Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YGaMmi9mb0s1wojs3C4LDwvEMyo.roa
File: YGaMmi9mb0s1wojs3C4LDwvEMyo.roa (raw, json)
Hash identifier: /VWJ2S7t+NaoAIHJ3XzPRHiHu/YM8nzM5T85Z37PwWQ=
Subject key identifier: 60:66:8C:9A:2F:66:6F:4B:35:C2:88:EC:DC:2E:0B:0F:0B:C4:33:2A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188AF27EC28B64B993105C321F387DFAC63
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YGaMmi9mb0s1wojs3C4LDwvEMyo.roa
Signing time: Mon 12 Jun 2023 10:30:09 +0000
ROA not before: Mon 12 Jun 2023 10:30:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0e:f201:1::/48 maxlen: 48
2a10:67c5:1::/48 maxlen: 48
2a0f:e847:ffff::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:27:ec:28:b6:4b:99:31:05:c3:21:f3:87:df:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 12 10:30:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60668c9a2f666f4b35c288ecdc2e0b0f0bc4332a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:e4:2c:19:b0:49:34:62:4c:c7:44:98:f9:
17:79:04:45:3b:ef:73:df:ca:d5:a8:72:78:11:13:
03:ea:9c:cb:43:c0:65:ef:cc:d8:48:66:4e:c1:bd:
ce:13:2d:33:95:31:d9:c5:b8:f7:c3:76:fe:7b:73:
9b:09:b4:f6:a7:be:64:fe:64:84:88:d5:a4:78:0f:
66:cb:ca:c3:7f:d4:42:a3:24:dc:a6:8e:63:ab:7a:
07:42:6d:20:ef:a5:52:01:2f:08:17:b2:5c:ad:6a:
a0:4e:4c:0c:5d:8f:bc:8d:bd:ea:2c:42:c3:28:1e:
d7:90:96:f5:7c:39:77:9f:ef:2d:41:86:36:44:75:
c7:63:aa:4d:96:d1:ab:db:77:5a:cb:69:a4:07:1c:
d3:c6:2a:4e:06:28:32:9a:99:95:8b:4a:a3:84:c3:
74:4e:5d:94:73:da:f0:8d:99:6f:d3:ef:30:99:ac:
a6:ed:c3:4b:aa:8e:53:9f:9d:98:02:33:f2:d7:d5:
7a:dc:73:84:02:19:83:51:c0:90:11:c6:64:5d:55:
d6:d9:d8:18:29:8a:ce:91:05:d1:8e:f5:bb:a1:1c:
dc:fc:f9:50:04:17:79:20:d0:90:3a:b4:b2:96:fa:
ff:08:f3:a9:15:01:01:0c:7d:1a:fa:1b:e5:a4:9e:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:8C:9A:2F:66:6F:4B:35:C2:88:EC:DC:2E:0B:0F:0B:C4:33:2A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YGaMmi9mb0s1wojs3C4LDwvEMyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0c:4880::/29
2a0c:9247:1::/48
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a01::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:e847:ffff::/48
2a10:67c5:1::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
2a13:18c0:1::/48
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
16:11:81:3f:10:22:e8:11:59:29:6b:03:43:44:17:de:c3:44:
a2:b0:c8:42:58:e7:16:35:ff:e0:9c:56:7f:42:61:79:27:3e:
22:b1:d8:b6:15:90:94:40:ee:52:fc:96:7d:08:e4:0d:33:cc:
0a:9f:23:4f:87:7b:82:0a:de:dd:46:56:a6:9e:d9:6f:cd:2b:
09:9a:32:e9:6f:67:bf:9c:66:8f:e5:65:37:60:3a:26:31:67:
98:46:f3:66:56:4b:91:72:31:b8:fb:80:f5:fc:3c:4d:f3:c4:
da:9a:e5:80:5e:bd:4d:c8:e8:96:b2:cb:fd:4b:00:59:24:b4:
52:7d:f8:3a:a6:16:44:f3:c1:ca:00:0c:e2:28:f4:27:b2:bb:
df:6f:5d:94:06:f3:b0:16:47:8a:ee:23:41:50:f3:5a:80:fa:
ad:1c:41:7a:f1:e9:7f:9c:9a:73:e8:bb:b1:0e:b9:e7:c8:5f:
bd:bd:cf:1b:38:f5:22:94:7b:09:1f:8f:64:d9:d4:23:aa:a3:
61:af:a0:a6:f3:c3:c6:b3:28:1e:00:ad:f7:a0:78:32:74:d6:
b4:f9:84:e3:ba:53:c2:b1:24:fa:3a:d1:6d:65:5e:28:77:59:
0c:4d:7e:26:bd:a9:0c:16:bc:c5:c5:26:66:6a:ac:a1:2a:91:
21:34:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:23:33 2025 by rpki-client