Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/UDVt02d_QQpTFBIdBOKuF4FhACI.roa
File: UDVt02d_QQpTFBIdBOKuF4FhACI.roa (raw, json)
Hash identifier: 3/HVr7T0GJxgpdBN/S5DC+MGutYXErEO6kv5M17/X+k=
Subject key identifier: 50:35:6D:D3:67:7F:41:0A:53:14:12:1D:04:E2:AE:17:81:61:00:22
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 01856E264EB9FE51AC5C2C499FAD903840F0
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/UDVt02d_QQpTFBIdBOKuF4FhACI.roa
Signing time: Sun 01 Jan 2023 16:24:42 +0000
ROA not before: Sun 01 Jan 2023 16:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29007
IP address blocks: 185.9.124.0/22 maxlen: 22
217.28.144.0/20 maxlen: 20
46.182.96.0/21 maxlen: 21
78.154.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:4e:b9:fe:51:ac:5c:2c:49:9f:ad:90:38:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jan 1 16:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50356dd3677f410a5314121d04e2ae1781610022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:62:2d:bc:95:aa:12:65:1d:cf:19:ba:cc:
ae:a9:f6:13:8e:5e:72:fe:63:da:c8:71:c8:42:21:
ae:60:3e:d2:4c:4e:3c:bf:79:e4:d5:59:16:a9:a2:
39:cc:42:1d:15:af:50:22:3b:f4:5d:d2:fa:0e:c9:
5f:6f:f2:77:ef:f6:2a:e6:29:9e:a7:96:ae:50:c5:
3e:27:c6:d0:eb:1d:fd:31:cc:b7:9a:21:59:24:f6:
56:f2:45:74:ce:b0:35:14:76:eb:98:7b:9f:f2:9e:
eb:f0:c2:3c:5d:cd:14:ff:88:9d:72:9e:d7:7f:7d:
54:d9:58:aa:2c:94:f2:a3:85:e2:f6:91:d1:b5:1e:
39:0d:09:c6:46:e4:ba:60:b4:72:c9:c3:32:03:52:
e0:55:7b:79:cc:1e:82:95:93:48:26:d4:cc:39:eb:
18:71:e1:22:7d:b1:94:93:04:71:0d:68:8c:32:c4:
c8:42:cb:38:d0:9c:f5:66:62:ee:90:8c:30:4d:f0:
e5:d2:32:64:8e:85:c5:3e:21:c2:39:7c:e5:73:b9:
fb:66:70:f5:0c:e0:6f:84:5c:0b:fc:d3:87:00:ba:
ae:97:5e:b5:e7:0c:c2:82:c4:db:0d:51:44:09:a3:
dd:56:ef:ad:8d:75:67:dd:22:5a:27:c4:f0:c8:dc:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:35:6D:D3:67:7F:41:0A:53:14:12:1D:04:E2:AE:17:81:61:00:22
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/UDVt02d_QQpTFBIdBOKuF4FhACI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.96.0/21
78.154.64.0/19
185.9.124.0/22
217.28.144.0/20
Signature Algorithm: sha256WithRSAEncryption
05:67:e2:00:6c:38:b4:cf:df:0c:c6:f3:a5:35:41:43:2e:bd:
e4:7f:55:c8:f5:57:51:24:6a:fd:86:3b:5b:81:23:f3:b1:e3:
32:b7:b6:5b:79:24:b4:51:2f:10:69:c2:5a:38:18:97:d2:81:
a1:68:e9:43:21:a5:96:06:df:07:b4:b2:81:57:15:2f:62:31:
74:56:d0:36:e7:08:a5:92:5d:2d:6a:13:f3:c4:cc:9e:31:42:
66:e5:62:48:5a:e0:b9:1e:b1:e2:35:64:b4:3e:08:1d:fa:c0:
45:ad:40:12:95:84:6c:38:dd:43:93:48:e5:30:dc:0f:eb:fc:
21:96:a7:2e:fa:53:c6:23:b1:f1:97:65:0d:50:e0:23:cd:87:
98:05:f9:4d:83:da:44:e4:b1:1e:ec:f7:19:9a:ba:b2:9c:3f:
44:51:4c:03:c7:3a:d2:a4:48:ba:f1:54:a3:a7:f4:5c:86:7f:
db:73:ec:44:24:b8:c3:ac:08:9b:68:9a:f4:17:1b:d7:0d:eb:
11:1e:3b:d0:78:a8:24:2f:1b:07:fc:e0:7a:a4:0f:a7:8f:c2:
19:16:fd:f2:28:6e:00:5d:42:98:30:d1:54:0d:81:36:5f:03:
18:54:b7:b3:7a:34:47:16:5a:5f:33:3e:ad:d7:e1:24:2a:62:
ec:d1:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:27:33 2025 by rpki-client