Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1HbCgyQ4TDzvhILHCd3YRYVMDos.roa
File: 1HbCgyQ4TDzvhILHCd3YRYVMDos.roa (raw, json)
Hash identifier: RGwBPTeZKEF6STzasHZNODL1xXSEqWfVWqZACJdDxtE=
Subject key identifier: D4:76:C2:83:24:38:4C:3C:EF:84:82:C7:09:DD:D8:45:85:4C:0E:8B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01875AFC62642112E5CC354835587039BF85
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1HbCgyQ4TDzvhILHCd3YRYVMDos.roa
Signing time: Fri 07 Apr 2023 09:11:42 +0000
ROA not before: Fri 07 Apr 2023 09:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:4880::/32 maxlen: 32
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:fc:62:64:21:12:e5:cc:35:48:35:58:70:39:bf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 7 09:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d476c28324384c3cef8482c709ddd845854c0e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:92:34:86:9f:45:78:24:90:26:6f:d9:af:35:
1f:31:9f:bb:e2:85:0f:1d:35:17:33:f0:b3:e6:8c:
a5:ff:9a:da:8a:b3:c4:42:25:56:38:ff:c2:a3:18:
02:30:f2:fa:12:e2:52:a7:51:5c:4f:36:4f:9d:47:
96:03:66:bf:e7:96:5f:f6:ea:6a:34:fa:a1:20:4e:
66:d6:56:d9:06:b1:bf:87:b6:5b:85:af:55:72:00:
9b:92:82:4f:ec:f7:3d:8a:86:94:83:dd:bd:83:f3:
3e:b6:50:2e:8d:92:1b:d0:e8:cc:79:f5:ee:72:b1:
17:23:65:90:33:82:98:02:9f:a7:1f:e7:2a:7a:c4:
d6:0c:67:e6:3e:80:01:41:fa:b3:4f:55:c8:96:1b:
ad:f3:db:07:3d:82:85:d2:0e:ea:be:af:74:f8:30:
f5:0b:f4:d5:31:a7:be:bb:19:47:ee:25:d7:4c:9b:
74:4e:5d:54:f7:cb:9d:f1:67:7c:a0:7e:0d:51:0b:
c3:6f:c1:3d:b4:8d:4a:32:23:47:1d:e5:f4:11:e8:
76:d6:7a:ce:6c:78:81:09:8b:0a:8e:b8:b0:6f:87:
67:74:10:8f:80:97:51:97:ee:a5:0a:8f:e4:a6:0a:
0d:51:6c:83:bb:a4:a2:fe:b7:db:de:05:9d:c0:4f:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:C2:83:24:38:4C:3C:EF:84:82:C7:09:DD:D8:45:85:4C:0E:8B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1HbCgyQ4TDzvhILHCd3YRYVMDos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/32
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:e00::/29
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
88:4b:bc:a8:70:ea:6c:6f:1e:6d:cd:97:89:a4:5a:9c:00:ec:
98:ef:8e:bb:f2:4d:f3:06:2a:56:80:ef:0d:b5:6d:30:60:61:
ce:e4:9f:7d:0e:10:29:14:36:e8:34:f6:1f:db:b2:d0:1e:aa:
45:3c:86:ec:33:3d:a6:d1:9a:5b:b2:77:f6:d8:c2:40:f0:8a:
5e:9b:4f:a1:c9:69:52:bf:c8:75:4c:4f:8d:2e:38:f4:21:2d:
10:44:d7:c4:26:80:04:43:42:dc:78:97:5b:d8:10:71:2b:37:
1a:17:fa:1e:77:ce:87:ce:66:f9:ca:ea:09:e5:d5:b9:88:fc:
1a:fe:30:48:da:fb:b5:e3:c4:de:eb:7c:a8:b9:2e:2b:3e:ea:
58:48:f2:22:95:d3:85:37:48:80:83:e7:3d:53:a8:10:71:3c:
7a:f2:7a:99:38:ca:3a:48:b7:97:8a:52:54:d9:ab:4c:98:25:
4b:f2:11:3e:75:33:42:e1:11:e0:e2:a6:b5:3e:e1:c9:26:6c:
d2:d4:9c:dc:54:c2:59:d3:94:41:df:19:97:51:1b:26:52:7c:
ac:71:bd:45:05:41:7a:fe:b4:c5:10:f9:04:7f:07:31:66:ad:
29:a0:49:6a:9a:1a:df:61:f6:07:aa:f3:fc:2e:69:3c:b6:7a:
e1:2b:3d:cc
-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgISAYda/GJkIRLlzDVINVhwOb+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNDA3MDkxMTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDc2YzI4MzI0Mzg0YzNjZWY4NDgyYzcwOWRkZDg0NTg1NGMwZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpI0hp9FeCSQJm/ZrzUfMZ+74oUP
HTUXM/Cz5oyl/5rairPEQiVWOP/CoxgCMPL6EuJSp1FcTzZPnUeWA2a/55Zf9upq
NPqhIE5m1lbZBrG/h7Zbha9VcgCbkoJP7Pc9ioaUg929g/M+tlAujZIb0OjMefXu
crEXI2WQM4KYAp+nH+cqesTWDGfmPoABQfqzT1XIlhut89sHPYKF0g7qvq90+DD1
C/TVMae+uxlH7iXXTJt0Tl1U98ud8Wd8oH4NUQvDb8E9tI1KMiNHHeX0Eeh21nrO
bHiBCYsKjriwb4dndBCPgJdRl+6lCo/kpgoNUWyDu6Si/rfb3gWdwE8xFQIDAQAB
o4IDEzCCAw8wHQYDVR0OBBYEFNR2woMkOEw874SCxwnd2EWFTA6LMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvMUhiQ2d5UTRURHp2aElMSENkM1lSWVZNRG9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJwYIKwYBBQUHAQcBAf8EggEWMIIBEjAMBAIAATAGAwQA
waTHMIIBAAQCAAIwgfkDBQMqB/MAAwUAKgxIgAMFACoOGoADBQMqDlqAAwUAKg7H
gAMHACoO8gEAAQMFASoPCgADBQMqDw4AAwcAKg8eAAEjAwcAKg8eAARWAwcAKg8e
AAmHAwcAKg8eAAq8AwcAKg8eAN75AwcAKg8eAQABAwcAKg8egQACAwcAKg8egRKT
AwcAKg8egUMZAwcAKg8egZLoAwcAKg8egaPQAwcAKg8egc2uAwUBKg85wAMHACoP
PYABIwMFACoPPYIDBQAqDz2EAwUAKg89hwMFASoPfwADBQMqEG1AAwcAKhKsQAAA
AwcAKhKsQAAPAwUDKhLVQAMFAyoTSQAwDQYJKoZIhvcNAQELBQADggEBAIhLvKhw
6mxvHm3Nl4mkWpwA7JjvjrvyTfMGKlaA7w21bTBgYc7kn30OECkUNug09h/bstAe
qkU8huwzPabRmluyd/bYwkDwil6bT6HJaVK/yHVMT40uOPQhLRBE18QmgARDQtx4
l1vYEHErNxoX+h53zofOZvnK6gnl1bmI/Br+MEja+7XjxN7rfKi5Lis+6lhI8iKV
04U3SICD5z1TqBBxPHryepk4yjpIt5eKUlTZq0yYJUvyET51M0LhEeDiprU+4ckm
bNLUnNxUwlnTlEHfGZdRGyZSfKxxvUUFQXr+tMUQ+QR/BzFmrSmgSWqaGt9h9geq
8/wuaTy2euErPcw=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:27 2025 by rpki-client