Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JN-qK6XIQE0pSIYFjQAGLOkIZkc.roa
File: JN-qK6XIQE0pSIYFjQAGLOkIZkc.roa (raw, json)
Hash identifier: 6G8h256Rrss5EcjW8KyfhgnkxJTCMfQEGblxXq8gPFQ=
Subject key identifier: 24:DF:AA:2B:A5:C8:40:4D:29:48:86:05:8D:00:06:2C:E9:08:66:47
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A27977
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JN-qK6XIQE0pSIYFjQAGLOkIZkc.roa
Signing time: Fri 28 Jan 2022 13:11:32 +0000
ROA not before: Fri 28 Jan 2022 13:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
2a0f:a03::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
2a0f:a02::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27425143 (0x1a27977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 28 13:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24dfaa2ba5c8404d294886058d00062ce9086647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:e0:21:60:be:7c:a3:18:73:11:c8:c3:0e:
22:12:6a:68:dc:0c:6e:6c:92:8b:9d:ce:33:d2:e4:
7d:f9:6d:8c:67:04:83:dd:81:28:47:66:9c:1f:c4:
12:94:67:5f:81:ce:7d:6e:c4:d5:0b:a8:30:49:17:
69:78:44:fa:1a:74:e3:d1:8c:16:7a:d1:16:dd:d3:
ff:ad:ad:a7:cb:db:6a:e4:fd:4c:6f:a9:52:fd:f7:
75:16:8b:e7:72:62:8d:32:21:60:16:26:8d:d5:a1:
8e:90:8c:55:d3:8e:4d:bb:b0:0d:98:fa:1e:37:b8:
f4:42:d0:bb:e7:7e:8f:83:11:0a:d9:80:69:8c:28:
ce:44:73:6c:1d:55:4a:87:f1:3f:eb:f0:7d:82:c1:
f6:89:ec:91:44:89:cc:9e:8b:6f:1e:c7:96:a7:f1:
b1:6a:c8:fe:59:fd:b9:6e:dd:a2:2c:bf:bb:64:fd:
dd:9f:11:d1:de:d7:85:37:5c:f2:81:07:db:18:55:
73:65:66:a2:7c:53:8d:c7:7e:fe:59:85:5b:1c:4b:
6a:2b:d5:de:17:74:e0:a0:41:a4:cb:c0:b5:69:2f:
58:69:30:e1:15:67:7a:34:f7:94:6c:1c:fc:ee:ea:
8a:e2:5a:8e:2a:56:ac:3b:3e:23:d9:f9:d1:89:01:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DF:AA:2B:A5:C8:40:4D:29:48:86:05:8D:00:06:2C:E9:08:66:47
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JN-qK6XIQE0pSIYFjQAGLOkIZkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
45.137.86.0/24
193.111.4.0/23
193.111.18.0/23
IPv6:
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:da40::/29
Signature Algorithm: sha256WithRSAEncryption
70:86:b3:fd:f8:58:b5:8c:02:72:91:13:fb:48:bf:30:f6:c7:
1f:16:d5:25:7a:b3:91:a9:6d:a9:64:a4:4c:ed:1e:89:0c:af:
fe:ec:51:ed:2e:3b:61:49:22:6f:b1:33:61:d0:9b:c6:82:62:
5d:c5:13:9f:6c:fc:57:83:da:9d:57:e9:b9:14:cf:17:85:d6:
18:37:31:18:b1:24:12:ad:77:db:9a:c8:ca:ae:6c:a9:22:fd:
25:95:93:b1:6b:6d:4f:8c:aa:a6:af:4d:da:17:3b:e5:49:7f:
e6:8e:ae:b1:63:69:3e:c6:82:9f:7b:53:2a:44:f8:9f:d5:98:
6e:3a:ba:f7:ae:ab:cb:e3:75:b1:56:8a:3a:1a:42:88:11:6f:
ab:1f:be:48:75:2a:9a:9d:79:1e:71:bc:ed:8b:ec:c6:6f:4c:
94:22:3b:93:38:27:06:bf:ae:d1:75:18:4a:41:6e:a7:04:68:
3b:67:ef:22:cd:c3:b8:1e:7c:ed:98:71:d2:c4:05:bb:77:7e:
0c:3b:3c:d8:64:9e:17:41:51:53:1e:29:91:7e:4f:c2:39:5f:
4d:3d:ac:76:34:99:3c:37:5f:11:e1:e9:5c:f5:aa:68:a6:ab:
27:3a:39:c3:c3:a2:bb:63:f5:dd:fc:9a:40:a4:54:0a:db:ce:
f9:0b:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:55:25 2025 by rpki-client