Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UhIFconUl6AGUfrnCImFF3FC41A.roa
File: UhIFconUl6AGUfrnCImFF3FC41A.roa (raw, json)
Hash identifier: zr2qjmag/kcXecL04U34jZGnjq8W/xdbzPHy1BzkocY=
Subject key identifier: 52:12:05:72:89:D4:97:A0:06:51:FA:E7:08:89:85:17:71:42:E3:50
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018C96B7D2340A50E6B6F6B5902A3583F580
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UhIFconUl6AGUfrnCImFF3FC41A.roa
Signing time: Sat 23 Dec 2023 12:47:58 +0000
ROA not before: Sat 23 Dec 2023 12:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149457
IP address blocks: 185.233.17.0/24 maxlen: 24
194.76.0.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
85.92.114.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:b7:d2:34:0a:50:e6:b6:f6:b5:90:2a:35:83:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Dec 23 12:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5212057289d497a00651fae7088985177142e350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c0:42:0a:81:1e:81:10:c5:d8:e9:26:8a:54:
f8:92:04:51:05:f6:6a:60:69:57:cb:b0:d6:9c:9d:
c0:d4:61:69:37:56:24:f8:12:72:ea:8b:7c:f5:db:
b8:18:47:b4:8e:16:22:53:b0:b0:b0:85:9d:d2:f6:
45:61:02:d6:0f:64:b4:dc:7d:eb:8c:e7:af:36:63:
e8:14:26:ab:47:58:93:40:47:62:7b:3b:4a:68:fd:
c1:bb:09:82:29:4b:4e:1d:50:86:e7:fe:a1:01:ee:
57:d9:47:7c:35:97:13:d0:16:34:56:76:71:6a:03:
a0:ae:52:06:1f:e9:73:4e:de:72:d7:2f:e6:3c:b0:
9f:08:62:fb:d9:f3:bb:5e:0d:6d:98:bf:f8:4e:66:
a2:65:ff:80:a0:f3:01:b6:64:c9:12:af:fd:ab:d0:
17:37:c0:bc:fd:69:80:a7:f4:ba:78:57:c0:f6:a4:
9e:f2:ba:be:e0:fb:76:e8:c6:00:2e:8d:6b:e3:73:
1e:86:52:c7:31:c3:ea:b7:eb:bc:e0:12:7e:d8:47:
46:11:09:84:ed:ca:c7:d1:fc:27:ea:6d:ec:c2:09:
dc:6a:08:96:99:6e:ae:20:09:ab:25:e1:e9:08:b3:
93:11:9e:c7:97:b6:06:7b:d3:91:fd:c9:33:8d:f0:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:12:05:72:89:D4:97:A0:06:51:FA:E7:08:89:85:17:71:42:E3:50
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/UhIFconUl6AGUfrnCImFF3FC41A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.114.0/24
185.233.17.0-185.233.18.255
193.107.218.0/24
194.76.0.0/24
Signature Algorithm: sha256WithRSAEncryption
37:eb:32:2f:81:26:7a:95:23:c1:bf:1b:5e:14:c9:4d:8d:97:
ac:eb:fe:3b:91:c7:bb:d3:a1:df:c9:0b:4b:d6:d0:3a:c9:90:
b6:91:73:1c:4c:04:84:56:79:b0:50:99:64:5d:6e:dd:92:f8:
1e:e1:83:9e:73:1e:60:29:f8:97:9d:1a:05:0a:09:b4:e8:91:
c4:ed:25:97:0d:cf:44:75:57:60:3a:cc:1e:ac:dd:2c:f6:b5:
5b:ff:1a:10:7e:ed:db:9e:a1:9e:ed:27:ac:38:9e:d2:53:b7:
13:93:41:bd:3a:01:73:23:0d:d0:3c:6e:05:ee:ab:c9:f8:ac:
17:8d:ff:57:54:ba:a2:7e:28:cc:52:03:4f:86:69:24:ad:1a:
9e:d6:0f:d8:b8:4b:fd:9e:11:37:93:e2:56:25:2c:29:52:b3:
59:5e:61:dd:d0:22:a6:cb:77:ce:ce:9f:a6:e7:c3:b1:18:d1:
b0:ed:4b:08:31:8e:b7:82:24:c6:10:6b:7f:53:af:13:fb:a9:
1d:ba:3c:ac:a5:10:fa:05:99:2f:59:59:3d:c1:b7:1a:3e:dd:
03:f2:b4:3f:31:99:f7:d4:1c:e9:da:52:bf:cc:b7:16:ac:fc:
71:b9:5b:73:ed:bf:d9:ff:1e:20:70:8d:9d:1d:4d:98:96:a4:
a8:f6:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:51 2025 by rpki-client