Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/wUXd29eciUEseNQCu3_7VKmttfs.roa
File: wUXd29eciUEseNQCu3_7VKmttfs.roa (raw, json)
Hash identifier: acEOuVKJzrtd8kqvEI9m9SeumHYHv/RGeCVgodwgqiY=
Subject key identifier: C1:45:DD:DB:D7:9C:89:41:2C:78:D4:02:BB:7F:FB:54:A9:AD:B5:FB
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 018572B432AEB134FE4F17CD923766E16AFA
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/wUXd29eciUEseNQCu3_7VKmttfs.roa
Signing time: Mon 02 Jan 2023 13:38:09 +0000
ROA not before: Mon 02 Jan 2023 13:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50795
IP address blocks: 185.83.82.0/23 maxlen: 23
185.83.80.0/22 maxlen: 22
185.83.80.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:32:ae:b1:34:fe:4f:17:cd:92:37:66:e1:6a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Jan 2 13:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c145dddbd79c89412c78d402bb7ffb54a9adb5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:9e:a9:8d:a5:e1:f2:ad:c7:a7:3d:ee:f2:
9f:e9:19:94:e4:25:d4:ae:97:34:95:3f:a2:99:bb:
41:bb:6b:e6:23:5e:d4:7b:9d:92:d1:f6:69:12:ae:
d7:ed:e5:1a:d6:f7:5d:27:40:25:03:71:01:74:a8:
6d:3e:9a:02:a8:4c:52:ab:15:9a:a5:8a:72:ae:c1:
a1:e8:29:8e:58:1e:79:35:02:27:33:ac:2f:70:18:
60:71:7d:51:fb:d7:7a:8c:be:a8:9c:6f:0f:eb:6d:
04:33:83:c3:27:67:34:de:b7:f4:09:6a:bc:4c:22:
ab:51:91:8c:0a:95:c2:94:0b:89:01:6c:81:e9:e8:
68:d7:bf:9d:73:b3:4c:ed:15:91:ab:d0:71:fa:5d:
19:ed:60:94:e3:04:b3:a9:20:1d:59:37:51:3b:b6:
04:0a:32:b6:4a:eb:dd:72:5a:e5:59:4c:47:f9:9b:
66:98:ec:b4:14:18:90:b3:ea:bb:cb:66:ee:93:40:
ec:46:40:17:90:df:33:a9:f7:06:c6:40:cf:da:5e:
ce:d6:90:6d:d3:a0:04:d9:3a:0f:f1:ec:62:7c:75:
dc:76:1a:da:8b:8c:16:ed:0e:b1:62:82:a9:14:53:
ff:82:27:42:ff:d2:7d:a5:df:48:78:c0:c6:d5:80:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:45:DD:DB:D7:9C:89:41:2C:78:D4:02:BB:7F:FB:54:A9:AD:B5:FB
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/wUXd29eciUEseNQCu3_7VKmttfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.80.0/22
Signature Algorithm: sha256WithRSAEncryption
55:6c:fd:ae:d1:15:cc:39:a9:10:c0:24:e7:e9:5b:3e:cd:2a:
f5:b4:06:ea:95:66:2b:72:b9:ff:62:44:68:9d:32:fe:b6:3e:
c8:03:26:7c:ab:30:ac:d5:79:a3:f2:c2:b8:45:1c:93:25:b8:
ac:47:29:41:2a:83:2c:3b:4d:58:68:24:42:50:8a:9f:8e:bb:
06:ff:bb:ec:73:6e:c2:b6:b4:77:55:5b:fd:b6:54:2a:f9:ea:
a6:51:26:94:cb:69:46:45:91:92:15:73:ce:50:50:d3:25:5c:
b6:8c:36:88:1c:33:dd:3d:b7:ae:51:0f:f5:67:28:ea:96:fb:
26:c4:31:20:0e:aa:6a:f5:eb:e3:82:2b:97:05:db:c2:87:00:
26:38:04:b6:f7:2c:46:a2:df:c6:54:0e:04:93:53:be:71:28:
bb:68:6b:e3:4f:8b:8a:05:0d:0c:c5:8b:b3:ad:95:fd:58:8d:
c0:a7:b6:30:94:38:61:f3:83:40:59:57:0f:f7:ae:0b:e1:07:
89:a4:cd:bc:f5:5f:98:75:08:43:68:cc:71:e4:ab:ac:8e:f8:
d4:ee:11:83:14:e7:43:87:5a:e3:ce:cb:83:da:40:7b:08:ac:
fe:1d:44:9b:ba:7f:cb:37:a3:09:bf:a1:ad:af:11:7e:59:97:
96:77:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:14 2025 by rpki-client