Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-v28e3zG49X-BM54txJgutrc6hQ.roa
File: 1-v28e3zG49X-BM54txJgutrc6hQ.roa (raw, json)
Hash identifier: 68awoLdh1FPoDhOYiF9QrLQEqI4+iZnEcRUmDSnMHAo=
Subject key identifier: FA:FD:BC:7B:7C:C6:E3:D5:FE:04:CE:78:B7:12:60:BA:DA:DC:EA:14
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018BC774F97EDA9A85369857BCFC65B82D4D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-v28e3zG49X-BM54txJgutrc6hQ.roa
Signing time: Mon 13 Nov 2023 06:53:33 +0000
ROA not before: Mon 13 Nov 2023 06:53:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a13:9580::/29 maxlen: 29
2a0e:c780::/32 maxlen: 32
2a13:9680::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a13:fd00::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a13:9080::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a13:8200::/29 maxlen: 29
2a10:67c0::/29 maxlen: 29
2a0f:1e00:abc::/48 maxlen: 48
2a13:9280::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac41::/32 maxlen: 32
2a12:ac40:f::/48 maxlen: 48
2a0f:ea42::/32 maxlen: 32
2a0f:2100::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a12:ecc2::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a13:1940::/29 maxlen: 29
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a13:18c3::/32 maxlen: 32
2a07:f306:123::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:74:f9:7e:da:9a:85:36:98:57:bc:fc:65:b8:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 13 06:53:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fafdbc7b7cc6e3d5fe04ce78b71260badadcea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:dc:ea:9e:87:9c:a5:03:97:bd:78:c3:33:
1d:20:51:b9:94:d6:98:bb:d6:70:11:d5:6c:2c:60:
51:45:dd:75:0b:40:c3:8b:fe:8e:b0:29:dd:42:9a:
f8:58:4d:a0:bd:96:14:5c:35:cc:35:ca:b8:d4:3e:
37:99:62:37:56:7e:03:e6:0a:41:ec:08:81:fc:b9:
af:2a:4d:c5:94:67:16:7b:04:52:4b:24:16:14:bb:
3f:a7:b8:b3:80:4a:53:33:c4:e8:be:ff:c5:a5:c1:
17:3e:ac:da:17:ba:b1:39:55:8d:59:a1:03:02:bb:
cc:21:37:60:1c:0f:e5:22:46:a3:cf:fc:70:89:52:
59:6d:a2:44:e5:8f:34:78:20:69:be:81:56:26:0b:
5c:a8:c7:fa:63:b8:51:51:48:66:a9:13:c5:cc:2c:
57:d1:af:46:68:92:9b:ec:00:88:25:91:c1:03:cc:
17:70:ba:29:c9:1b:19:73:db:d3:ef:56:69:87:ce:
6b:56:21:e1:d6:9e:a7:71:c9:b9:77:02:2d:51:1f:
a4:19:b4:62:d1:b8:c4:32:82:90:89:d5:ba:66:2f:
6b:12:2d:39:56:d1:8c:dd:1e:e0:d1:2d:8f:58:c8:
c0:0b:4c:f2:a6:e7:e6:9a:33:9e:7e:a1:99:56:de:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FD:BC:7B:7C:C6:E3:D5:FE:04:CE:78:B7:12:60:BA:DA:DC:EA:14
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-v28e3zG49X-BM54txJgutrc6hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a07:f306:123::/48
2a0c:4880::/29
2a0c:9247:1::/48
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:3d80:123::/48
2a0f:3d82::/31
2a0f:3d87::/32
2a0f:e940::/29
2a0f:ea42::/32
2a10:67c0::/29
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:ac41::/32
2a12:ecc2::/32
2a13:18c0:1::/48
2a13:18c3::/32
2a13:1940::/29
2a13:4900::/29
2a13:8200::/29
2a13:9080::/29
2a13:9280::/29
2a13:9580::/29
2a13:9680::/29
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
6d:9d:0b:98:21:ad:81:2b:0f:e0:ff:a1:35:bc:d6:e2:03:42:
6d:d8:35:09:1b:35:90:84:50:0c:55:cc:80:a1:c1:d0:40:a7:
18:4e:31:ce:1a:74:8a:64:f0:b1:77:82:e5:bf:e0:0b:42:f1:
fd:26:05:cd:6a:07:02:76:8e:0f:20:55:9c:23:ae:39:ca:8c:
a0:f5:d6:6b:5f:cc:08:e7:b4:4e:89:23:c7:b7:48:03:dc:44:
37:2d:c4:ee:32:7e:0a:1e:37:b1:54:f3:22:c6:c9:1e:26:9b:
38:dd:4e:e7:d5:9f:b3:40:b0:58:e1:2d:a7:06:e1:2d:be:95:
a3:c1:00:d4:41:27:2a:b3:f8:b6:a6:60:21:6b:31:2b:1b:8d:
77:c3:f4:1b:8d:0c:89:8f:e5:0b:8a:02:b8:f1:cf:10:fb:2f:
8a:a1:4e:bd:0c:c6:d5:f3:a3:93:1f:a0:7a:9a:8b:ae:93:f9:
3d:a3:a4:f2:d4:b7:02:85:8d:d7:83:a6:0a:53:b8:e9:41:04:
dc:fa:e0:e1:27:44:6f:9e:0c:c1:a3:b1:03:a2:83:08:82:bb:
38:cc:2f:1c:5c:3a:7f:75:48:1b:1b:9c:0c:4d:50:bb:5e:e3:
ed:df:83:92:23:53:41:dc:15:79:25:98:ec:70:f9:00:01:c0:
e1:bf:41:76
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgISAYvHdPl+2pqFNphXvPxluC1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMxMTEzMDY1MzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWZkYmM3YjdjYzZlM2Q1ZmUwNGNlNzhiNzEyNjBiYWRhZGNlYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoODc6p6HnKUDl714wzMdIFG5lNaY
u9ZwEdVsLGBRRd11C0DDi/6OsCndQpr4WE2gvZYUXDXMNcq41D43mWI3Vn4D5gpB
7AiB/LmvKk3FlGcWewRSSyQWFLs/p7izgEpTM8Tovv/FpcEXPqzaF7qxOVWNWaED
ArvMITdgHA/lIkajz/xwiVJZbaJE5Y80eCBpvoFWJgtcqMf6Y7hRUUhmqRPFzCxX
0a9GaJKb7ACIJZHBA8wXcLopyRsZc9vT71Zph85rViHh1p6nccm5dwItUR+kGbRi
0bjEMoKQidW6Zi9rEi05VtGM3R7g0S2PWMjAC0zypufmmjOefqGZVt7EBQIDAQAB
o4IDbTCCA2kwHQYDVR0OBBYEFPr9vHt8xuPV/gTOeLcSYLra3OoUMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvMS12MjhlM3pHNDlYLUJNNTR0eEpndXRyYzZoUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRi
Ni8xL2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAYAGCCsGAQUFBwEHAQH/BIIBbzCCAWswGAQCAAEwEgME
AC2BfwMEAC2HJQMEAMGkxzCCAU0EAgACMIIBRQMHACoH8wYBIwMFAyoMSIADBwAq
DJJHAAEDBQAqDhqAAwUAKg7HgAMHACoO8gEAAQMFASoPCgADBwAqDx4AASMDBwAq
Dx4ABFYDBwAqDx4ACYcDBwAqDx4ACrwDBwAqDx4A3vkDBwAqDx4BAAEDBwAqDx6B
AAIDBwAqDx6BEpMDBwAqDx6BQxkDBwAqDx6BkugDBwAqDx6Bo9ADBwAqDx6Bza4D
BQMqDyEAAwcAKg89gAEjAwUBKg89ggMFACoPPYcDBQMqD+lAAwUAKg/qQgMFAyoQ
Z8ADBQMqEG1AAwcAKhKsQAAAAwcAKhKsQAAPAwUAKhKsQQMFACoS7MIDBwAqExjA
AAEDBQAqExjDAwUDKhMZQAMFAyoTSQADBQMqE4IAAwUDKhOQgAMFAyoTkoADBQMq
E5WAAwUDKhOWgAMFAyoT/QAwDQYJKoZIhvcNAQELBQADggEBAG2dC5ghrYErD+D/
oTW81uIDQm3YNQkbNZCEUAxVzIChwdBApxhOMc4adIpk8LF3guW/4AtC8f0mBc1q
BwJ2jg8gVZwjrjnKjKD11mtfzAjntE6JI8e3SAPcRDctxO4yfgoeN7FU8yLGyR4m
mzjdTufVn7NAsFjhLacG4S2+laPBANRBJyqz+LamYCFrMSsbjXfD9BuNDImP5QuK
ArjxzxD7L4qhTr0MxtXzo5MfoHqai66T+T2jpPLUtwKFjdeDpgpTuOlBBNz64OEn
RG+eDMGjsQOigwiCuzjMLxxcOn91SBsbnAxNULte4+3fg5IjU0HcFXklmOxw+QAB
wOG/QXY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:27:44 2025 by rpki-client