Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CNTzqYOAye93lTUgGYUxpAcA3Zs.roa
File: CNTzqYOAye93lTUgGYUxpAcA3Zs.roa (raw, json)
Hash identifier: jQcOl3lrdQzxewFzEJiY1HLCF4tRI09+OynzhLYraNE=
Subject key identifier: 08:D4:F3:A9:83:80:C9:EF:77:95:35:20:19:85:31:A4:07:00:DD:9B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01CE847C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CNTzqYOAye93lTUgGYUxpAcA3Zs.roa
Signing time: Mon 07 Feb 2022 14:11:50 +0000
ROA not before: Mon 07 Feb 2022 14:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
2a0f:a03::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:a02::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30311548 (0x1ce847c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 7 14:11:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08d4f3a98380c9ef77953520198531a40700dd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:80:58:09:c9:38:5d:62:3b:76:39:b4:e4:
66:81:7a:4c:e5:cd:f6:fc:7d:0f:82:4e:3b:42:1c:
4a:76:2f:14:9e:f7:a1:21:20:af:68:51:64:76:22:
00:58:a8:ca:d9:e3:b1:1d:3b:76:5b:05:aa:61:11:
4c:1f:f6:3b:d5:91:ab:21:d8:0b:3a:c0:d7:cc:80:
36:1c:c6:33:82:73:aa:b1:5a:7d:ba:d4:33:77:10:
ea:86:5b:cb:b2:a7:23:71:e8:c5:b2:3d:07:d3:26:
40:4a:cb:bb:e3:a6:a7:c1:29:52:51:80:bd:77:39:
27:b3:4c:c3:88:73:d1:a5:6f:9c:4e:d6:d1:61:e9:
7c:68:7b:95:a3:63:e2:23:48:41:85:73:c5:7a:b5:
5c:30:21:0d:88:14:8f:a7:44:e8:45:e1:8e:fa:11:
c8:e2:ad:78:a9:64:4a:d8:91:3e:5e:b9:ba:d4:7e:
8a:3c:41:a4:1c:29:6e:a6:a5:b9:fc:42:97:9a:f4:
e2:92:ae:86:33:5b:22:c5:12:0a:98:af:72:5f:2a:
19:5b:6e:cf:b8:94:c1:88:97:95:81:fc:6e:e8:ea:
c2:b6:32:0a:39:4a:47:eb:5f:0f:2c:7e:d8:6e:4e:
eb:f8:07:d2:20:01:c8:95:56:6e:8d:ba:7a:2f:ac:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D4:F3:A9:83:80:C9:EF:77:95:35:20:19:85:31:A4:07:00:DD:9B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CNTzqYOAye93lTUgGYUxpAcA3Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
45.137.86.0/24
193.111.4.0/23
193.111.18.0/23
IPv6:
2a0e:2240:2::/48
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:da40::/29
2a0f:e1c7::/32
Signature Algorithm: sha256WithRSAEncryption
48:70:02:f3:21:00:16:f7:9c:84:1b:e7:f4:95:a6:dc:72:05:
20:e8:b7:3d:06:6e:c7:f4:e6:06:6c:00:5a:a3:31:80:08:ed:
1b:91:35:2f:3b:1b:3c:7a:62:58:bb:e1:9d:96:cb:0f:91:b3:
23:f9:6b:96:19:d9:7a:5b:b1:04:20:4f:b1:b4:a3:23:37:43:
c3:de:d9:49:2c:28:e1:da:59:9c:8a:07:3e:20:43:ff:77:11:
fb:41:ce:ba:0e:49:3f:5a:dc:94:68:1a:ec:c4:2c:aa:57:b8:
9c:e9:1d:1a:9c:3e:dd:bf:7c:d3:32:56:2f:eb:2a:c5:bc:6a:
a7:17:72:b8:7f:a9:4a:d7:60:92:9c:05:29:37:0c:da:c3:b9:
7a:f2:aa:33:ef:67:69:32:59:30:67:3d:b4:a0:dc:94:27:e4:
0e:13:f2:44:bd:ca:06:01:07:5f:ab:69:79:1f:e9:e4:ba:c1:
cb:ac:dd:c7:1b:31:e1:f4:ea:af:54:38:53:01:92:79:bb:4a:
85:93:34:42:ae:24:61:75:0b:78:00:b7:18:09:e1:01:0a:93:
92:45:01:c9:4e:5a:a4:75:10:d5:22:7b:b3:48:0e:61:97:ee:
10:11:83:26:89:e7:53:f3:4b:aa:24:8b:de:3e:70:8d:2f:6f:
50:98:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:54:32 2025 by rpki-client