Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JDgbf4LlcWnY_L9GZkzpaRywGZw.roa
File: JDgbf4LlcWnY_L9GZkzpaRywGZw.roa (raw, json)
Hash identifier: xlTiuf5mzI1fORygW855uRBFpU6TIoX/+w6tr/RRhCk=
Subject key identifier: 24:38:1B:7F:82:E5:71:69:D8:FC:BF:46:66:4C:E9:69:1C:B0:19:9C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0340859A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JDgbf4LlcWnY_L9GZkzpaRywGZw.roa
Signing time: Mon 23 May 2022 08:16:29 +0000
ROA not before: Mon 23 May 2022 08:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 45.152.197.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.147.30.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:e841::/32 maxlen: 32
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54560154 (0x340859a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 23 08:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24381b7f82e57169d8fcbf46664ce9691cb0199c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:98:7c:c7:f8:ab:44:92:13:9c:9d:61:75:
14:33:ad:13:4e:9f:8b:ca:09:2b:9b:cf:e4:14:28:
d5:8e:e1:fe:b9:e7:91:46:9f:80:05:a5:e8:a3:9e:
6f:ac:ff:e5:78:68:87:b9:19:7c:58:67:1a:fa:65:
5c:69:fc:93:e0:53:87:92:a5:76:5f:2c:08:f8:c9:
c9:a9:b2:cd:38:dc:c0:13:7e:b8:1e:e9:9e:bc:51:
20:e0:f7:0a:f1:ab:23:84:5f:bb:8f:71:a1:34:b1:
15:0a:5a:fe:c4:2c:2c:2e:d9:a6:33:61:20:64:26:
fb:60:3d:b0:89:e2:7f:dd:75:6e:fe:f7:76:ed:01:
da:21:78:74:12:59:f3:91:27:4d:e3:47:be:37:16:
6e:ff:ce:d6:1d:6d:26:19:4b:20:65:b9:72:8d:8f:
f6:3b:53:75:ce:6b:b2:da:a6:c8:11:10:e5:1b:98:
0b:00:42:8b:27:eb:75:1b:85:b3:b5:8f:80:6f:2f:
ea:86:0d:c4:7e:26:dc:91:7d:94:fb:58:80:9c:c0:
9b:87:77:80:60:2d:b5:26:89:ea:a5:fc:76:dc:c8:
f1:00:a4:57:28:95:f1:23:da:4f:ad:29:aa:cd:72:
de:87:4d:6c:0b:56:ce:4a:ff:24:96:17:56:d5:b6:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:1B:7F:82:E5:71:69:D8:FC:BF:46:66:4C:E9:69:1C:B0:19:9C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JDgbf4LlcWnY_L9GZkzpaRywGZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.30.0/23
45.152.197.0/24
IPv6:
2a0f:a01::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:e841::/32
Signature Algorithm: sha256WithRSAEncryption
30:2c:4a:23:83:52:29:28:b1:3c:90:75:c8:30:d8:c9:d0:d1:
c6:a0:3f:e6:50:3b:8e:66:14:84:bf:cd:fe:60:6f:11:2d:d7:
68:f7:95:d3:d9:dd:fd:e3:d0:ab:3c:dd:32:b1:d4:e3:ad:53:
e7:8f:16:af:16:2f:79:a5:32:a7:84:fb:39:f2:b6:ee:d5:c7:
3a:98:93:9f:b4:6d:4a:84:8c:5a:46:bf:c9:fe:d5:1d:30:27:
79:c8:74:ca:05:dc:bc:dc:a1:37:24:eb:98:e7:16:c2:ce:7d:
ea:2f:42:1f:f8:77:70:a6:28:3e:43:03:d3:50:1f:0e:29:63:
c3:8f:a3:db:c7:00:c2:6a:de:2d:f1:20:83:dd:3f:e2:f0:86:
e0:3b:c0:cf:76:37:4d:66:b9:48:be:82:26:94:c6:c6:b3:b3:
55:0d:01:d1:09:c2:d5:21:3e:0d:ed:da:c4:a8:1b:f9:5e:42:
f3:61:c2:ea:ef:1d:f2:96:b3:51:e0:07:67:de:e9:d4:67:b6:
f6:11:8e:fc:8d:f9:64:ca:a8:1c:cd:04:67:06:b4:9c:fc:0f:
94:da:e9:73:50:18:21:08:e8:ca:ff:4e:c1:f0:e0:46:37:21:
23:4b:46:94:80:9c:86:87:d9:7c:b3:a7:14:74:38:cf:7c:ba:
5d:65:bf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:06:10 2025 by rpki-client