Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_Um1fa347Y4t8Agm-ysCEVYtSck.roa
File: _Um1fa347Y4t8Agm-ysCEVYtSck.roa (raw, json)
Hash identifier: VRqIK3B6SIdQv0l5MCO+E5Fe2ot7cKIDh7lkSqF0GgA=
Subject key identifier: FD:49:B5:7D:AD:F8:ED:8E:2D:F0:08:26:FB:2B:02:11:56:2D:49:C9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01F63E46
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_Um1fa347Y4t8Agm-ysCEVYtSck.roa
Signing time: Wed 16 Feb 2022 15:26:43 +0000
ROA not before: Wed 16 Feb 2022 15:26:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
194.33.32.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
2a0e:e980::/29 maxlen: 29
2a0f:ac00::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:a02::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a0f:a03::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32915014 (0x1f63e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 16 15:26:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd49b57dadf8ed8e2df00826fb2b0211562d49c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:56:59:bb:30:76:39:5f:4c:af:47:bb:e7:
43:a8:99:d9:cd:d3:b4:04:7b:4e:0e:e1:e6:06:44:
21:81:51:bb:af:52:c9:18:d7:22:4c:73:33:28:ea:
ee:b3:80:68:b6:05:5b:75:39:0a:d8:78:3e:49:d0:
79:2c:58:57:1e:3a:4c:d1:7f:8a:9b:30:24:02:33:
d9:fb:1f:18:37:0d:8e:00:81:d6:19:3d:3f:94:25:
18:07:f8:cc:7b:a4:48:11:e3:e6:40:7a:8f:8c:c6:
1a:f9:c9:37:91:7b:60:21:59:3b:12:79:f8:08:dd:
5a:58:51:75:2a:09:2a:1a:1c:1d:56:ce:96:38:64:
5d:cd:49:94:1d:de:0d:d5:2a:32:2a:6c:49:f8:38:
4c:e2:a1:b4:04:14:ce:32:7d:28:84:d2:9d:47:8b:
2a:a4:a8:48:4b:d5:20:4c:be:fe:04:89:72:a4:8b:
f3:65:5d:59:23:49:8d:39:00:a3:9e:46:fa:fc:38:
ee:07:14:b5:e3:5f:d8:66:ba:43:86:83:c3:09:20:
2b:15:dc:2a:ab:cd:f4:2e:d9:18:a6:0f:4b:bd:ae:
a6:01:2f:47:fc:a4:ae:dc:d3:98:cf:c0:f7:46:f3:
54:56:3e:a7:67:36:59:71:1f:31:6b:97:0d:a0:4b:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:B5:7D:AD:F8:ED:8E:2D:F0:08:26:FB:2B:02:11:56:2D:49:C9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_Um1fa347Y4t8Agm-ysCEVYtSck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
45.128.77.0/24
45.137.41.0/24
45.137.86.0/24
45.152.197.0/24
45.157.38.0/24
193.39.209.0/24
193.111.4.0/23
193.111.18.0/23
194.33.32.0/24
IPv6:
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c7::/32
Signature Algorithm: sha256WithRSAEncryption
17:c7:ba:1c:2e:85:c5:b7:57:7b:b4:41:60:37:03:56:4d:6f:
39:04:65:1f:61:c8:8f:81:43:47:d0:c9:a5:76:46:40:26:86:
08:54:85:5a:fa:0a:10:15:77:07:85:59:58:5c:44:ea:f8:e1:
2f:a5:89:86:e6:f4:68:29:76:17:01:95:c1:cb:f6:e8:cf:3c:
84:bd:2a:3b:50:29:08:98:8a:33:e3:1b:4f:f0:79:43:5d:1e:
cc:8c:56:90:6b:9e:41:10:88:1c:c4:69:1c:d5:0f:69:fd:d0:
c9:56:c1:38:a4:37:3f:a2:2a:68:5e:fb:b4:53:f3:8e:c1:66:
50:2b:0f:f0:1e:f3:c5:2a:c6:4b:b2:ee:1b:6f:98:95:f4:01:
e2:2d:a4:e6:5a:4d:64:b3:55:dd:05:53:3f:51:24:cc:dd:be:
4d:48:23:15:ad:4d:ed:2a:7d:29:f0:f0:97:61:6a:2f:8b:e6:
43:4b:f5:9f:a8:d4:3f:46:51:13:21:56:43:6d:0b:79:9a:fc:
66:18:f2:cc:f0:c9:71:e7:95:7d:ea:cb:5b:df:db:77:e9:02:
49:aa:79:33:21:ef:00:cb:ff:99:46:1a:57:0c:14:64:03:a9:
2b:ec:10:93:38:6c:69:ce:b5:0a:10:96:da:05:63:83:95:2b:
73:2d:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:42 2025 by rpki-client