Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T6unKe1tUhdpGQdgnhlG-1SmJrg.roa
File: T6unKe1tUhdpGQdgnhlG-1SmJrg.roa (raw, json)
Hash identifier: lLmbr5zO2lc4Wvn0aHjHRbXry5iISXgptTkaz6fgg8w=
Subject key identifier: 4F:AB:A7:29:ED:6D:52:17:69:19:07:60:9E:19:46:FB:54:A6:26:B8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C3E5F7F8A77C2A3F7B0F06E9CFD333128
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T6unKe1tUhdpGQdgnhlG-1SmJrg.roa
Signing time: Wed 06 Dec 2023 09:04:55 +0000
ROA not before: Wed 06 Dec 2023 09:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 193.164.199.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a13:9680::/29 maxlen: 29
2a12:ac40::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0e:f201:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a06:5280::/29 maxlen: 29
2a13:fd00::/29 maxlen: 29
2a13:9080::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a13:2b40::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a13:8200::/29 maxlen: 29
2a13:9280::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:e540::/29 maxlen: 29
2a12:ac40:f::/48 maxlen: 48
2a0f:ea42::/32 maxlen: 32
2a0f:2100::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a12:ecc2::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a13:1940::/29 maxlen: 29
2a0f:3d82::/32 maxlen: 32
2a13:9580::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a13:4900::/29 maxlen: 29
2a13:fc00::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a07:f300::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a10:67c0::/29 maxlen: 29
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:7d01::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a0f:a01::/32 maxlen: 32
2a0f:1e00:def9::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:5f:7f:8a:77:c2:a3:f7:b0:f0:6e:9c:fd:33:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 6 09:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4faba729ed6d5217691907609e1946fb54a626b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:59:f9:a7:5b:c0:73:a8:48:5f:22:e9:8a:5f:
73:75:4a:da:86:ee:fc:95:99:2c:e3:df:40:16:aa:
cb:e8:c6:5d:de:09:26:e9:d0:20:1f:44:76:f8:44:
8a:52:82:55:73:bf:21:64:b3:91:b5:8f:f9:aa:a9:
ec:f2:e6:08:8b:b6:53:38:4d:39:72:96:8d:5e:9f:
49:4c:85:0d:9c:7f:5b:e9:fb:6f:a0:f5:91:e5:48:
f7:2c:a0:02:95:42:b6:f8:76:1f:3c:ed:9d:9a:08:
ab:50:95:52:2b:d9:01:b4:99:f8:30:68:ba:04:3f:
06:6a:e5:5c:59:47:6c:48:71:e1:32:90:a9:be:e3:
0d:3d:4a:23:49:7b:24:03:1e:ea:6e:b7:4d:aa:4c:
e6:c2:cb:21:62:ec:fe:46:7b:2a:5a:e4:ca:5b:0f:
73:ac:cb:fa:8c:1d:91:2b:54:03:73:b2:e8:db:e2:
69:e4:a8:c4:ee:74:51:d1:61:57:f4:38:39:42:e1:
dd:a1:86:fe:df:6a:87:5b:ba:bf:21:7f:f5:95:87:
ae:98:27:77:19:54:43:06:66:27:bc:23:5b:2f:e3:
4c:b2:bd:1a:b5:7b:6a:1a:13:32:9d:08:8d:63:a7:
5c:be:25:c3:5c:f7:e6:ea:f5:ab:f5:56:13:0c:fb:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AB:A7:29:ED:6D:52:17:69:19:07:60:9E:19:46:FB:54:A6:26:B8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T6unKe1tUhdpGQdgnhlG-1SmJrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a06:5280::/29
2a07:f300::/29
2a0c:4880::/29
2a0c:9247:1::/48
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d80:123::/48
2a0f:3d82::/31
2a0f:3d87::/32
2a0f:7d01::/32
2a0f:e540::/29
2a0f:e940::/29
2a0f:ea42::/32
2a10:67c0::/29
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:ac41::/32
2a12:ecc2::/32
2a13:18c0:1::/48
2a13:18c3::/32
2a13:1940::/29
2a13:2b40::/29
2a13:4900::/29
2a13:8200::/29
2a13:9080::/29
2a13:9280::/29
2a13:9580::/29
2a13:9680::/29
2a13:fc00::/29
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
ab:3c:e9:cc:f9:d4:18:2d:fd:5d:0e:31:12:d3:06:92:ef:91:
83:cf:b9:8f:ec:d4:ad:30:28:5d:df:7f:b3:11:69:61:59:3c:
68:3d:4e:70:af:bd:8e:a4:b7:d6:79:88:32:78:4d:47:9f:22:
9f:09:92:6d:a1:a1:5e:2f:51:46:df:df:4f:ef:5c:ee:b8:27:
47:50:fe:33:d5:d9:a6:d4:e0:a3:0c:10:2b:13:a4:b8:7a:49:
fe:2b:19:97:67:00:f8:2f:df:ad:0d:24:db:55:2d:1a:6b:41:
93:ba:04:03:a5:dc:f2:a0:81:86:a1:2c:94:07:11:58:33:40:
d0:d9:47:b8:7c:ed:ab:1a:fa:67:89:5c:cb:6b:a1:65:05:1d:
e8:de:10:d5:ec:7c:ad:f3:e8:90:20:1d:51:2e:2a:a4:cc:1a:
bc:40:9f:82:f5:f7:14:45:f7:b3:50:01:f4:93:ad:0a:97:bc:
7f:25:ac:c0:30:4c:5c:53:5b:17:a0:05:44:7d:91:8e:34:7c:
ea:ac:9a:5b:1f:2a:74:13:36:44:24:fa:7f:a2:a5:74:cc:fc:
97:b1:bb:80:e4:10:64:13:21:ae:8a:0d:35:e0:f5:8c:43:ce:
eb:a1:ff:95:df:b5:b3:44:09:78:c4:9a:2d:4c:7f:11:67:61:
c6:83:09:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:44:34 2025 by rpki-client