Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/STW6iTSFxeOAb-4gVizRdbyEOKM.roa
File: STW6iTSFxeOAb-4gVizRdbyEOKM.roa (raw, json)
Hash identifier: VMSCqFTNhGR89q/c36llJBs2YE8yTCP+7YIe/yMjvMg=
Subject key identifier: 49:35:BA:89:34:85:C5:E3:80:6F:EE:20:56:2C:D1:75:BC:84:38:A3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018832C86C01AF1E2321134AA36EB9FC5D06
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/STW6iTSFxeOAb-4gVizRdbyEOKM.roa
Signing time: Fri 19 May 2023 06:52:55 +0000
ROA not before: Fri 19 May 2023 06:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399989
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:c8:6c:01:af:1e:23:21:13:4a:a3:6e:b9:fc:5d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 06:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4935ba893485c5e3806fee20562cd175bc8438a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:a2:7b:e5:54:d3:64:99:2b:8e:29:00:c4:
75:2d:02:83:9e:84:f7:c6:79:ca:27:24:ae:46:07:
45:70:94:06:95:63:9c:16:a1:cc:79:a0:a3:0c:60:
ec:79:24:2c:0f:4f:76:5d:be:64:13:2c:5a:28:40:
e9:7f:a0:f1:2c:85:3d:25:6c:72:bb:18:81:07:6c:
7f:01:69:5f:d2:75:c6:22:66:b8:25:7f:fb:75:b7:
35:b6:5d:06:df:5a:1d:0f:81:df:6e:a7:f1:24:5a:
1a:2e:1c:35:05:7b:8d:08:22:2b:b5:4e:92:4e:f2:
c5:05:44:25:c9:ee:51:b1:a1:7e:f5:41:bb:51:f6:
6a:dc:81:91:13:88:cb:66:b5:0a:e7:44:90:ad:9f:
63:63:b4:6a:73:77:23:0d:a9:fe:f5:9a:fa:f5:9f:
59:d8:af:3d:d8:f2:ff:2c:1e:55:6c:14:7c:0a:76:
2a:92:89:c1:a9:ba:bf:09:5a:3d:72:35:2e:3c:18:
82:f3:60:dd:1b:35:50:b3:c3:f5:11:64:f7:11:a0:
d0:f7:d7:02:03:3f:e6:8c:d7:b5:d3:54:e7:da:b3:
9e:a7:02:12:92:85:14:6f:0e:28:3e:72:e5:99:53:
79:a0:8d:36:8d:fd:be:9c:81:68:ed:c1:2a:aa:8d:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:35:BA:89:34:85:C5:E3:80:6F:EE:20:56:2C:D1:75:BC:84:38:A3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/STW6iTSFxeOAb-4gVizRdbyEOKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.128.79.0/24
45.129.127.0/24
45.135.37.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:a4:da:6a:12:49:11:f2:7a:16:15:97:c3:3f:e9:50:e8:e5:
e8:84:9e:26:c6:20:18:71:85:ad:f3:e1:93:b4:33:58:52:7d:
23:61:70:dc:89:17:2f:9b:a9:5b:c6:99:6a:11:b0:14:43:b7:
33:43:51:44:ba:d2:fe:83:ea:17:bc:d2:df:e0:b8:a2:c3:2c:
0a:f3:27:d8:fd:d3:8b:5f:8a:1b:34:35:97:fd:61:a7:33:13:
ce:1f:a1:f6:f0:39:28:7e:59:36:9c:45:fc:c7:36:7e:a5:68:
92:5e:8a:86:61:21:34:5c:fd:63:bb:0c:41:ea:40:56:48:d3:
68:4b:a5:9d:be:eb:5b:2f:ed:fe:7c:90:4e:b8:c6:3b:08:0c:
1b:ce:0c:be:94:e9:f5:a9:f8:4f:1f:11:42:32:fd:0e:ce:09:
14:77:c8:85:e2:9c:02:af:08:23:9c:b3:c4:a1:51:45:3d:88:
e4:83:0a:5c:76:d5:06:c2:9a:b4:64:2b:25:db:fc:77:ac:37:
e1:37:85:2d:b6:e8:d5:71:73:c2:4d:78:c3:c2:61:7e:b3:22:
d3:39:e7:47:3c:1a:8e:1f:8f:e3:20:41:3a:48:af:3b:06:4f:
41:56:34:5a:1e:3b:2d:33:ec:d8:d5:85:da:b8:fc:23:b6:40:
f8:7b:94:3e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYgyyGwBrx4jIRNKo265/F0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNTE5MDY1MjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTM1YmE4OTM0ODVjNWUzODA2ZmVlMjA1NjJjZDE3NWJjODQzOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+yie+VU02SZK44pAMR1LQKDnoT3
xnnKJySuRgdFcJQGlWOcFqHMeaCjDGDseSQsD092Xb5kEyxaKEDpf6DxLIU9JWxy
uxiBB2x/AWlf0nXGIma4JX/7dbc1tl0G31odD4HfbqfxJFoaLhw1BXuNCCIrtU6S
TvLFBUQlye5RsaF+9UG7UfZq3IGRE4jLZrUK50SQrZ9jY7Rqc3cjDan+9Zr69Z9Z
2K892PL/LB5VbBR8CnYqkonBqbq/CVo9cjUuPBiC82DdGzVQs8P1EWT3EaDQ99cC
Az/mjNe101Tn2rOepwISkoUUbw4oPnLlmVN5oI02jf2+nIFo7cEqqo0Y3wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEk1uok0hcXjgG/uIFYs0XW8hDijMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvU1RXNmlUU0Z4ZU9BYi00Z1ZpelJkYnlFT0tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYAaAwQA
LYBPAwQALYF/AwQALYclAwQBXb72MA0GCSqGSIb3DQEBCwUAA4IBAQB6pNpqEkkR
8noWFZfDP+lQ6OXohJ4mxiAYcYWt8+GTtDNYUn0jYXDciRcvm6lbxplqEbAUQ7cz
Q1FEutL+g+oXvNLf4LiiwywK8yfY/dOLX4obNDWX/WGnMxPOH6H28Dkoflk2nEX8
xzZ+pWiSXoqGYSE0XP1juwxB6kBWSNNoS6WdvutbL+3+fJBOuMY7CAwbzgy+lOn1
qfhPHxFCMv0OzgkUd8iF4pwCrwgjnLPEoVFFPYjkgwpcdtUGwpq0ZCsl2/x3rDfh
N4UttujVcXPCTXjDwmF+syLTOedHPBqOH4/jIEE6SK87Bk9BVjRaHjstM+zY1YXa
uPwjtkD4e5Q+
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:13 2025 by rpki-client