Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5DEuBxU7ZcDtNrs0Uo_SatVKvyc.roa
File: 5DEuBxU7ZcDtNrs0Uo_SatVKvyc.roa (raw, json)
Hash identifier: PFNJSYZH2r0Z/vDxCZZXu4v4bKXaGEaBm2VJtXmk8+E=
Subject key identifier: E4:31:2E:07:15:3B:65:C0:ED:36:BB:34:52:8F:D2:6A:D5:4A:BF:27
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186A7C7B932A1312B39125D42C7622668AE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5DEuBxU7ZcDtNrs0Uo_SatVKvyc.roa
Signing time: Fri 03 Mar 2023 14:02:09 +0000
ROA not before: Fri 03 Mar 2023 14:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 193.41.87.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:4880::/32 maxlen: 32
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:c7:b9:32:a1:31:2b:39:12:5d:42:c7:62:26:68:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 3 14:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4312e07153b65c0ed36bb34528fd26ad54abf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:eb:fa:12:10:c5:07:58:ca:5a:91:48:c4:
67:35:c9:a6:b7:57:2f:1c:73:22:c3:a7:8d:5f:a4:
d9:d1:13:38:64:97:a3:2b:e5:d8:71:af:40:14:cb:
50:80:8f:ec:00:6d:5f:96:aa:0a:5b:3b:ee:c2:7a:
06:81:b1:b0:c5:e5:43:46:98:e4:ff:8b:ec:70:0b:
ff:d9:18:93:57:8a:e6:5a:98:13:97:23:ef:63:c1:
f3:5a:72:f5:ca:9a:1a:c4:af:1b:e1:09:6b:25:d0:
24:c8:20:01:fb:08:db:e3:96:40:77:36:c5:ec:e4:
fa:f9:12:3e:a7:11:92:54:25:20:f2:34:49:97:c2:
8a:df:05:9e:d0:b6:84:d1:75:76:29:df:12:b3:02:
70:ce:b3:b9:e1:1b:b9:90:7f:ca:42:bb:65:61:bd:
4f:e6:a8:a1:3f:bc:5d:76:e5:4a:18:9c:6b:09:9c:
9c:b1:db:e6:2c:4c:be:72:4d:35:c7:99:a6:05:ab:
cd:89:bd:4b:98:20:6b:fe:91:b6:4d:06:d9:27:dd:
ae:75:e7:9e:01:d2:2f:53:d9:36:8f:e2:17:56:f9:
17:a8:19:b7:12:04:4e:25:9e:30:fb:f1:57:95:b4:
2d:df:db:38:93:90:74:a1:5f:f9:98:0e:9a:9a:17:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:2E:07:15:3B:65:C0:ED:36:BB:34:52:8F:D2:6A:D5:4A:BF:27
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5DEuBxU7ZcDtNrs0Uo_SatVKvyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.87.0/24
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/32
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a0f:e842::/32
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
6d:bd:2f:53:37:4a:5f:3e:7a:9e:eb:e6:c2:28:6d:78:2c:48:
e4:dc:75:7e:26:2e:dc:5f:9d:13:e4:ba:b1:dd:fc:0b:4d:ef:
aa:e6:68:e4:3a:6b:df:dc:95:2e:72:a9:66:00:20:3e:5e:75:
60:17:3a:40:b0:a0:5a:21:a6:58:88:91:c7:05:2f:22:62:00:
0c:ea:de:ce:f6:d8:88:bc:bf:70:80:20:b5:18:92:18:5a:7b:
be:e6:cc:06:b7:03:b6:ed:0f:15:19:83:2d:bc:63:8a:db:5a:
65:09:25:77:98:01:b2:ae:32:c4:8f:29:1f:6b:4c:56:7d:b5:
de:40:fd:9f:38:8b:84:64:bf:23:1b:40:ac:5d:85:bc:44:b0:
c2:e8:38:11:23:de:27:0d:84:51:02:48:6b:8a:da:44:cf:a3:
2e:3e:52:38:02:e5:32:0b:f7:67:47:ba:4f:e7:db:9c:66:b4:
44:e2:43:ff:2c:73:1c:39:9b:7c:c1:6a:16:f6:17:1c:7a:17:
d6:7e:bd:fa:64:0f:0c:9c:0d:18:ac:84:f8:5a:21:a9:a0:ae:
c9:28:0e:f8:96:2c:68:2b:96:52:3e:a7:a2:59:90:b6:42:82:
97:3b:66:39:5a:fa:3f:c3:ce:1a:2d:59:c0:cd:51:02:e9:38:
96:db:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:37:25 2025 by rpki-client