Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/T5wgjPMVdeomNdF_UuTnB9BZidI.roa
File: T5wgjPMVdeomNdF_UuTnB9BZidI.roa (raw, json)
Hash identifier: xsQ809m69s88zrgMJSZjCjY3AFMrS4s0B/ilLmxOKeY=
Subject key identifier: 4F:9C:20:8C:F3:15:75:EA:26:35:D1:7F:52:E4:E7:07:D0:59:89:D2
Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial: 018573561E2DD529F72B649E358988990C13
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/T5wgjPMVdeomNdF_UuTnB9BZidI.roa
Signing time: Mon 02 Jan 2023 16:35:01 +0000
ROA not before: Mon 02 Jan 2023 16:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29479
IP address blocks: 185.83.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:1e:2d:d5:29:f7:2b:64:9e:35:89:88:99:0c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897378126f55d96519553daa48e02e3282121644
Validity
Not Before: Jan 2 16:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f9c208cf31575ea2635d17f52e4e707d05989d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:51:35:dc:14:a2:06:e7:6a:6c:65:aa:eb:
9d:96:03:80:fb:f2:38:81:b8:d5:4d:4f:55:22:2c:
c4:e6:75:0a:a2:6c:02:20:92:3d:eb:33:f7:fa:b3:
f9:42:7c:bf:c4:05:24:dc:01:84:ab:66:df:ff:4b:
b2:a9:14:3f:b2:f9:45:34:63:65:8b:89:20:9c:53:
52:cf:18:28:73:c9:47:80:e3:d2:df:78:2e:a5:40:
78:2c:e3:10:eb:20:bf:ae:25:f1:79:ae:27:c1:c6:
6c:91:b0:28:ba:08:a8:9a:7d:28:01:9d:a1:91:4a:
fa:b1:7d:5c:dc:c1:68:0c:05:38:e5:92:cb:1e:fa:
be:51:f1:42:c7:8c:01:db:22:a4:38:48:e7:08:ef:
8d:5d:3d:c9:27:28:48:81:aa:8e:51:63:96:9a:e2:
2c:e0:bf:49:c7:07:4e:0d:7d:53:f8:96:91:e5:0a:
39:a9:1c:01:cd:f8:e5:2c:ac:7f:57:42:6c:fe:f4:
cd:6b:3a:47:3d:49:db:6d:d7:d7:fe:43:f2:f4:15:
4e:56:16:36:ef:98:85:4d:54:cb:2e:dc:c5:f6:33:
28:6e:70:4d:d0:90:ad:5c:22:8c:30:91:a0:47:da:
3f:99:b2:b6:7e:31:7f:da:c4:b2:26:05:12:df:a0:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:20:8C:F3:15:75:EA:26:35:D1:7F:52:E4:E7:07:D0:59:89:D2
X509v3 Authority Key Identifier:
keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/T5wgjPMVdeomNdF_UuTnB9BZidI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.0.0/22
Signature Algorithm: sha256WithRSAEncryption
63:90:b5:c0:9a:17:b4:27:7a:d2:78:39:e1:c8:db:81:6e:0c:
6f:01:73:53:79:5c:f7:67:f9:48:06:1d:1a:37:22:a7:f5:f1:
9d:9c:25:12:d2:38:be:3c:e8:b1:9d:d2:9b:0c:c5:01:5d:f8:
ea:e3:2f:33:ab:3e:2f:92:a9:1e:3a:77:ae:e2:43:a8:45:0e:
f7:a0:90:10:c1:c0:4b:6c:34:09:ec:5b:fc:c6:35:88:28:64:
62:34:76:dc:9c:22:fb:8e:c3:31:c0:2c:b3:75:a1:d6:77:9d:
17:bf:14:8c:5a:8b:d7:e7:f5:d5:8b:45:12:d5:d7:4b:48:84:
9c:ac:73:5d:70:e2:4f:25:2d:41:98:8f:1b:f0:6a:df:22:03:
fa:d0:8d:07:38:de:13:fc:cb:f1:97:9d:b5:bb:4a:47:c8:5a:
71:78:6a:bc:d4:60:ab:d4:8a:bc:92:18:ca:02:3f:cc:fe:12:
94:70:e7:0b:89:a6:1c:90:45:76:ac:cb:22:5f:39:28:9c:05:
bd:ed:ba:54:2b:de:63:a4:33:db:12:1d:59:11:5b:7a:48:84:
43:2a:44:c0:e9:c1:9d:3c:ca:f3:c3:c7:ad:9a:c4:a9:90:e1:
e6:f2:8d:39:0b:4a:41:80:27:b2:bf:49:57:05:1e:6c:e8:c7:
fb:23:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:31 2025 by rpki-client