Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VXV2zKAUDFVDTaB3yMt8UJ_nNvs.roa
File: VXV2zKAUDFVDTaB3yMt8UJ_nNvs.roa (raw, json)
Hash identifier: fLH/Qgqac8MXrp65rb4yo98biUc5xXPooxHEWpnRk8I=
Subject key identifier: 55:75:76:CC:A0:14:0C:55:43:4D:A0:77:C8:CB:7C:50:9F:E7:36:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018410473581E268A7F134F5838D2312D187
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VXV2zKAUDFVDTaB3yMt8UJ_nNvs.roa
Signing time: Tue 25 Oct 2022 17:53:32 +0000
ROA not before: Tue 25 Oct 2022 17:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.154.247.0/24 maxlen: 24
45.128.25.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:47:35:81:e2:68:a7:f1:34:f5:83:8d:23:12:d1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 25 17:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=557576cca0140c55434da077c8cb7c509fe736fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:71:d4:d7:05:44:7b:cd:49:6b:58:35:0b:
f0:d7:14:0b:9c:57:c4:85:4b:ed:49:ac:e1:80:22:
5b:af:f3:8a:a4:7f:c5:78:e9:e8:bc:b7:5f:82:56:
ef:35:79:e9:50:c0:43:92:d5:8a:9c:f8:f2:79:ea:
84:36:49:34:a4:29:6b:71:7a:e4:b7:d6:54:08:d8:
14:37:90:23:b9:ab:9a:08:b4:2c:19:f2:25:ea:82:
ce:3d:09:8f:08:f0:78:cc:e6:97:a0:2a:82:75:17:
6d:e4:08:4d:1c:2b:69:f1:4a:0a:49:7c:a4:32:28:
65:7c:67:19:26:5d:b7:9d:be:16:47:e7:e3:93:7d:
61:1e:63:84:1b:ae:13:f0:ef:23:6f:08:4d:96:89:
05:09:b4:54:63:d1:bc:33:21:d6:c9:44:d2:45:d9:
aa:ee:9f:ec:81:57:f7:e9:d3:e5:9a:1c:ae:45:6a:
bf:a3:fd:0e:ff:08:d3:b3:39:e2:21:23:fe:bf:50:
10:31:1f:66:a0:0d:98:8a:7e:db:04:19:97:c4:46:
91:90:e2:08:5d:df:7b:63:3c:e1:f3:8e:d5:b3:4b:
07:47:97:9f:6e:f9:17:67:4d:d8:fb:4e:8e:9f:de:
a5:fe:78:1a:ad:0e:24:00:7d:36:95:46:ae:56:b2:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:75:76:CC:A0:14:0C:55:43:4D:A0:77:C8:CB:7C:50:9F:E7:36:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VXV2zKAUDFVDTaB3yMt8UJ_nNvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
45.128.79.0/24
45.129.127.0/24
45.135.37.0-45.135.38.255
45.146.88.0/24
45.154.229.0/24
45.154.247.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:0d:4c:ba:d4:4a:c5:09:aa:5f:57:c6:69:f6:a1:8a:df:83:
55:60:85:e7:6d:11:36:36:3f:43:03:a6:c9:88:ec:e7:f8:4c:
8e:61:50:a3:01:3e:fa:e4:98:da:5d:63:46:4a:2a:ac:5b:18:
4d:6d:45:ce:aa:98:7f:e7:e4:b7:b1:b6:8c:d2:c8:c0:54:fe:
20:52:b5:dc:9e:87:93:3f:0c:64:d3:24:0a:72:17:15:86:e7:
1f:92:4d:d3:ef:75:41:52:d2:f8:54:37:71:8d:2e:bb:ee:7e:
bd:56:08:bb:92:e5:00:b0:a6:dc:14:49:ad:2e:29:aa:0c:0c:
02:2f:5b:54:57:57:6e:2f:8b:cd:e2:6b:c7:ca:92:17:d5:2e:
89:49:f5:33:d8:eb:49:4b:08:b3:6f:e4:ca:dc:9a:60:de:20:
43:2b:3e:51:9b:94:f3:14:23:9e:bc:43:f6:34:5c:ca:ad:17:
f9:69:45:69:2f:bd:b4:36:27:63:48:3f:ce:2d:76:64:46:cf:
cf:2d:ca:92:dd:0a:1e:af:2a:b4:9d:3b:ca:58:3c:f5:8b:0b:
1f:2d:1b:b4:14:2a:59:9d:f0:04:3b:fb:a3:32:07:4a:31:cd:
4a:59:2b:32:45:76:80:30:5f:f1:52:66:53:e9:79:1d:28:ae:
fe:cb:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:51 2025 by rpki-client