Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EsLIZ0-mv3H3IxbkEaqElkZKEgw.roa
File: EsLIZ0-mv3H3IxbkEaqElkZKEgw.roa (raw, json)
Hash identifier: tHhDJXecf5aY06gjjHPBuuNly2Iyr7mcp+LLRhvFqU8=
Subject key identifier: 12:C2:C8:67:4F:A6:BF:71:F7:23:16:E4:11:AA:84:96:46:4A:12:0C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01B0536F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EsLIZ0-mv3H3IxbkEaqElkZKEgw.roa
Signing time: Tue 01 Feb 2022 18:16:14 +0000
ROA not before: Tue 01 Feb 2022 18:16:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
2a0f:a03::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:a02::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28332911 (0x1b0536f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 1 18:16:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12c2c8674fa6bf71f72316e411aa8496464a120c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:a8:a5:ca:a4:ff:f9:05:73:15:7f:34:08:
42:7d:69:4c:8d:5e:c8:3d:a5:a5:20:c2:2c:ed:e6:
ea:8a:f1:b4:2d:f9:02:e3:33:5a:48:d5:cc:7b:bc:
5c:64:1e:07:58:f1:0e:9d:15:87:01:04:e3:03:5b:
ea:3f:d1:a7:2a:5c:c1:a9:82:23:84:6a:50:be:df:
e7:f0:35:d9:6f:86:1e:e7:1f:a1:4d:38:a9:78:1c:
21:10:2b:83:d3:3e:b2:24:34:50:f5:c9:78:21:2f:
c0:c0:cb:2c:1e:ae:5b:00:3a:25:44:49:13:6a:b2:
72:2f:ad:38:ea:5e:4d:e2:71:3a:6d:f8:83:63:48:
9f:f1:81:55:05:4e:fd:2d:55:e9:e8:4f:7c:0e:ad:
cc:2c:7d:5f:a9:54:2a:97:90:62:64:10:7c:1a:c1:
7a:37:16:f1:ce:31:74:d7:e1:45:0a:d8:38:63:13:
89:d5:87:1c:db:7d:29:92:26:1f:44:07:f7:d5:6b:
24:c7:b3:f7:ce:ce:cf:83:ee:33:16:e3:a2:85:3b:
c0:c8:aa:ac:ff:d5:41:e8:03:d7:09:57:62:b9:71:
da:ed:3f:ad:74:45:2a:9b:ea:7b:66:6f:c9:7d:6c:
52:5a:fd:95:80:d7:2a:07:55:c7:2a:02:10:11:df:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:C8:67:4F:A6:BF:71:F7:23:16:E4:11:AA:84:96:46:4A:12:0C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EsLIZ0-mv3H3IxbkEaqElkZKEgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
45.137.86.0/24
193.111.4.0/23
193.111.18.0/23
IPv6:
2a0e:2240:2::/48
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:da40::/29
Signature Algorithm: sha256WithRSAEncryption
67:40:87:9f:c8:b4:11:0a:4d:5c:70:f3:8b:dc:be:90:f2:0f:
12:c3:c1:91:52:fa:a8:7a:95:3d:fd:d8:aa:9c:31:6d:3f:d3:
7c:15:59:92:e0:25:ee:3f:c4:62:b3:e5:39:d8:4a:6d:6b:07:
eb:9a:7e:f1:da:b5:60:dd:ba:cb:88:3b:30:83:5b:bb:d5:b6:
6a:32:a3:1a:c4:12:a0:9a:ef:46:34:94:5d:01:3a:f5:96:3c:
70:1d:fd:90:f6:10:a8:33:6f:79:d0:c7:77:21:22:ee:76:47:
e8:9a:ec:87:af:04:dc:96:1e:60:c0:a2:0c:de:eb:47:17:e4:
6a:df:8c:bf:11:98:7f:85:49:b7:4f:01:72:eb:73:6e:89:8d:
7f:3e:2a:62:ff:e1:ec:33:4a:0b:cb:da:24:a9:d4:c9:91:24:
2e:4b:3e:e7:ea:74:fe:4e:8b:76:20:3c:3d:af:d4:85:d1:6b:
71:c1:c7:1c:6a:c2:f7:aa:fb:4d:40:44:66:77:b2:7c:64:1a:
6b:f2:ff:6a:29:57:b5:cd:d8:a3:98:17:4c:51:bf:f0:36:4b:
40:c2:08:b2:7b:86:49:12:cc:24:ab:0f:e5:74:3c:44:e6:43:
dd:5b:73:0b:00:ab:8f:03:48:58:54:44:9c:f3:ef:08:00:2d:
ea:69:ff:ff
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIEAbBTbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDIw
MTE4MTYxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJjMmM4Njc0ZmE2
YmY3MWY3MjMxNmU0MTFhYTg0OTY0NjRhMTIwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALepqKXKpP/5BXMVfzQIQn1pTI1eyD2lpSDCLO3m6orxtC35
AuMzWkjVzHu8XGQeB1jxDp0VhwEE4wNb6j/RpypcwamCI4RqUL7f5/A12W+GHucf
oU04qXgcIRArg9M+siQ0UPXJeCEvwMDLLB6uWwA6JURJE2qyci+tOOpeTeJxOm34
g2NIn/GBVQVO/S1V6ehPfA6tzCx9X6lUKpeQYmQQfBrBejcW8c4xdNfhRQrYOGMT
idWHHNt9KZImH0QH99VrJMez987Oz4PuMxbjooU7wMiqrP/VQegD1wlXYrlx2u0/
rXRFKpvqe2ZvyX1sUlr9lYDXKgdVxyoCEBHf0WkCAwEAAaOCAlMwggJPMB0GA1Ud
DgQWBBQSwshnT6a/cfcjFuQRqoSWRkoSDDAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
L0VzTElaMC1tdjNIM0l4YmtFYXFFbGtaS0Vndy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBp
BggrBgEFBQcBBwEB/wRaMFgwHgQCAAEwGAMEAC1fYgMEAC2JVgMEAcFvBAMEAcFv
EjA2BAIAAjAwAwcAKg4iQAACAwcAKg7yAAACMA4DBQEqDwoCAwUAKg8KBAMFAyoP
H4ADBQMqD9pAMA0GCSqGSIb3DQEBCwUAA4IBAQBnQIefyLQRCk1ccPOL3L6Q8g8S
w8GRUvqoepU9/diqnDFtP9N8FVmS4CXuP8Ris+U52Eptawfrmn7x2rVg3brLiDsw
g1u71bZqMqMaxBKgmu9GNJRdATr1ljxwHf2Q9hCoM2950Md3ISLudkfomuyHrwTc
lh5gwKIM3utHF+Rq34y/EZh/hUm3TwFy63NuiY1/Pipi/+HsM0oLy9okqdTJkSQu
Sz7n6nT+Tot2IDw9r9SF0WtxwcccasL3qvtNQERmd7J8ZBpr8v9qKVe1zdijmBdM
Ub/wNktAwgiye4ZJEswkqw/ldDxE5kPdW3MLAKuPA0hYVESc8+8IAC3qaf//
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:12:41 2025 by rpki-client