Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AZGwQvd3Th1q_WkofLUDa9yTDT0.roa
File: AZGwQvd3Th1q_WkofLUDa9yTDT0.roa (raw, json)
Hash identifier: XKCP1lgr+dMYGqzVMayMN0pBwTioLhrsrkB5MZPrZxc=
Subject key identifier: 01:91:B0:42:F7:77:4E:1D:6A:FD:69:28:7C:B5:03:6B:DC:93:0D:3D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018722FA7C978B0249D074BAA5A5F00755E9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AZGwQvd3Th1q_WkofLUDa9yTDT0.roa
Signing time: Mon 27 Mar 2023 12:10:53 +0000
ROA not before: Mon 27 Mar 2023 12:10:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:4880::/32 maxlen: 32
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:fa:7c:97:8b:02:49:d0:74:ba:a5:a5:f0:07:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 27 12:10:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0191b042f7774e1d6afd69287cb5036bdc930d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:ac:ee:73:d7:1e:81:22:08:b2:5e:90:60:
d6:d1:40:f9:55:0d:82:72:28:ab:bb:27:18:e4:78:
b8:b7:f5:69:bf:d2:c6:97:e3:9b:85:5d:9b:ae:73:
58:28:df:95:c5:54:33:e0:01:fd:96:dd:18:da:30:
fc:ae:be:ca:d8:b3:9a:c5:79:88:c2:34:f3:8a:28:
af:9c:da:0f:b1:f6:3e:43:06:1b:e6:ee:03:25:a8:
ae:5a:8c:4e:b5:7a:b6:81:79:b3:1a:67:af:0f:af:
eb:58:21:05:fb:f2:02:21:47:42:20:37:27:95:6e:
76:5a:25:22:56:88:23:d6:9e:50:01:57:66:d1:0b:
fe:9d:b0:5a:39:62:fd:f9:a9:3c:4c:e0:7c:bf:e6:
4e:db:e2:e5:37:a7:86:6f:80:f7:ce:3d:04:29:cf:
52:47:2a:4e:98:70:a9:3c:c3:1e:47:f1:fc:5a:52:
6b:7c:93:a4:29:da:63:32:5e:bf:d9:1a:61:2b:f7:
fd:06:d3:d0:2e:c6:89:f5:6d:bf:38:be:92:62:80:
49:2a:b7:08:42:bd:fc:41:a4:0c:05:11:ac:f1:04:
fa:50:48:8a:b8:c2:7b:1c:94:f2:8d:06:24:19:72:
51:27:19:0f:0b:40:2e:e2:b2:e9:10:ed:7b:44:7a:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:91:B0:42:F7:77:4E:1D:6A:FD:69:28:7C:B5:03:6B:DC:93:0D:3D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/AZGwQvd3Th1q_WkofLUDa9yTDT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/32
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a0f:e842::/32
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
77:7a:f7:3a:d8:1d:57:ec:43:11:46:ff:3e:0f:be:1e:dc:b2:
a4:53:b4:cc:f7:f9:d2:6b:12:16:8a:f7:15:72:a1:7f:96:0b:
a8:c7:94:06:b7:f9:09:3a:40:6b:1c:78:77:8e:dc:0b:d7:71:
06:ba:57:43:dd:63:e5:90:af:af:79:28:f4:eb:d4:43:95:ba:
b8:73:41:75:ce:58:d0:03:4d:22:17:60:1e:5c:b0:3e:76:f2:
b8:9f:62:86:38:41:af:9d:ab:8a:91:05:f5:f3:6a:1e:5e:48:
04:12:0a:4b:06:67:bc:bf:30:f9:f2:01:f8:b7:e6:f4:be:51:
98:dc:e7:b7:4f:64:f3:77:3f:3e:ee:fa:41:1d:81:8f:6b:8e:
e4:3d:7c:b0:d6:e5:d9:2a:a6:7a:d7:d6:e7:2c:da:22:c1:8b:
8c:1a:e9:ad:30:14:d2:fc:9b:6c:8a:00:f6:95:81:33:a5:83:
32:60:ab:5c:c6:b9:ca:df:3f:fc:a0:bb:03:c5:f1:c2:e0:df:
7c:08:06:de:22:f5:9c:d6:cb:76:6c:6c:31:dc:bd:bf:3f:13:
72:7d:3c:65:2e:37:71:1f:a2:aa:8e:3d:d9:e2:de:86:21:a6:
f0:7f:f4:ec:49:99:2c:0a:73:b2:d0:37:0e:78:72:8a:dc:51:
a9:a7:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:36 2025 by rpki-client