Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EL2i1G8rYdIgLssTu_uqUETWIwI.roa
File: EL2i1G8rYdIgLssTu_uqUETWIwI.roa (raw, json)
Hash identifier: +C8uJ/7EiiLKtrVJFd/n0p/X/ah5dnWALA5eP1l7cDg=
Subject key identifier: 10:BD:A2:D4:6F:2B:61:D2:20:2E:CB:13:BB:FB:AA:50:44:D6:23:02
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0185EE9B39710B53C8618C2C4D399BD7C135
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EL2i1G8rYdIgLssTu_uqUETWIwI.roa
Signing time: Thu 26 Jan 2023 15:03:48 +0000
ROA not before: Thu 26 Jan 2023 15:03:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.128.79.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.154.247.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
45.128.25.0/24 maxlen: 24
93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
2a0f:dec0::/32 maxlen: 32
2a0f:7d01::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:9b:39:71:0b:53:c8:61:8c:2c:4d:39:9b:d7:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 26 15:03:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10bda2d46f2b61d2202ecb13bbfbaa5044d62302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:9e:a5:87:d1:8e:e1:6a:d3:dd:85:a7:59:
88:dc:c8:76:ea:ea:bb:81:02:c8:5a:15:66:67:7a:
1b:6b:fc:dd:a3:cc:0b:cd:74:6b:c3:ff:dd:30:c6:
2e:48:a6:31:7c:17:e8:2b:d1:ad:2a:a4:56:73:d3:
9b:c9:d3:df:ff:0f:82:72:a1:68:d2:6b:53:5f:39:
05:e7:6d:2a:43:02:fd:ac:46:98:0f:29:8d:70:7e:
3b:32:5a:38:7c:09:6e:66:27:92:26:ee:20:50:28:
b5:a1:b0:d9:a4:7f:89:46:37:02:df:56:15:fe:88:
7f:24:ae:44:7c:2f:4a:78:14:18:7e:c0:a6:31:52:
a4:9b:ef:d5:1d:ac:f2:6b:b1:cb:80:ea:1b:de:01:
37:5d:3a:80:52:92:c7:d0:c2:ec:3d:c0:00:5d:46:
30:7a:fa:5e:3b:88:39:bc:94:b5:51:d9:38:cb:7d:
8d:7c:d6:0a:92:52:32:26:e7:90:75:ae:bc:4a:24:
20:4a:33:66:ee:9a:50:52:66:ac:df:66:db:9a:58:
ac:f2:46:2b:2d:76:2c:c6:a0:fb:37:a6:1f:06:a5:
31:13:d2:bb:34:12:15:a6:75:93:a2:25:33:3f:5d:
58:0c:14:72:6e:9b:15:51:d9:4d:26:42:c0:59:66:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:A2:D4:6F:2B:61:D2:20:2E:CB:13:BB:FB:AA:50:44:D6:23:02
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EL2i1G8rYdIgLssTu_uqUETWIwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
45.128.79.0/24
45.129.127.0/24
45.135.37.0-45.135.38.255
45.146.88.0/24
45.154.229.0/24
45.154.247.0/24
93.190.246.0/23
IPv6:
2a0f:7d01::/32
2a0f:dec0::/32
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
69:29:0e:55:a9:2a:89:06:2c:de:a5:de:fd:d2:ff:d6:dc:13:
7a:51:1a:1d:57:8f:d0:ad:dc:ca:3b:f8:85:03:20:b7:36:96:
f0:8e:5c:d7:8f:53:26:9a:25:c2:f0:67:6e:99:55:54:c6:89:
e7:87:08:f4:5a:fe:07:28:c7:d3:31:cb:be:8f:07:77:e2:63:
bf:42:db:8b:70:6b:a3:7f:f7:f6:74:57:36:b7:cf:69:50:bb:
aa:e9:ed:d5:94:38:bd:15:c2:95:b6:22:c7:37:3d:f6:3b:65:
bc:6d:75:cc:61:e4:38:4c:24:fa:d7:c1:d7:9f:24:76:09:43:
73:84:3f:5e:bf:40:ac:01:4d:05:69:96:58:69:a6:87:a7:ad:
03:7e:e8:19:a9:51:46:7e:e6:67:04:ee:37:06:49:33:99:87:
a7:f1:9b:b3:2b:88:0d:0e:1e:d8:07:07:70:49:8f:71:81:4c:
1d:1b:e5:61:e7:41:fd:9e:3b:11:34:ee:ef:80:4f:eb:03:24:
52:14:a1:f3:f7:f8:ee:c4:59:21:0b:c5:83:b2:ce:4f:01:22:
fc:12:8a:4a:aa:d4:06:d6:15:6c:ed:ab:f9:2b:a3:d7:ad:19:
d3:14:a7:f3:25:91:a4:11:2e:a0:af:f9:95:27:c8:a4:4a:18:
43:da:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:04 2025 by rpki-client