Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ri3vvUwqgow1SkR_sVwWQZskkvg.roa
File: Ri3vvUwqgow1SkR_sVwWQZskkvg.roa (raw, json)
Hash identifier: L3c/epLZdjaCUCu1vMpMSkJki+Gk+68lSBpUeDYBs3M=
Subject key identifier: 46:2D:EF:BD:4C:2A:82:8C:35:4A:44:7F:B1:5C:16:41:9B:24:92:F8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01521BEE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ri3vvUwqgow1SkR_sVwWQZskkvg.roa
Signing time: Sat 01 Jan 2022 05:55:05 +0000
ROA not before: Sat 01 Jan 2022 05:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 45.157.37.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22158318 (0x1521bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 05:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=462defbd4c2a828c354a447fb15c16419b2492f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:ec:a8:bf:5a:a6:3a:6f:08:25:92:5f:69:
c3:80:ee:b5:1a:28:87:1a:4e:bc:e7:0c:8c:e8:ec:
16:0d:f0:50:67:7a:34:bb:2b:52:2e:7e:8f:8c:97:
a7:9b:be:8a:f2:7c:34:ad:ba:f8:12:4a:0a:54:f9:
99:a6:68:ee:a1:06:93:9e:a9:0f:fb:03:f1:d4:9d:
6f:e4:db:14:42:6c:e6:b2:85:69:ea:e9:18:62:fb:
a7:fe:9f:9a:1e:64:0e:99:70:f6:c7:1f:a6:90:60:
3f:56:08:a2:68:0a:06:5e:30:39:94:ac:1d:31:79:
12:c0:4e:98:fe:72:03:0a:30:25:71:22:ab:eb:ba:
43:a0:fe:71:b6:2b:76:23:5c:25:bd:33:de:f4:76:
34:7c:30:0e:1b:cd:c9:c9:58:b5:69:b7:4e:ef:45:
5e:1f:79:d5:71:bc:86:77:9e:e2:72:24:89:db:0f:
0e:85:79:62:bf:8b:78:69:ee:7c:1e:4b:38:d4:78:
44:25:96:78:bf:32:22:9c:76:25:30:50:b7:e4:44:
00:3b:9e:91:e8:68:6e:5e:b4:b2:60:ff:76:09:fb:
ec:58:e9:56:03:c5:7c:cb:56:26:00:5e:5f:d2:3b:
0a:f5:52:63:a1:1e:7a:28:8d:e0:2e:a2:7d:e2:6d:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2D:EF:BD:4C:2A:82:8C:35:4A:44:7F:B1:5C:16:41:9B:24:92:F8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Ri3vvUwqgow1SkR_sVwWQZskkvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.31.0/24
45.157.37.0/24
Signature Algorithm: sha256WithRSAEncryption
74:29:d0:4c:33:7b:68:6c:d7:52:c1:de:15:d6:30:85:7b:e6:
d9:e3:80:01:a9:81:b8:d0:7a:9f:3f:6f:15:d2:4c:b1:11:00:
24:19:78:0d:89:6d:66:45:9c:23:f0:8a:76:65:86:49:79:a6:
c6:f9:98:2d:30:5f:ff:e1:6f:89:3c:67:c4:4c:62:02:da:6a:
36:63:79:e5:a8:97:74:95:29:f9:e8:5e:3d:e7:58:b8:0a:b5:
6e:d9:f3:ba:af:27:54:73:9a:53:c9:ac:7f:7c:a2:d9:18:c2:
7a:e4:4a:fd:92:06:5a:10:d5:50:bc:e0:f8:3a:59:4d:57:98:
8f:6c:35:c1:b4:02:bd:52:04:35:38:6b:eb:fe:5b:5a:27:97:
b5:ec:e9:d6:7a:df:14:c8:bd:ea:b0:30:c4:dc:b2:83:74:93:
ef:50:b7:86:94:7f:b5:8a:84:a2:af:6b:e7:0f:aa:2b:3c:dd:
08:26:2d:da:4c:d1:ed:e7:40:e2:bf:8a:bf:83:b6:df:9e:0f:
d1:ac:69:ff:cf:b4:32:95:12:8d:66:05:d3:8a:62:31:20:0f:
35:0f:d8:34:55:7b:0a:0e:35:d4:69:0e:b8:a8:17:d6:b6:34:
e6:a5:ad:39:e5:bf:bb:86:c7:a5:3f:05:38:19:86:27:cc:56:
4f:02:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:17:23 2025 by rpki-client