Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/UppbAIJ4QZF0ErROy-fapykEI5k.roa
File: UppbAIJ4QZF0ErROy-fapykEI5k.roa (raw, json)
Hash identifier: Q/LgSTCkK2Hv4oEd/TQ8crJwyA872bLK+3aXwLqsphs=
Subject key identifier: 52:9A:5B:00:82:78:41:91:74:12:B4:4E:CB:E7:DA:A7:29:04:23:99
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 018571F124CE6E3FAD400314D80F19E5BD53
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/UppbAIJ4QZF0ErROy-fapykEI5k.roa
Signing time: Mon 02 Jan 2023 10:05:07 +0000
ROA not before: Mon 02 Jan 2023 10:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201403
IP address blocks: 185.49.51.0/24 maxlen: 24
185.49.50.0/24 maxlen: 24
2a04:b700:185d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:24:ce:6e:3f:ad:40:03:14:d8:0f:19:e5:bd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Jan 2 10:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=529a5b00827841917412b44ecbe7daa729042399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:10:45:b5:b5:ad:3b:75:83:e8:2c:2c:b6:
d0:60:62:c7:92:7a:de:2b:07:64:44:1b:30:62:1b:
92:82:d7:18:11:c2:39:87:8d:ee:6e:2e:c4:d4:d2:
36:98:7c:5b:eb:77:70:75:be:6e:81:4f:20:ff:45:
23:e5:03:b7:4e:ab:2e:69:ac:21:ca:ad:14:27:f8:
d9:8e:4a:5c:78:1f:2f:c6:3b:1e:d5:35:88:91:49:
42:a4:94:02:d1:9d:1d:f6:07:28:64:49:11:95:df:
0c:a0:2b:1e:f6:a3:63:db:e4:8d:f5:38:4b:62:21:
f1:14:68:2d:5d:58:00:21:2e:94:30:42:4d:02:dc:
c1:c3:61:4b:38:54:4d:20:90:17:61:ba:b9:00:be:
2a:2f:70:45:70:d8:61:ab:7a:65:a9:28:7e:28:44:
99:5d:c5:0d:54:ce:7d:79:54:74:48:7b:10:14:6f:
19:0a:41:1a:80:4f:da:34:f8:2c:60:82:9f:da:97:
50:22:d8:70:6a:bb:88:ad:32:f5:8f:a7:13:69:ae:
92:23:6b:e0:ea:43:c9:f7:8f:78:21:2d:5b:1a:50:
fc:f3:fd:36:c9:bc:fa:7f:18:04:12:cd:65:a6:ba:
b6:a5:d5:3e:90:11:9b:bb:c3:34:72:ce:70:06:52:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9A:5B:00:82:78:41:91:74:12:B4:4E:CB:E7:DA:A7:29:04:23:99
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/UppbAIJ4QZF0ErROy-fapykEI5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.50.0/23
IPv6:
2a04:b700:185d::/48
Signature Algorithm: sha256WithRSAEncryption
57:f0:eb:07:98:a8:f9:48:80:e0:3e:92:c2:65:c9:fd:06:d3:
1b:ab:05:a1:65:06:83:da:87:ed:9b:e3:ff:5d:cc:3d:07:6a:
66:13:96:ac:2a:17:fd:47:a2:e0:f5:6e:78:4f:bd:73:96:f9:
e7:63:5a:71:12:3a:bb:c3:a2:57:88:b3:44:a5:3d:dd:f9:e3:
72:d2:fc:cd:96:ce:f7:4a:74:4e:4d:c5:85:59:cf:e8:bd:03:
f2:5b:41:38:01:c5:15:9f:56:95:31:2c:fb:e6:a2:22:17:aa:
4d:49:f2:40:33:b0:c8:f0:ae:03:0f:4a:c6:15:33:ef:da:69:
96:ae:81:51:a4:74:9c:54:7f:6e:8e:dc:e2:8e:56:c5:50:b9:
ae:7f:2a:77:7e:a3:13:5c:ff:b7:e1:dd:58:a2:d1:67:b9:24:
c4:d2:bc:15:23:e8:70:70:a6:3f:ae:a5:85:8d:11:94:60:f0:
d9:e4:29:10:a4:83:d2:79:c5:aa:ec:4c:e2:90:7c:33:63:19:
8b:81:4e:30:87:21:4a:64:9e:30:92:2d:b1:89:5f:c9:3f:37:
ad:9c:70:0e:e3:6a:f5:29:ef:a6:5b:7c:45:6d:49:9c:49:6b:
8d:0f:ae:f0:83:82:b0:a1:64:37:44:f0:d4:68:dd:b1:97:60:
5b:c8:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:27 2025 by rpki-client