Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1n4TRFXnDpznzGrpDS1DmD9IpOE.roa
File: 1n4TRFXnDpznzGrpDS1DmD9IpOE.roa (raw, json)
Hash identifier: PmQJy801DWGDuqwVlNlVoZizwTd0Eg76CQcoQQNiDB0=
Subject key identifier: D6:7E:13:44:55:E7:0E:9C:E7:CC:6A:E9:0D:2D:43:98:3F:48:A4:E1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAFC4B1F11BA68B84B0F6A5584FB8D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1n4TRFXnDpznzGrpDS1DmD9IpOE.roa
Signing time: Sun 01 Jan 2023 14:44:57 +0000
ROA not before: Sun 01 Jan 2023 14:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399989
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.154.247.0/24 maxlen: 24
45.128.25.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:fc:4b:1f:11:ba:68:b8:4b:0f:6a:55:84:fb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d67e134455e70e9ce7cc6ae90d2d43983f48a4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:f0:2f:98:0a:ab:47:b6:96:c1:b2:d4:48:
25:d9:1c:eb:2d:b8:f2:a7:8f:a2:79:4c:fd:19:a1:
a3:47:7c:a3:3e:1c:13:8a:6c:e2:1c:48:da:92:9b:
9f:b3:2f:c6:13:f0:80:4f:b7:1a:03:39:0c:3f:5f:
7f:8e:9d:e5:46:1e:ad:26:98:e9:51:5b:22:ce:bc:
ac:4d:fa:ef:e0:eb:65:4b:9d:02:80:8d:18:80:ad:
67:a6:9b:70:32:0d:ac:c1:d2:b0:4d:11:f4:8b:00:
b2:6e:8c:ba:a5:75:88:56:55:64:ee:bb:c1:ec:94:
e8:8f:ab:96:f0:52:42:27:66:6a:41:cd:80:9c:c0:
e2:42:3a:e6:93:b0:da:d3:a8:7f:e8:71:cc:b7:f8:
06:86:a5:bb:d3:91:85:8a:12:ff:ab:f1:ae:2c:f5:
53:85:de:67:d6:b9:2a:85:82:ff:c9:e7:43:f9:b7:
d7:c1:86:fe:5c:a6:a4:ca:a1:65:d1:8d:23:e3:54:
11:07:af:84:c2:43:70:80:71:0c:4c:7c:7f:5f:75:
62:41:2b:28:89:74:5d:e4:ef:3b:09:fb:65:ef:2e:
88:fe:07:88:37:3d:91:b4:60:59:53:45:67:11:8f:
34:f3:a8:db:8a:20:6d:11:16:97:11:b8:e2:4b:ab:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7E:13:44:55:E7:0E:9C:E7:CC:6A:E9:0D:2D:43:98:3F:48:A4:E1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1n4TRFXnDpznzGrpDS1DmD9IpOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
45.128.79.0/24
45.129.127.0/24
45.135.37.0-45.135.38.255
45.146.88.0/24
45.154.229.0/24
45.154.247.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
97:04:6d:e8:8f:bf:f3:a6:bf:8c:3b:71:bf:67:f0:d6:02:00:
be:54:18:91:bd:cc:a8:af:7a:7e:30:7f:39:ad:82:19:e0:22:
21:44:5e:bc:58:c1:13:dc:e5:82:17:c7:96:84:87:a1:64:2c:
e7:82:77:cc:b1:5a:90:d2:17:9b:92:82:69:11:46:7b:3f:26:
13:37:19:72:b5:34:ff:f4:a4:c9:0e:5c:a0:a4:6f:7d:38:3a:
19:5b:1e:87:f0:bd:7d:a1:ba:b5:a3:86:0e:70:74:b8:c1:ef:
23:fb:f6:26:3b:01:39:b3:b7:66:ff:c2:71:7b:47:d0:d0:6a:
99:27:e0:d7:ad:20:6a:af:de:ba:21:24:f2:8e:62:6f:c8:1e:
65:3a:ed:02:b9:d6:a3:1b:e2:63:86:56:32:fd:65:d8:8c:b5:
bf:42:85:bc:86:3e:11:51:15:15:1e:6f:57:ba:ba:e2:e1:3d:
97:f4:e4:f2:fd:63:db:d0:2e:6c:1d:5e:b2:72:c4:b7:f8:d1:
64:0b:6a:27:20:06:65:ec:9a:8d:ac:d1:9a:64:51:d8:ed:ac:
55:fb:a1:85:33:02:8c:33:37:d5:d1:76:c3:e0:ed:e1:21:83:
61:bc:5b:16:67:f0:97:ee:61:02:7d:38:a1:d7:aa:f4:c7:a9:
e5:16:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:58:50 2025 by rpki-client