:4c:c7:c1:
9f:d9:ff:e1:86:7e:68:2c:60:a4:fc:15:fd:2c:22:
2f:48:6e:cc:c2:49:d9:91:ca:1f:76:97:25:f4:0d:
f5:e2:64:b2:ad:e7:38:c3:6b:26:60:2e:57:11:3b:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E5:53:80:B0:FD:BE:50:27:4A:C0:EB:F7:65:F5:49:89:1A:FC:28
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/uOVTgLD9vlAnSsDr92X1SYka_Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.208.0/22
Signature Algorithm: sha256WithRSAEncryption
00:20:f9:3c:dc:44:24:dd:16:89:16:84:22:06:e2:8b:15:5f:
00:9e:1c:99:f6:f1:2c:c9:f4:8f:b6:56:88:e4:e6:a1:17:3c:
19:ab:00:22:87:fd:1a:a8:1c:0f:af:dc:10:d2:e7:98:f7:ed:
5b:1c:12:22:16:e0:c2:fc:9e:10:e7:d4:fb:e7:30:df:58:48:
f5:74:32:8e:95:f6:b6:85:72:be:8e:06:13:35:14:14:4c:bb:
24:09:8c:d8:61:dd:14:93:df:65:5b:0e:cc:e2:5a:c9:35:5e:
e6:24:6c:f5:fb:98:c1:7d:a1:4d:d2:8b:89:bd:df:bd:ca:a4:
66:b8:83:59:c4:dc:01:77:0f:80:d0:3f:57:69:7e:19:f3:91:
4a:4a:8f:6a:e6:94:49:8e:02:6b:79:37:84:5a:87:7c:9b:17:
0e:ef:36:f1:c3:45:0b:25:9c:73:78:2d:23:8c:f0:2d:2e:c7:
5d:68:cc:31:88:55:a2:0e:f6:a8:bb:4a:0a:e1:3b:c6:d8:14:
2b:1b:04:b7:58:bf:29:b3:4e:7b:85:0b:59:e5:da:11:16:9b:
c6:2c:e8:70:00:15:b8:39:d3:80:9b:a2:0a:74:32:ca:e1:b4:
38:84:6a:9a:c8:cf:9d:47:a1:63:6a:51:00:b9:5d:5c:9b:2a:
84:f0:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:27:09 2025 by rpki-client