Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EneJxCVFgv5VnHPS04v9kUbqzfQ.roa
File: EneJxCVFgv5VnHPS04v9kUbqzfQ.roa (raw, json)
Hash identifier: 0/zFh6iLDIDB0wqlQggU6Qw4Re8bLvugMpMbNus6GEg=
Subject key identifier: 12:77:89:C4:25:45:82:FE:55:9C:73:D2:D3:8B:FD:91:46:EA:CD:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188BDC2D9E952972ED74EF70C7D406F1DFA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EneJxCVFgv5VnHPS04v9kUbqzfQ.roa
Signing time: Thu 15 Jun 2023 06:34:03 +0000
ROA not before: Thu 15 Jun 2023 06:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0e:f201:1::/48 maxlen: 48
2a10:67c5:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:c2:d9:e9:52:97:2e:d7:4e:f7:0c:7d:40:6f:1d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 15 06:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=127789c4254582fe559c73d2d38bfd9146eacdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:28:8f:a7:02:d5:e1:e3:6a:59:d7:94:e5:
d4:9e:65:93:fe:e6:4f:96:82:8c:25:30:ff:4c:cf:
88:dd:04:ad:03:b6:a0:4d:16:14:4e:52:0e:51:fd:
8d:df:33:27:b5:21:9f:70:36:8b:01:64:5d:e9:44:
77:ef:30:81:7b:a9:36:25:cc:49:0c:07:ef:2a:c9:
e6:fb:e2:73:92:41:2a:2e:0f:b0:ad:c1:00:d9:dc:
f9:fc:69:16:72:22:20:24:8d:a3:21:9e:c5:26:da:
91:47:9c:cf:f9:f5:74:ae:fe:f8:86:d5:f3:53:1d:
df:89:be:60:74:3f:49:50:42:28:c1:84:93:74:20:
42:ea:4b:b5:aa:4d:47:9e:99:28:d3:64:4c:b0:fa:
7f:8a:79:ce:3f:9c:34:b5:df:24:8e:0c:90:7c:a7:
6f:a7:53:ec:50:6d:a2:97:35:a1:92:8f:29:2c:89:
da:09:0d:6b:95:7a:62:e1:1c:65:01:1f:d1:18:48:
4e:4f:e4:5e:5c:69:0f:e9:8d:64:05:25:09:31:ee:
67:bf:b8:9a:0e:35:46:46:1f:1d:d0:aa:6a:e6:5c:
e5:b4:83:8a:10:dc:4f:e1:c1:0c:a9:ab:b0:3a:0c:
d4:67:59:d7:c1:e2:10:f9:42:e3:9a:65:9d:4a:6a:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:77:89:C4:25:45:82:FE:55:9C:73:D2:D3:8B:FD:91:46:EA:CD:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EneJxCVFgv5VnHPS04v9kUbqzfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0c:4880::/29
2a0c:9247:1::/48
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a01::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:e940::/29
2a10:67c5:1::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
2a13:18c0:1::/48
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
1b:f4:7f:e7:1c:07:25:ee:02:a2:d8:b9:67:62:94:38:c9:1e:
b3:ca:7f:6e:fb:bc:18:7a:a7:ed:3a:20:d7:5b:03:70:d1:9c:
3c:40:d6:a8:32:48:a1:43:68:10:ee:f9:0d:d8:65:ef:76:8a:
19:dc:24:3d:dd:9d:e5:b6:17:fe:a2:e0:e3:53:4b:e0:cb:c3:
d5:64:e0:1a:a1:f0:f3:15:e1:f0:ac:52:2d:2d:ad:be:11:2e:
f7:45:5e:2a:d5:28:36:91:fb:dd:e5:29:e7:75:af:ae:76:a1:
5f:62:27:bb:15:bd:21:0e:ca:8a:f8:67:5f:69:3a:98:f5:f5:
c5:49:ec:33:16:1c:44:d8:69:2a:90:1b:67:cb:1d:06:86:af:
68:58:e4:9b:51:83:38:70:3b:e1:95:74:20:e0:f0:ce:0a:65:
b5:65:5a:13:d4:c9:67:79:a4:11:ae:75:93:55:8a:13:cd:2c:
4e:f8:ff:28:d1:69:c9:43:5a:eb:8d:11:05:87:7c:bc:9a:74:
d2:20:6d:59:0a:c3:46:1e:51:8d:3e:c8:6a:98:4f:25:b8:f6:
f9:99:66:ba:80:89:53:b6:9b:49:67:94:d8:b3:68:e5:12:d0:
5f:17:9f:bb:ed:17:ed:90:bb:74:af:c3:0b:21:b4:43:d5:03:
24:62:b3:18
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAYi9wtnpUpcu1073DH1Abx36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNjE1MDYzNDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjc3ODljNDI1NDU4MmZlNTU5YzczZDJkMzhiZmQ5MTQ2ZWFjZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt78oj6cC1eHjalnXlOXUnmWT/uZP
loKMJTD/TM+I3QStA7agTRYUTlIOUf2N3zMntSGfcDaLAWRd6UR37zCBe6k2JcxJ
DAfvKsnm++JzkkEqLg+wrcEA2dz5/GkWciIgJI2jIZ7FJtqRR5zP+fV0rv74htXz
Ux3fib5gdD9JUEIowYSTdCBC6ku1qk1Hnpko02RMsPp/innOP5w0td8kjgyQfKdv
p1PsUG2ilzWhko8pLInaCQ1rlXpi4RxlAR/RGEhOT+ReXGkP6Y1kBSUJMe5nv7ia
DjVGRh8d0Kpq5lzltIOKENxP4cEMqauwOgzUZ1nXweIQ+ULjmmWdSmq1yQIDAQAB
o4IDDzCCAwswHQYDVR0OBBYEFBJ3icQlRYL+VZxz0tOL/ZFG6s30MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRW5lSnhDVkZndjVWbkhQUzA0djlrVWJxemZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjAYBAIAATASAwQA
LYF/AwQALYclAwQAwaTHMIHxBAIAAjCB6gMFAyoMSIADBwAqDJJHAAEDBQAqDhqA
AwUAKg7HgAMHACoO8gEAAQMFACoPCgEDBwAqDx4AASMDBwAqDx4ABFYDBwAqDx4A
CYcDBwAqDx4ACrwDBwAqDx4A3vkDBwAqDx4BAAEDBwAqDx6BAAIDBwAqDx6BEpMD
BwAqDx6BQxkDBwAqDx6BkugDBwAqDx6Bo9ADBwAqDx6Bza4DBwAqDz2AASMDBQAq
Dz2CAwUDKg/pQAMHACoQZ8UAAQMFAyoQbUADBwAqEqxAAAADBwAqEqxAAA8DBQMq
EtVAAwcAKhMYwAABAwUDKhNJADANBgkqhkiG9w0BAQsFAAOCAQEAG/R/5xwHJe4C
oti5Z2KUOMkes8p/bvu8GHqn7Tog11sDcNGcPEDWqDJIoUNoEO75Ddhl73aKGdwk
Pd2d5bYX/qLg41NL4MvD1WTgGqHw8xXh8KxSLS2tvhEu90VeKtUoNpH73eUp53Wv
rnahX2InuxW9IQ7KivhnX2k6mPX1xUnsMxYcRNhpKpAbZ8sdBoavaFjkm1GDOHA7
4ZV0IODwzgpltWVaE9TJZ3mkEa51k1WKE80sTvj/KNFpyUNa640RBYd8vJp00iBt
WQrDRh5RjT7IaphPJbj2+ZlmuoCJU7abSWeU2LNo5RLQXxefu+0X7ZC7dK/DCyG0
Q9UDJGKzGA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:28 2025 by rpki-client