Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2W-UjXk0s2KNZaU8cdu8U5hYenM.roa
File: 2W-UjXk0s2KNZaU8cdu8U5hYenM.roa (raw, json)
Hash identifier: giEWpXZAparKwVG+Nvp0LWpLw5r/lgEAxJXXe9M1X4I=
Subject key identifier: D9:6F:94:8D:79:34:B3:62:8D:65:A5:3C:71:DB:BC:53:98:58:7A:73
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C72DBF25462996DE90D76B56E46E3C287
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2W-UjXk0s2KNZaU8cdu8U5hYenM.roa
Signing time: Sat 16 Dec 2023 13:41:06 +0000
ROA not before: Sat 16 Dec 2023 13:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a11:fd80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0e:f201:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a13:fc00::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a06:5280::/29 maxlen: 29
2a13:fd00::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a13:2b40::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:2f80::/29 maxlen: 29
2a10:67c0::/29 maxlen: 29
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a0f:e540::/29 maxlen: 29
2a12:ac41::/32 maxlen: 32
2a0f:2100::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a12:ac40::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a13:1940::/29 maxlen: 29
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a13:18c3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:db:f2:54:62:99:6d:e9:0d:76:b5:6e:46:e3:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 16 13:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d96f948d7934b3628d65a53c71dbbc5398587a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:36:49:dd:17:84:c4:d8:e5:99:12:d9:ff:
00:78:5b:26:e1:9f:70:85:1f:25:58:7e:d1:f0:32:
e8:df:f8:95:f7:5d:57:eb:17:48:f1:d0:86:f6:f0:
a8:03:d3:81:03:eb:dd:d3:a9:47:9d:2e:43:bb:72:
0f:ca:59:08:49:b4:5d:4f:30:39:d2:01:00:5c:16:
49:e1:99:2b:36:66:94:33:10:b2:59:c2:63:01:78:
72:8f:85:bd:7a:c4:50:db:02:b2:c9:e5:21:5e:00:
f5:95:2f:7b:ad:c0:a1:a8:28:7c:68:09:1b:60:19:
8b:b9:fc:c4:65:66:f2:95:c3:3e:71:0c:56:74:e7:
b2:19:90:eb:c4:7f:e0:d4:af:2e:04:61:b5:7d:7f:
a6:23:38:dc:1f:c3:40:e8:1e:eb:38:0a:e3:ec:0c:
b0:3f:5a:82:8f:ff:9e:06:da:b5:af:6a:d9:26:3e:
78:a6:bd:e4:b2:5a:f6:5f:a7:b0:d9:9b:58:72:df:
a4:b1:27:0d:5a:ba:ca:23:2e:66:30:8e:90:c1:b0:
ea:26:d2:f7:0b:9c:e9:87:2a:c0:0f:c7:24:3c:41:
9c:87:0a:68:29:fa:77:ef:af:5f:9a:0d:7e:17:59:
e3:c5:43:30:4f:bf:27:0b:b2:fd:70:38:24:f1:54:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:94:8D:79:34:B3:62:8D:65:A5:3C:71:DB:BC:53:98:58:7A:73
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2W-UjXk0s2KNZaU8cdu8U5hYenM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a06:5280::/29
2a07:f300::/29
2a0c:4880::/29
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a01::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d80:123::/48
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:7d01::/32
2a0f:e540::/29
2a0f:e940::/29
2a10:67c0::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a13:18c0:1::/48
2a13:18c3::/32
2a13:1940::/29
2a13:2b40::/29
2a13:4900::/29
2a13:fc00::/29
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
66:75:0a:47:9c:67:97:e0:7a:36:55:c5:b8:29:d6:06:aa:f3:
6c:f5:13:c5:c9:de:00:00:fd:16:7a:dd:f0:1f:89:49:d7:61:
cc:9c:88:e6:18:c2:35:47:ac:00:3b:3a:03:b2:53:eb:f0:a4:
19:ba:d2:52:dd:7d:b7:82:16:69:f3:ae:55:8c:67:da:24:e0:
8b:56:22:8a:45:e5:ea:fa:2d:0a:a7:39:8c:90:c7:2f:8f:75:
c0:3d:4e:b4:c3:6c:32:95:10:fb:ad:0b:65:23:0f:ba:c1:8a:
c6:c5:e4:6a:f5:73:53:2f:7d:e6:9d:95:7c:36:e8:e0:5e:56:
28:47:e1:e6:34:d1:7e:c3:d5:b2:79:66:3d:bf:0e:e4:96:05:
0e:04:50:a5:eb:53:83:ff:88:cb:ce:ee:bc:2b:9b:e1:04:e0:
9e:7b:1d:62:59:1b:63:1f:e0:61:33:be:83:48:50:1a:2d:7c:
ac:7c:73:de:a3:8a:42:6c:85:21:89:42:f9:ac:15:5f:cf:3c:
c1:fa:b0:27:6f:53:b5:0f:9b:7b:94:9c:5c:eb:4e:8a:db:3c:
d5:4a:54:30:4b:e8:c0:92:4d:6f:6b:14:c2:e6:e3:90:19:06:
c4:11:a5:25:2b:78:e2:bb:e6:cf:de:36:78:d1:0d:3e:89:33:
84:c1:29:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:53 2025 by rpki-client