Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RL815SwatyerQEKTEnKvY-TxGpI.roa
File: RL815SwatyerQEKTEnKvY-TxGpI.roa (raw, json)
Hash identifier: AzwyS4b7lz/42FEfOXXBTb4k5Dqb8fV1Sesh0+hnlYg=
Subject key identifier: 44:BF:35:E5:2C:1A:B7:27:AB:40:42:93:12:72:AF:63:E4:F1:1A:92
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0185111BCFC848053FD32F69D02C15650688
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RL815SwatyerQEKTEnKvY-TxGpI.roa
Signing time: Wed 14 Dec 2022 14:48:33 +0000
ROA not before: Wed 14 Dec 2022 14:48:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30633
IP address blocks: 193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:1b:cf:c8:48:05:3f:d3:2f:69:d0:2c:15:65:06:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 14 14:48:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44bf35e52c1ab727ab4042931272af63e4f11a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:e1:cf:1a:91:32:23:3f:bd:43:10:17:08:
81:62:ef:bc:8e:89:15:5f:e9:73:1d:3b:ee:0b:35:
e1:fb:2e:8d:33:2d:f5:4b:71:77:0f:ed:e1:f2:72:
07:c5:ab:cf:7e:b0:ca:c0:63:f5:61:34:48:00:80:
39:16:99:74:b2:f0:2c:82:c0:e0:f7:cb:0b:f9:18:
c6:f7:be:be:29:ed:96:0f:05:6c:38:af:87:6a:24:
4c:91:cb:87:fa:1a:8c:d5:eb:ad:4c:8a:c2:32:b4:
dd:61:1c:fc:df:80:0a:22:6f:c3:a5:fb:0f:33:8e:
d6:c5:b9:05:f1:3b:69:7d:72:81:b6:54:79:f3:c4:
32:bd:d0:fa:ef:24:08:9d:9d:28:2b:9e:49:fa:fc:
5f:3c:44:a3:55:10:1a:46:38:33:65:4e:f8:6f:62:
08:99:8a:e6:83:28:30:d5:6d:89:f0:30:bf:73:f4:
f1:20:fd:0e:8f:21:28:68:96:7b:ba:79:02:2b:48:
2e:f2:3e:27:4a:59:b5:08:ba:cd:23:c9:1f:b1:d8:
f7:19:f7:72:94:4d:03:67:68:66:f3:d7:e4:c5:0a:
f9:72:fd:60:55:f8:17:af:96:2f:0e:54:fc:91:ee:
65:19:88:75:6a:16:38:80:af:71:2c:ce:58:91:18:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BF:35:E5:2C:1A:B7:27:AB:40:42:93:12:72:AF:63:E4:F1:1A:92
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RL815SwatyerQEKTEnKvY-TxGpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a0f:e842::/32
2a0f:e940::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
7c:a0:dd:ec:f6:cc:79:e3:9a:f6:73:7d:fb:63:da:71:a5:1d:
88:8a:9b:76:1e:39:a8:ba:f9:b4:7f:c3:a4:00:d4:c7:a7:31:
43:f0:63:53:2f:93:50:77:7f:2b:db:99:2d:34:f8:3b:25:4b:
95:8f:3c:bf:d3:d7:3a:1b:a1:b6:8e:70:eb:7b:9d:85:48:ff:
31:10:4d:8d:41:0e:56:20:bc:46:e2:de:ce:0e:86:91:f0:66:
37:cf:1f:64:f9:8a:f0:17:62:6c:6f:df:4a:d9:ed:a3:34:19:
72:9d:20:ae:a5:26:35:19:29:fa:6c:f4:09:54:13:6a:18:2f:
7c:9a:19:eb:c3:35:b2:08:f0:19:af:cd:cd:43:1b:60:f6:fc:
86:f1:3a:57:80:c7:7c:d9:ea:09:3a:89:18:f1:dd:50:ec:50:
d0:29:cb:78:3b:58:1a:7d:fc:60:5b:84:ae:04:34:20:b9:e9:
f0:c9:aa:8b:14:b3:1f:f5:e1:c6:f9:08:30:3c:4b:62:5d:fe:
45:51:d9:b6:d6:2f:c2:98:45:e2:4a:9c:8c:e2:be:5a:6a:4e:
23:32:0a:e5:f9:7b:be:bc:60:eb:15:82:ac:f6:ff:66:79:c0:
be:b4:e7:6b:53:0d:35:0d:b6:8d:bf:59:22:91:5c:18:d2:79:
47:1c:7b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:39 2025 by rpki-client