Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N7ys4Tl4LQuB3quLpuUjMW5lDn4.roa
File: N7ys4Tl4LQuB3quLpuUjMW5lDn4.roa (raw, json)
Hash identifier: mvD1ZUfcta+B9NElfrFiYPi6+kQdyjvNZgvTLSseQbM=
Subject key identifier: 37:BC:AC:E1:39:78:2D:0B:81:DE:AB:8B:A6:E5:23:31:6E:65:0E:7E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188334E8937974F09F25E669084F8C0B55B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N7ys4Tl4LQuB3quLpuUjMW5lDn4.roa
Signing time: Fri 19 May 2023 09:19:24 +0000
ROA not before: Fri 19 May 2023 09:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
2a0f:e840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:4e:89:37:97:4f:09:f2:5e:66:90:84:f8:c0:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 09:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37bcace139782d0b81deab8ba6e523316e650e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:5e:7a:c0:9a:33:02:e1:28:24:f2:13:d8:
20:7a:d4:55:e5:8b:3c:a5:6a:c9:84:12:87:f8:de:
98:c7:51:2f:cf:c2:3f:cf:97:8e:b5:1c:4e:98:cb:
8b:58:3a:53:b0:fb:3e:54:c3:da:1d:96:88:71:bb:
2e:63:d4:cf:91:c7:49:c6:2e:9b:a9:85:7f:58:ba:
da:aa:7a:bf:36:d0:d4:85:5c:78:d2:f1:76:ed:92:
19:14:b9:40:55:72:b9:81:fc:37:8c:13:bf:9f:68:
fe:ad:53:e3:38:56:ff:8d:cb:22:69:8e:7d:a8:dc:
98:b2:f7:ff:55:ee:c6:2b:82:4b:b8:e3:e6:61:48:
73:6b:72:31:9c:6a:30:8f:9d:29:a1:66:23:5c:52:
bd:13:00:10:6e:c8:5a:87:c7:d6:18:6c:46:5e:dd:
89:51:5d:bb:b6:79:ae:b2:b4:2e:3b:71:60:13:c7:
5e:94:f9:fc:3a:79:df:47:b2:c4:29:b8:0c:9c:4d:
bf:75:93:72:92:1e:c0:b7:1c:62:00:8d:6d:37:b6:
3a:89:22:65:22:ea:6e:f4:e6:77:21:6a:85:ff:8a:
02:1d:91:c3:f0:ae:49:f5:25:77:8f:de:c9:01:75:
fe:af:d6:c5:8d:9a:54:17:c1:ac:72:72:f0:f4:8b:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BC:AC:E1:39:78:2D:0B:81:DE:AB:8B:A6:E5:23:31:6E:65:0E:7E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N7ys4Tl4LQuB3quLpuUjMW5lDn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
45.135.37.0/24
93.190.246.0/23
IPv6:
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
1d:e4:df:a8:7b:8c:e6:69:0b:41:1b:6d:30:1b:0a:c3:b8:50:
16:53:96:f3:a8:14:d8:e5:24:19:97:7b:1c:f3:ec:bc:57:c9:
7d:19:6b:df:ad:69:35:10:7b:8d:e1:a4:6d:28:9f:9a:8c:c2:
df:5b:d0:80:f2:1e:50:80:e1:45:a1:1c:76:ed:fd:b8:7f:1f:
ab:46:f9:5e:6b:58:e8:5d:01:94:fc:9c:9a:a7:1e:72:bb:96:
da:60:12:f6:cd:26:a3:98:15:7f:2f:db:98:32:00:b9:89:fe:
75:9b:69:73:de:80:40:8b:0f:4c:59:38:60:6f:41:1c:9c:93:
43:13:9d:93:16:42:32:5f:98:e2:fc:81:f4:ac:b3:31:b1:ae:
07:66:48:cd:1f:8c:96:73:a6:56:d7:63:b8:39:67:8c:8b:c9:
f4:e6:81:0f:83:d8:67:88:60:27:9b:23:fa:0e:1e:e8:e3:98:
ba:5c:43:01:eb:bd:a3:97:43:b8:64:4e:f0:55:d4:7a:50:5f:
ab:fb:cd:4f:68:f0:7e:6e:09:8c:ec:42:52:e3:98:dc:b8:32:
1f:d1:4e:a4:64:bd:bd:36:15:b9:4f:83:ab:69:20:ec:bf:80:
24:95:53:42:9f:2d:42:54:b5:7e:fb:82:e3:c0:ed:87:2c:50:
5c:b5:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:47 2025 by rpki-client