Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Tte9Fb4ihkZ3Lxr4c4Kg2cvAAKY.roa
File: Tte9Fb4ihkZ3Lxr4c4Kg2cvAAKY.roa (raw, json)
Hash identifier: /t8aFD/xT4Y2UcrnFVG/n7bCJGq0dkQ0H+P0+AvVzyM=
Subject key identifier: 4E:D7:BD:15:BE:22:86:46:77:2F:1A:F8:73:82:A0:D9:CB:C0:00:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018410473452A23E863A79EFE7F37B1E9A7A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Tte9Fb4ihkZ3Lxr4c4Kg2cvAAKY.roa
Signing time: Tue 25 Oct 2022 17:53:32 +0000
ROA not before: Tue 25 Oct 2022 17:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
45.154.247.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
45.128.25.0/24 maxlen: 24
2a0f:e840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:47:34:52:a2:3e:86:3a:79:ef:e7:f3:7b:1e:9a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 25 17:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ed7bd15be228646772f1af87382a0d9cbc000a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:e3:1d:ce:b0:22:f9:06:14:2c:37:73:2b:
04:6a:f5:e1:11:b0:8d:10:15:28:44:c5:31:0d:18:
49:1a:a2:59:48:a4:1e:91:e7:96:31:c7:c5:c6:77:
bd:ca:8b:38:40:d8:c3:0c:9f:d0:1a:e8:44:a2:cf:
2a:e4:85:1e:e6:eb:69:42:d7:c3:bd:fd:43:c9:6d:
75:c9:48:99:1a:8c:19:ce:47:ab:77:3a:a5:c6:7a:
ee:78:19:b4:9c:16:aa:dd:69:f2:f4:a6:c6:b2:c1:
f0:9c:af:83:17:a8:4a:4c:1a:57:86:0f:21:00:fa:
67:28:a7:5a:3d:09:81:fb:6a:90:0e:ec:98:93:be:
13:dc:05:9d:4b:b4:98:88:c4:39:c9:53:b1:20:df:
50:c1:ee:be:71:27:0d:f4:6b:a8:f9:74:9f:4d:20:
50:c4:52:47:4f:b1:56:0d:d3:56:d3:24:40:54:67:
18:83:38:ba:96:13:5e:36:0c:e1:17:35:29:4b:72:
1e:ec:db:22:ec:7a:0f:50:52:59:65:43:4f:d0:0d:
a0:46:b6:aa:34:bc:e9:80:88:5f:b7:1d:bd:4a:79:
b0:78:15:a8:a8:7e:72:43:0f:ac:2e:d9:c0:94:39:
e1:cc:d4:0a:73:33:7f:44:9b:43:0c:ac:73:e2:c0:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:BD:15:BE:22:86:46:77:2F:1A:F8:73:82:A0:D9:CB:C0:00:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Tte9Fb4ihkZ3Lxr4c4Kg2cvAAKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
45.128.79.0/24
45.129.127.0/24
45.135.37.0-45.135.38.255
45.146.88.0/24
45.154.229.0/24
45.154.247.0/24
93.190.246.0/23
194.33.62.0/24
IPv6:
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
56:b1:3e:7e:1b:52:21:62:c8:59:30:d5:88:68:72:51:4e:73:
03:54:80:24:ca:de:f5:6b:ca:b6:d8:26:a9:64:0f:d0:f1:93:
dc:79:c7:a0:0a:fc:42:68:b2:a3:93:28:64:64:3e:34:33:c6:
67:c6:05:fc:bc:8e:ff:4d:46:ee:ca:85:5c:5c:ca:2b:5f:f5:
3d:d6:7a:b4:38:e7:7b:83:e9:31:3f:5f:44:a0:dd:26:0f:0f:
38:fb:d4:b7:e5:8e:37:75:2e:a0:bf:02:63:69:88:43:84:44:
43:ae:77:af:83:95:35:19:79:53:70:b9:77:33:14:7f:4a:22:
7c:9d:37:5c:ca:ad:3e:53:9e:58:a6:75:a6:57:21:10:c2:14:
0c:84:6b:8d:38:10:77:74:05:7f:f1:8c:ba:09:2a:d2:4d:7a:
c3:ab:5b:d5:60:69:26:00:8a:6b:0f:ff:ed:62:f5:ca:67:79:
50:4e:13:70:02:96:b7:ca:8f:d2:f0:76:b3:f7:ef:df:69:48:
8e:48:8a:4a:48:26:b1:a0:2f:64:64:fd:61:77:a8:75:08:ba:
4c:bd:2b:ba:c1:f8:81:12:bc:9d:c2:97:72:fd:5a:98:22:a1:
b0:8e:1e:82:2c:69:eb:1f:56:0e:04:96:2f:fe:d0:2e:7d:d2:
19:58:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:28 2025 by rpki-client