Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2eodzwfjV9Wosal93ukeGC-ABcQ.roa
File: 2eodzwfjV9Wosal93ukeGC-ABcQ.roa (raw, json)
Hash identifier: hKYu//qcg6jikaKLcr7B6ohgtZDslVx1Qs6kndo2CVM=
Subject key identifier: D9:EA:1D:CF:07:E3:57:D5:A8:B1:A9:7D:DE:E9:1E:18:2F:80:05:C4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186303B112CC58B72C43B965D2C93FC2D16
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2eodzwfjV9Wosal93ukeGC-ABcQ.roa
Signing time: Wed 08 Feb 2023 08:53:42 +0000
ROA not before: Wed 08 Feb 2023 08:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.128.25.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:3b:11:2c:c5:8b:72:c4:3b:96:5d:2c:93:fc:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 8 08:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9ea1dcf07e357d5a8b1a97ddee91e182f8005c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:3e:f2:67:13:dd:29:da:a6:a1:79:99:1d:
ac:f3:a1:ee:11:3c:f6:d5:54:8e:16:28:91:ff:c5:
51:e6:a4:45:66:ce:65:6e:79:0e:e0:d5:5c:36:1d:
7f:e9:bf:f2:93:ef:c7:f9:21:ba:60:e4:59:22:76:
f5:81:09:e8:c4:c1:c7:7f:12:19:14:95:3b:3c:f8:
6a:e7:02:fc:0b:5e:e0:c3:1c:69:57:ed:40:f9:c6:
04:48:c8:db:eb:21:21:b1:36:db:9d:3f:68:38:f2:
62:bd:36:5f:8c:ce:d2:df:a0:a0:26:62:c9:26:3d:
24:15:6e:5c:26:18:49:51:b0:4f:37:03:66:7b:e2:
cd:e0:ac:44:b6:1b:a3:6c:53:2d:6a:e3:84:1c:87:
8c:15:e1:05:d9:e3:61:57:51:77:0a:85:77:75:cb:
62:01:52:50:a6:9c:b3:87:0b:dd:fa:25:dc:e4:23:
13:12:5c:6a:51:71:e3:32:95:a2:18:22:ea:cf:18:
1d:a8:e2:9c:c2:ba:bd:0d:63:74:0e:de:32:aa:ca:
7d:b3:91:2e:36:3b:df:69:a0:8a:a3:d0:62:81:0c:
f0:14:f4:01:57:37:4c:cc:43:aa:50:d2:9c:12:dd:
fa:cf:d7:d7:de:72:d4:69:52:68:7d:01:2a:41:fe:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:1D:CF:07:E3:57:D5:A8:B1:A9:7D:DE:E9:1E:18:2F:80:05:C4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2eodzwfjV9Wosal93ukeGC-ABcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
45.128.79.0/24
45.129.127.0/24
45.135.37.0-45.135.38.255
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:60:4f:91:ec:d2:35:48:1f:59:fa:30:51:39:29:cd:df:4c:
b9:82:df:e8:79:09:20:a4:ee:bd:7e:82:4a:99:8f:49:17:57:
f8:f2:8c:f1:e3:2b:51:98:2f:38:b1:db:8d:e7:3f:03:e3:fa:
0f:90:90:03:5a:23:70:2d:e4:47:d8:a1:10:f7:a7:9b:e7:09:
a8:cb:61:22:60:27:e9:2d:87:6f:af:fe:3c:91:f9:9c:1a:ab:
71:40:e4:f3:63:ac:b8:57:13:87:7d:29:46:ae:f3:9c:f2:78:
86:43:34:a6:3e:c1:7d:39:d3:53:82:4e:20:41:64:a7:40:74:
22:ab:8c:c5:da:31:b9:4e:d8:60:d7:36:96:e3:c5:be:16:e8:
33:70:9f:b5:8f:e1:9e:49:d8:e8:c9:12:d0:0b:eb:98:89:44:
31:1e:00:06:45:2c:29:9d:95:3b:f6:42:88:4f:13:dd:82:87:
44:d3:09:0b:0c:f3:d1:18:16:56:02:6e:e0:e1:33:21:a9:38:
20:c7:88:5b:bd:34:fa:fa:7c:53:db:ef:24:a0:30:7d:8c:a8:
6e:11:da:94:97:5d:9f:70:58:40:47:4d:d6:02:aa:61:77:82:
d0:e0:9f:49:3d:b3:90:f7:3b:65:99:dd:f0:be:70:b5:46:5d:
b4:77:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:39 2025 by rpki-client