Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-yBd76SiX8CG6i4gGVcEeBDrC9c.roa
File: 1-yBd76SiX8CG6i4gGVcEeBDrC9c.roa (raw, json)
Hash identifier: Nof62PyO5iGJNPD9QspoXuNqZiLtKWq7yZab1Ue4MNM=
Subject key identifier: FB:20:5D:EF:A4:A2:5F:C0:86:EA:2E:20:19:57:04:78:10:EB:0B:D7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188667BBC20A071DC54FF8EC549B0E23474
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-yBd76SiX8CG6i4gGVcEeBDrC9c.roa
Signing time: Mon 29 May 2023 07:49:25 +0000
ROA not before: Mon 29 May 2023 07:49:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:e847:ffff::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a13:18c0:1::/48 maxlen: 48
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:7d04:1::/48 maxlen: 48
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a13:1940:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:7b:bc:20:a0:71:dc:54:ff:8e:c5:49:b0:e2:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 29 07:49:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb205defa4a25fc086ea2e201957047810eb0bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:a5:39:1f:78:c1:cb:69:cb:90:38:e7:45:
22:33:b8:69:85:1d:13:d8:e9:41:33:e8:55:a2:66:
c0:39:f2:65:94:3e:1e:b8:cb:6d:6d:3a:03:ff:04:
7b:dc:bf:5e:34:7d:ad:a2:a5:43:e6:d6:9f:01:0d:
45:63:25:6f:e7:cb:fb:22:6b:d6:85:a5:4f:97:3b:
aa:8b:22:f9:29:53:ee:ca:23:00:49:f6:fa:cf:34:
c3:4a:f1:a6:e4:72:6a:2d:07:05:83:fa:91:ab:69:
72:2d:b1:cf:ce:72:26:dd:c1:7b:ce:db:dc:a4:6c:
97:ac:8b:bf:fa:03:a8:19:cc:12:cf:33:8f:87:60:
a8:f5:81:02:0a:73:d7:b8:ed:02:b5:c0:5d:83:86:
95:95:9b:f2:51:33:8d:0a:88:02:08:be:c6:b7:f3:
c1:a3:ea:d1:d5:91:8d:c3:4c:b2:ed:2c:cd:83:83:
a5:96:0b:25:c7:98:ea:f3:5b:3a:92:07:d5:19:fc:
b5:94:83:2a:82:fe:a4:3c:7e:45:9e:d5:c8:9c:d6:
12:42:ed:af:b6:19:69:3a:7e:fd:55:52:7b:d4:ae:
dc:b0:52:b9:07:06:84:96:43:0d:22:96:c8:f3:27:
08:c6:59:99:00:68:f3:17:05:06:17:63:13:2b:9e:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:5D:EF:A4:A2:5F:C0:86:EA:2E:20:19:57:04:78:10:EB:0B:D7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-yBd76SiX8CG6i4gGVcEeBDrC9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0c:4880::/29
2a0c:9247:1::/48
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7d04:1::/48
2a0f:7f00::/31
2a0f:e847:ffff::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
2a13:18c0:1::/48
2a13:1940:1::/48
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
63:f5:45:af:2d:39:c2:9a:a7:8f:80:45:d8:7d:25:09:b6:20:
02:80:01:6a:25:63:59:a9:ba:ce:f2:6c:a0:93:ad:2c:47:ae:
68:c7:da:88:a2:3b:ca:d1:7c:da:e6:c6:0e:e1:8b:c6:cf:4e:
82:fd:ec:54:1d:ea:a0:0b:6b:39:bb:52:f4:f1:43:a5:4c:63:
7d:ea:dc:dd:c3:dc:ea:d9:22:b4:a8:56:7b:ed:8a:bc:0d:12:
b7:a7:9f:99:2c:30:fc:9c:ad:eb:70:53:5c:84:19:bf:01:6c:
98:16:9c:05:5c:77:36:17:f9:53:57:28:53:7c:8f:02:a1:59:
8b:cb:15:21:31:8f:61:46:10:73:cc:b2:17:c4:01:13:cb:17:
79:64:ad:a1:7b:05:d1:0d:3a:3c:6a:45:43:83:05:55:19:2f:
0f:b1:b6:5b:45:99:fe:1b:1b:24:92:5e:4a:c2:85:70:3d:5a:
d0:36:06:f1:aa:42:29:8c:72:42:7e:5a:8d:dc:09:99:b0:ff:
9e:d5:b4:42:b3:dd:c8:4d:4b:11:99:5f:7d:33:19:a5:f5:f8:
12:3f:72:df:cf:a7:5c:92:0f:27:5a:32:90:a4:31:a4:28:77:
d4:06:c8:35:c2:8d:42:98:1e:f6:d2:70:53:14:ec:73:55:b5:
39:cc:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:06 2025 by rpki-client