Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Zbq7DML1wtqnZhM7-sBKUksz_vA.roa
File: Zbq7DML1wtqnZhM7-sBKUksz_vA.roa (raw, json)
Hash identifier: vJTvNl7iSz4KAPZ1F1i0+foYZy6q69oQAi8GVlyuyMQ=
Subject key identifier: 65:BA:BB:0C:C2:F5:C2:DA:A7:66:13:3B:FA:C0:4A:52:4B:33:FE:F0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018832C869B3D5BFF2C12C9CFFB472BACF4F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Zbq7DML1wtqnZhM7-sBKUksz_vA.roa
Signing time: Fri 19 May 2023 06:52:55 +0000
ROA not before: Fri 19 May 2023 06:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:c8:69:b3:d5:bf:f2:c1:2c:9c:ff:b4:72:ba:cf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 06:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65babb0cc2f5c2daa766133bfac04a524b33fef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:c9:40:d0:66:74:03:88:3f:60:6b:65:cc:
40:38:7f:0c:3d:94:2f:23:1b:ed:8b:67:ae:7d:72:
ec:26:e5:da:b6:bd:8d:68:ac:42:10:2a:54:26:47:
ec:d7:e1:ae:36:c9:c2:0d:48:d0:ad:7b:71:1c:3f:
f8:82:c6:70:df:c3:45:f0:12:71:5e:c4:76:9c:ea:
39:5c:6f:e0:e6:d7:e5:81:13:06:88:af:b9:c8:5e:
64:ce:39:18:3d:a5:4f:98:1c:09:12:03:65:4a:33:
49:31:e4:8b:b7:14:af:c8:d6:06:df:c3:15:86:21:
75:75:9b:82:7d:72:5b:e7:89:89:b9:47:c4:2d:07:
42:ec:da:ad:00:cf:35:ee:88:ee:da:9b:9d:10:d7:
5f:26:aa:00:ff:f7:a4:18:b5:99:59:ff:44:c6:12:
e3:f2:ec:80:9c:17:cf:38:cd:a3:5f:5d:a6:cc:57:
d9:5e:d3:9b:c6:7a:6c:73:89:9a:0e:06:0e:2d:4b:
82:09:23:85:1c:d5:73:f9:9a:53:d4:25:da:f8:35:
9b:fa:bb:e1:9c:ac:64:5e:61:33:1b:00:22:15:d0:
36:aa:d8:23:4f:3b:21:02:90:0c:b6:80:aa:32:49:
4b:4c:cd:d7:19:3b:f3:c8:18:bb:de:62:e8:2d:ed:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:BB:0C:C2:F5:C2:DA:A7:66:13:3B:FA:C0:4A:52:4B:33:FE:F0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Zbq7DML1wtqnZhM7-sBKUksz_vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.128.79.0/24
45.129.127.0/24
45.135.37.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:39:11:82:86:e8:cc:3b:46:5b:29:d2:71:e6:a3:5b:19:f4:
08:53:9a:b3:9f:70:5f:67:f0:05:a7:4e:5d:73:fe:3c:59:8b:
3b:8f:d0:db:48:e8:e0:d2:f2:23:00:e6:b2:fe:52:9b:89:95:
93:72:6c:d4:af:ba:1f:09:b5:06:64:ee:e2:25:dc:07:68:55:
3f:bc:5f:9c:c7:89:f0:87:d7:a4:30:a8:98:03:33:15:21:a9:
41:78:cc:0b:0b:f2:1e:ec:ba:9c:bb:02:57:60:e0:80:b2:de:
c9:f4:9e:dc:b5:d3:e2:aa:42:c0:76:18:fc:e2:11:f9:ee:1f:
55:48:20:17:0b:08:df:f6:64:08:82:de:50:f1:1b:cc:c4:9c:
b9:8c:bc:3d:ec:92:42:fb:cb:38:71:9c:99:44:4b:e1:15:3c:
86:3f:5f:b4:2b:4a:86:3d:fe:26:fb:d2:7f:87:b3:99:37:63:
4e:08:8a:6f:5f:bc:32:95:27:f5:75:d5:b7:a7:c4:55:32:91:
59:63:0d:c8:c0:ea:96:91:e0:42:fb:92:97:df:7d:ac:19:8c:
8f:11:b6:08:8d:c8:77:19:e7:a9:f7:c1:47:66:22:46:1e:a1:
72:e7:f4:0e:37:70:9f:7d:89:f1:7e:97:08:e4:58:99:6c:18:
d7:d0:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:40 2025 by rpki-client