Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7VsjGiRRYHOqA_hXMW-9IpyKL2A.roa
File: 7VsjGiRRYHOqA_hXMW-9IpyKL2A.roa (raw, json)
Hash identifier: UARbe7ZdYm0IASj65RHs1SGwp0gq/L7f45msDM+RJ6M=
Subject key identifier: ED:5B:23:1A:24:51:60:73:AA:03:F8:57:31:6F:BD:22:9C:8A:2F:60
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02BAA9EE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7VsjGiRRYHOqA_hXMW-9IpyKL2A.roa
Signing time: Tue 12 Apr 2022 07:55:22 +0000
ROA not before: Tue 12 Apr 2022 07:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 45.152.197.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.147.30.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:e841::/32 maxlen: 32
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45787630 (0x2baa9ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 12 07:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed5b231a24516073aa03f857316fbd229c8a2f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:02:5d:c5:8e:77:4c:fc:54:a0:47:25:01:
7d:a6:59:a2:f8:39:91:ec:51:20:93:85:7a:57:80:
50:34:1a:73:94:34:19:e3:39:ab:36:08:f5:a6:d1:
b4:c7:df:05:3f:f2:5e:d7:b3:87:ea:ea:97:09:1b:
e6:bf:d3:9f:94:ec:99:ac:84:48:69:59:63:f5:9e:
55:51:03:bb:28:aa:ec:e2:f5:cc:89:bb:28:24:d4:
bb:ac:21:f1:9b:5a:91:23:27:87:0e:a6:f3:fa:f1:
3f:22:09:d6:b3:5e:20:b4:23:5c:44:62:74:72:1d:
c6:f3:fd:f4:c1:46:6c:1b:fa:9f:ed:7d:f3:40:ed:
1c:e4:ba:69:86:a5:4c:52:df:e4:14:d0:c4:83:31:
f3:9b:c8:a8:c8:df:00:70:3c:fc:78:c8:d8:06:89:
db:bf:f9:5f:83:cf:ff:aa:80:81:98:de:df:e6:b9:
af:8d:fe:9d:02:68:e0:06:4f:35:0a:03:ea:5a:f6:
b5:56:c6:95:8d:d2:6c:79:7d:df:1a:63:7d:77:e4:
c3:76:7d:cd:7c:b2:85:92:ef:15:da:b0:86:78:8b:
eb:6f:27:e6:d2:eb:a9:d4:3d:76:b2:1d:8d:e9:e7:
16:27:d2:1d:fe:4e:19:cc:2e:5f:cc:78:46:01:1d:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:23:1A:24:51:60:73:AA:03:F8:57:31:6F:BD:22:9C:8A:2F:60
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7VsjGiRRYHOqA_hXMW-9IpyKL2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.30.0/23
45.152.197.0/24
IPv6:
2a0f:a01::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:e841::/32
Signature Algorithm: sha256WithRSAEncryption
39:b2:ef:79:14:6e:ea:3e:eb:b6:ee:f2:98:7a:c9:7a:af:11:
3b:a8:ff:75:3f:0a:4e:24:d8:1a:6b:ff:62:b7:c4:95:8d:c8:
f0:7d:f5:03:d8:f6:9e:1d:00:01:91:6a:ea:40:7a:95:cb:33:
7c:0c:c5:58:43:7f:49:73:5e:10:7b:13:7b:c7:34:81:68:1d:
23:11:e4:9b:b5:b5:2d:73:2e:88:89:50:03:bd:ca:21:bc:74:
82:a5:6d:80:0b:6c:13:55:bd:2a:e2:d7:28:a8:49:10:77:19:
a8:32:a9:aa:73:ab:90:61:7e:33:6f:8c:b4:00:8e:7d:76:78:
20:7c:dd:dc:52:d2:2c:c2:71:bd:dd:c7:27:77:7a:dd:93:cd:
f4:c8:06:d7:a1:88:56:9e:63:81:c6:d8:86:8f:82:ab:af:8d:
44:3f:08:29:3c:61:99:a7:d1:25:6a:bc:6e:15:65:70:c2:6b:
fe:5f:31:86:cb:a7:4f:54:c1:29:e9:66:9c:88:db:9e:40:33:
23:71:a5:48:eb:76:44:76:3d:b1:d9:9d:a3:9b:d7:93:13:b0:
52:aa:c4:4e:ea:d4:8b:10:99:49:2a:2f:8e:3c:6f:f7:4d:34:
2c:7f:a1:94:fc:de:8c:bf:1c:c4:ad:e4:f5:42:6c:e4:3a:2f:
66:90:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:24 2025 by rpki-client