Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZrAetYm8m4QKPnqZos3G5OyoOyw.roa
File: ZrAetYm8m4QKPnqZos3G5OyoOyw.roa (raw, json)
Hash identifier: Mo62Qw+xv7olaQBYUGhtRLg0HroziPF5jB+SvSoPDQM=
Subject key identifier: 66:B0:1E:B5:89:BC:9B:84:0A:3E:7A:99:A2:CD:C6:E4:EC:A8:3B:2C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018799BB3CFE8BCBF73C702C6991713ED604
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZrAetYm8m4QKPnqZos3G5OyoOyw.roa
Signing time: Wed 19 Apr 2023 13:36:37 +0000
ROA not before: Wed 19 Apr 2023 13:36:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
45.128.25.0/24 maxlen: 24
2a0f:e840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:bb:3c:fe:8b:cb:f7:3c:70:2c:69:91:71:3e:d6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 19 13:36:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66b01eb589bc9b840a3e7a99a2cdc6e4eca83b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:ae:bf:44:d9:91:66:50:1c:6e:16:10:8c:
9a:04:40:70:31:4f:5b:2e:b8:f6:a1:2b:77:48:aa:
73:92:e6:79:c1:63:53:88:d8:74:0f:f6:8f:a6:12:
89:2e:df:0b:c3:5e:20:74:11:1e:40:b6:69:aa:34:
62:ce:2e:03:be:0c:a1:3e:7e:cd:08:3a:0c:b4:86:
b8:58:64:61:14:2b:3a:4b:64:6c:19:a6:fd:bb:31:
18:d9:eb:7a:62:22:ba:df:4a:ba:90:c1:ac:4a:a7:
7f:fb:7b:cc:28:ba:57:d1:1e:8a:b6:3a:f9:a6:68:
a2:37:a3:30:20:f5:06:ab:66:d3:6e:dc:48:2c:32:
bd:cf:8c:9a:9c:c0:70:cd:5f:94:6a:16:fb:bf:28:
6a:cd:91:bd:66:26:16:0c:a4:37:ed:47:72:35:3f:
61:30:bb:74:fa:56:60:46:ba:f2:58:b1:6b:fc:bf:
c3:72:c0:b7:ce:69:47:38:ad:2e:a8:9b:07:cd:c0:
1e:33:65:8e:99:21:c8:bb:f1:df:b0:cc:c2:f1:39:
e6:a9:15:7d:40:76:9d:ce:f6:d4:f0:00:3e:35:72:
75:be:f5:64:2d:3e:9c:a7:ab:08:d5:d0:f7:48:f7:
2d:02:ae:03:02:a9:51:26:11:3d:78:65:fb:29:df:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:1E:B5:89:BC:9B:84:0A:3E:7A:99:A2:CD:C6:E4:EC:A8:3B:2C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZrAetYm8m4QKPnqZos3G5OyoOyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
45.128.79.0/24
45.129.127.0/24
45.135.37.0/24
93.190.246.0/23
IPv6:
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
32:17:04:1d:ab:c1:db:e5:69:e1:5a:9d:38:51:52:91:f9:25:
8c:76:b7:60:0c:a1:22:26:47:ea:f2:b0:41:c0:d5:93:3c:3e:
95:2f:eb:d8:4a:0d:30:fe:2e:66:21:b0:63:12:17:9e:80:fd:
df:2c:74:cc:3a:de:80:05:b8:62:12:cb:69:cc:a2:01:ee:94:
70:a8:26:65:ad:46:aa:95:c0:e9:89:f6:b0:d2:38:e9:26:af:
d6:cc:16:96:fa:81:df:33:a7:75:50:ab:12:07:ee:56:18:5e:
59:22:70:65:e6:4b:2b:ac:0d:42:11:98:cf:52:44:53:c6:2b:
e2:dd:ce:67:bc:78:83:7d:f4:7c:72:36:92:e9:d7:78:c6:75:
cc:83:8b:ed:3b:d3:e0:f5:f5:42:51:78:c9:42:2c:34:6b:92:
7b:d1:b5:a1:d5:4a:cd:84:da:35:45:8b:f9:17:0f:27:93:82:
6a:93:2e:b4:06:18:3f:8d:22:b5:c2:9a:42:10:9b:47:7b:95:
73:76:c5:9a:ec:79:2b:78:48:91:c8:5b:0e:21:b8:f9:40:b0:
4e:0d:a2:c7:21:34:e9:6a:1e:00:43:f6:7b:91:55:4e:32:a3:
c2:d2:09:b2:a4:df:02:16:3c:73:f0:96:a7:18:aa:74:2f:97:
c2:6f:f2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:56:05 2025 by rpki-client