Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-wljGYDAKxph0rxnxmS_L00ZWh0.roa
File: 1-wljGYDAKxph0rxnxmS_L00ZWh0.roa (raw, json)
Hash identifier: sbin0ZaqN57huGt6LFqrsGRHY8GzxW2PNsDq1PJi6K4=
Subject key identifier: FB:09:63:19:80:C0:2B:1A:61:D2:BC:67:C6:64:BF:2F:4D:19:5A:1D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01854E08DD3D34A5599CE6FBC24E1DE627F9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-wljGYDAKxph0rxnxmS_L00ZWh0.roa
Signing time: Mon 26 Dec 2022 10:44:41 +0000
ROA not before: Mon 26 Dec 2022 10:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:08:dd:3d:34:a5:59:9c:e6:fb:c2:4e:1d:e6:27:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 26 10:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb09631980c02b1a61d2bc67c664bf2f4d195a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:46:6e:60:d4:f5:df:b6:60:d2:52:7c:5f:21:
c0:48:6c:13:1a:0c:5c:ff:af:91:f9:08:c9:73:e5:
2e:32:ea:30:31:58:10:54:2c:38:a5:8b:37:c9:a3:
f3:d6:be:c4:b7:fd:c0:7a:7b:48:0a:1f:09:77:25:
74:1b:f3:40:c7:77:d6:46:45:c0:6c:55:2c:27:95:
de:b9:f0:d4:f5:d6:41:46:4a:a4:8b:d1:53:0e:26:
07:88:cf:1b:88:cc:49:c8:ac:5b:9f:5e:9a:ee:ff:
3a:ef:89:cd:14:50:ba:e6:3c:2c:57:6e:e8:12:7f:
9b:4a:a1:21:23:d0:c0:52:c7:72:b3:e4:58:b1:35:
f3:63:6e:27:26:93:12:32:08:6a:3a:16:73:ab:ec:
f7:48:e4:29:db:8d:4b:6e:d8:78:54:b9:08:ea:9e:
41:b2:5d:7f:53:a9:51:bb:d8:78:58:0f:60:d5:e5:
ea:f0:dc:e0:dd:fc:df:54:ad:04:a2:3b:71:cb:3a:
28:82:c0:a1:65:d5:ea:fb:d4:93:17:dc:0e:84:3b:
0d:ac:22:64:8c:2e:4e:3b:38:d4:ab:c5:42:e6:73:
06:17:d8:25:0c:bc:e0:6a:86:80:d8:f3:88:7c:cd:
42:ee:9b:2e:7d:eb:a4:eb:27:a1:7e:94:61:53:49:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:09:63:19:80:C0:2B:1A:61:D2:BC:67:C6:64:BF:2F:4D:19:5A:1D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-wljGYDAKxph0rxnxmS_L00ZWh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a0f:e842::/32
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
93:ac:dd:0c:6c:4f:86:8f:c2:eb:3e:70:af:25:78:1d:32:19:
7d:22:8a:c9:57:6e:7d:07:a1:74:ec:e0:7a:bd:4b:d8:18:30:
6f:34:d7:67:89:d8:4c:2c:6c:06:55:70:a8:34:7b:c3:7d:dc:
5c:d4:d8:6a:9f:c4:c6:cb:79:9e:99:25:bc:fe:09:91:c0:48:
33:20:3d:ee:08:4f:e9:f1:36:ff:2f:0d:e2:dc:ed:fe:ca:13:
61:6b:b5:b8:d2:b3:46:2c:13:90:b1:ba:dd:86:c2:a4:52:0f:
70:5c:8b:85:ce:d6:a3:72:ca:04:21:72:87:92:32:62:0d:6a:
e3:57:17:e1:6b:43:a0:69:9d:06:ef:54:2b:9f:0d:27:fe:60:
eb:6e:2c:e8:58:1b:63:66:85:25:e4:3f:6c:a1:b8:86:a1:bb:
ed:0e:3f:83:3e:8b:c2:35:33:9c:67:3d:cf:c2:70:a5:43:70:
eb:7b:ca:82:f1:81:70:f2:75:a2:c8:60:98:76:4d:86:67:ec:
51:32:d8:94:cc:6f:a2:86:63:3a:ab:3b:00:fa:f9:87:a5:68:
ec:e9:77:12:15:9f:6e:71:d4:dc:f4:78:f6:f8:07:df:75:8a:
38:80:19:80:17:fe:fc:3a:8b:1b:88:f8:2c:74:c8:39:ac:93:
80:12:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:29 2025 by rpki-client