Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2KiuwnjSxYzuBk-ReGpeexXgdwE.roa
File: 2KiuwnjSxYzuBk-ReGpeexXgdwE.roa (raw, json)
Hash identifier: r0r5UHYwUsbDgoOBN0MEGeysxArMqYV5Efaf2JrF2nQ=
Subject key identifier: D8:A8:AE:C2:78:D2:C5:8C:EE:06:4F:91:78:6A:5E:7B:15:E0:77:01
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01836408B7609228C6D39D1A4857870FEBEF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2KiuwnjSxYzuBk-ReGpeexXgdwE.roa
Signing time: Thu 22 Sep 2022 07:10:36 +0000
ROA not before: Thu 22 Sep 2022 07:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.39.209.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
2a07:7885::/32 maxlen: 32
2a07:7884::/32 maxlen: 32
2a07:7887::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a07:7881::/32 maxlen: 32
2a07:7882::/32 maxlen: 32
2a07:7886::/32 maxlen: 32
2a07:7883::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:08:b7:60:92:28:c6:d3:9d:1a:48:57:87:0f:eb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 22 07:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8a8aec278d2c58cee064f91786a5e7b15e07701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ca:06:6c:f1:de:9b:db:15:b2:3b:1c:38:7c:
9b:fd:be:5e:ca:c2:e0:ef:0e:d9:33:cc:54:fc:60:
b1:53:ea:0c:e3:e9:b1:6f:f3:d2:6b:05:8e:6a:10:
aa:f6:fd:42:90:35:49:ec:4f:63:2b:d8:21:09:bb:
4b:97:28:c4:d7:c6:b6:bb:a0:a8:17:71:2f:ff:ac:
20:d7:66:a2:83:94:b1:44:a6:61:0a:d5:2f:fc:af:
e1:dd:c3:c2:62:0d:55:b3:09:db:f8:17:fc:37:03:
1c:fa:95:d5:9e:33:f5:7f:ae:33:3f:28:3e:32:4f:
3a:3b:d8:2d:2f:a5:8c:c7:7e:23:75:30:0b:5e:39:
15:81:b5:e4:70:48:19:c4:3f:fa:83:b4:9f:ff:95:
23:ca:63:5e:de:2c:68:9c:47:d1:1a:e0:a0:81:88:
88:87:49:6f:f6:8e:cb:ed:93:de:25:5e:eb:a1:fc:
ba:d8:c9:0d:c4:c5:45:5d:00:7f:9f:ed:84:34:b1:
27:eb:a9:d8:b2:b8:84:da:3a:2a:ad:99:5e:fc:fb:
d9:b0:a1:18:90:1a:7f:24:02:dc:f6:7f:2b:fd:cc:
a5:62:c5:a0:76:0d:d1:98:48:e4:07:66:8d:9b:f6:
9e:34:7f:b5:17:d1:57:14:dd:dc:3d:a9:56:80:ef:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A8:AE:C2:78:D2:C5:8C:EE:06:4F:91:78:6A:5E:7B:15:E0:77:01
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2KiuwnjSxYzuBk-ReGpeexXgdwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.187.0/24
45.130.254.0/24
45.145.59.0/24
45.146.129.0/24
45.147.31.0/24
45.157.37.0/24
45.157.39.0/24
80.253.248.0/24
85.209.131.0/24
91.212.120.0/24
103.59.40.0/22
103.74.76.0/23
193.39.209.0/24
193.41.39.0/24
193.41.68.0/23
193.41.86.0/24
194.33.62.0/24
194.41.38.0/24
IPv6:
2a07:7881::-2a07:7887:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
92:ce:8f:c5:ee:bd:5a:9e:3d:2a:64:dd:ff:d7:62:62:0b:c6:
97:d8:46:5d:02:14:51:d7:e7:a4:77:94:da:b2:84:06:63:50:
d9:de:20:a3:69:ae:1a:f9:44:55:68:03:a8:56:45:da:4c:3b:
a1:a6:d9:0a:c0:92:ea:5d:90:e6:38:77:94:46:59:6f:da:9a:
3a:b7:75:41:3c:95:57:13:41:97:98:df:de:9f:f1:c6:84:10:
91:02:f8:17:d3:ff:b0:5a:c2:b2:17:29:7d:f6:5d:d7:12:c1:
68:67:cd:1f:b5:db:62:8b:ac:f2:fd:f1:21:3b:a6:62:fb:cf:
be:5b:b0:58:a5:ef:7f:77:f9:9f:7f:73:82:e6:ac:46:e7:41:
d0:3c:07:0b:19:db:23:ca:10:2a:b5:30:d4:64:ca:f0:f1:80:
17:4a:9b:55:66:c7:bf:5e:2d:b6:87:22:6d:b4:9c:32:09:61:
ae:5a:bd:01:da:51:a5:4f:60:3a:82:1b:6c:ba:9c:57:a4:11:
a8:56:20:b7:52:c5:55:26:f2:f0:68:67:3d:8e:10:72:42:7e:
23:40:26:81:59:8a:2e:03:bc:aa:cd:39:9b:21:90:14:09:50:
b1:57:71:ee:f5:95:b8:5d:12:45:70:a2:3b:e5:22:7d:1e:40:
c4:fa:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:53:42 2025 by rpki-client