Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IpoHrVsq5s-awO8oH8sZrAIIBxs.roa
File: IpoHrVsq5s-awO8oH8sZrAIIBxs.roa (raw, json)
Hash identifier: Y2IC0njFGF1H0HeNnxsATiU07Ude98cLqC8nmiOkyfI=
Subject key identifier: 22:9A:07:AD:5B:2A:E6:CF:9A:C0:EF:28:1F:CB:19:AC:02:08:07:1B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186BB470BEF8D6FB8E1D25B457F19CADD60
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IpoHrVsq5s-awO8oH8sZrAIIBxs.roa
Signing time: Tue 07 Mar 2023 08:54:00 +0000
ROA not before: Tue 07 Mar 2023 08:54:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 193.41.87.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:7f02::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:4880::/32 maxlen: 32
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:47:0b:ef:8d:6f:b8:e1:d2:5b:45:7f:19:ca:dd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 7 08:54:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=229a07ad5b2ae6cf9ac0ef281fcb19ac0208071b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:40:e6:31:7b:53:3d:e9:d9:94:1c:70:22:
ac:9b:74:cd:66:e5:34:01:42:b6:bc:ab:e8:c8:98:
30:28:8e:bc:1b:81:99:2e:35:87:82:e5:80:09:08:
d6:d2:8c:04:d5:3e:65:a0:70:9d:88:dd:0c:c6:80:
8c:8e:40:0f:d7:b8:22:4d:a1:fa:b3:41:2c:24:98:
04:c9:98:31:fc:6d:b6:00:bd:63:c4:9e:37:ec:b4:
a0:45:7c:bd:f3:df:df:17:1e:fe:84:3f:ab:93:08:
3d:69:b4:5b:fe:98:70:80:ce:a2:01:cb:fe:ea:32:
67:16:d4:db:eb:1a:19:83:fa:2b:69:07:23:35:6d:
f6:94:df:a7:2e:4c:78:65:d4:de:c3:70:67:d1:ea:
42:75:f5:4e:4a:bb:92:92:68:3f:0a:d7:65:47:5e:
b4:d0:e4:44:98:76:8b:fb:70:4a:6a:fe:b1:a5:d4:
d6:f9:10:4e:d8:e7:06:17:ad:ec:33:51:6c:91:78:
fa:61:48:bc:63:30:fe:3b:09:98:85:39:ff:ca:62:
e5:39:9a:23:bc:ad:47:bd:00:6a:67:a9:d9:7d:d6:
d4:9d:10:54:d0:e8:ad:0a:a6:66:8b:c1:43:77:58:
bd:b9:74:0d:43:36:da:95:e2:15:76:c5:3f:25:d9:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9A:07:AD:5B:2A:E6:CF:9A:C0:EF:28:1F:CB:19:AC:02:08:07:1B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/IpoHrVsq5s-awO8oH8sZrAIIBxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.87.0/24
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/32
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::-2a0f:7f02:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e842::/32
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
2f:de:4a:83:b8:b0:ce:b9:aa:ba:29:e3:f8:33:d8:e6:db:73:
0c:bd:1e:8a:10:b0:30:60:fa:3b:af:51:90:1a:04:9b:16:a2:
e0:24:76:e5:1a:66:c1:7e:fe:bb:ac:b9:06:94:f6:fa:71:df:
d7:78:39:20:b3:d3:02:bd:cc:5f:18:c3:86:b9:8f:a4:7b:2e:
18:51:ee:20:1a:e7:c2:62:8a:84:b8:68:28:6e:85:14:96:19:
94:7b:25:bf:41:ee:bb:bd:84:9a:7f:80:3b:a6:cd:f2:05:a7:
fc:b2:2a:69:c8:2f:ca:f7:07:bd:83:6c:2f:36:f9:51:54:9f:
52:59:d2:aa:cc:e1:b0:f7:55:4d:40:98:fc:ef:cb:cb:7d:0f:
03:75:15:a9:f9:9b:29:67:97:c7:82:8a:c3:a7:40:09:11:1e:
fc:14:9d:42:c8:dd:0c:a1:27:f4:89:2a:07:a4:49:93:6d:8e:
45:62:9b:da:90:6f:3a:aa:d9:33:7d:63:f7:ab:7e:f8:60:48:
f3:18:36:84:87:3b:cb:65:3d:24:e1:de:40:b8:73:9e:b6:2d:
69:39:c8:40:ad:75:03:77:dd:64:a6:7b:3f:a4:44:95:fe:ba:
dd:a8:66:50:5a:6d:dd:a8:4b:2e:0e:ca:2b:05:0e:93:59:95:
ca:c0:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:52:50 2025 by rpki-client