Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bDJWz9LcKcIhv1ddRYensriUWoE.roa
File: bDJWz9LcKcIhv1ddRYensriUWoE.roa (raw, json)
Hash identifier: lZ5JcxwGfCZeWjj/xJlRDWu57/IRG6zg43Z+5+cyH8Y=
Subject key identifier: 6C:32:56:CF:D2:DC:29:C2:21:BF:57:5D:45:87:A7:B2:B8:94:5A:81
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0187B757D454E7350541F68EFF0E7F2F71DD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bDJWz9LcKcIhv1ddRYensriUWoE.roa
Signing time: Tue 25 Apr 2023 07:36:39 +0000
ROA not before: Tue 25 Apr 2023 07:36:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a13:8200::/29 maxlen: 29
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:57:d4:54:e7:35:05:41:f6:8e:ff:0e:7f:2f:71:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 25 07:36:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c3256cfd2dc29c221bf575d4587a7b2b8945a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:72:a0:49:c7:75:da:51:5c:69:b8:fe:a9:
f1:22:23:dc:17:1a:ee:92:1a:00:47:24:8c:46:c2:
b9:37:13:87:d7:ad:22:bb:15:11:f8:12:94:e6:4b:
f2:2b:52:53:a6:6c:b4:bd:86:2a:76:b5:57:60:8f:
c3:e4:d2:cf:04:a9:71:92:b3:72:28:03:6f:8d:c0:
fa:1f:e4:cc:15:99:48:19:1a:4a:f9:70:19:7b:cf:
08:bf:f9:db:58:ef:49:57:cf:0f:b7:3d:b4:cd:be:
a9:2d:91:77:83:36:6a:09:51:26:3f:25:0b:06:7c:
1c:93:d6:fa:a5:37:5b:ef:97:e8:52:67:ea:b5:f8:
5a:dd:d3:ae:21:41:1c:1c:e8:e5:39:92:b5:df:b5:
c8:58:1e:4f:52:1d:8f:4c:8c:db:ba:5b:15:11:1a:
d3:b6:fd:e3:4f:54:ba:4b:70:e1:47:65:21:1a:54:
69:16:aa:4c:da:81:ec:13:e4:28:cd:eb:40:d2:05:
1d:dd:92:55:55:6f:c8:f1:02:e5:01:d3:36:ed:57:
eb:dd:63:2f:d6:12:2a:17:67:be:d3:00:49:93:96:
67:cb:d8:ff:14:ab:fe:f8:5e:80:c6:45:22:2e:5c:
79:8c:8d:c0:f8:1a:2f:74:36:19:60:b3:43:93:39:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:32:56:CF:D2:DC:29:C2:21:BF:57:5D:45:87:A7:B2:B8:94:5A:81
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bDJWz9LcKcIhv1ddRYensriUWoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0c:4880::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:e00::/29
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
2a13:4900::/29
2a13:8200::/29
Signature Algorithm: sha256WithRSAEncryption
5f:45:de:92:0a:9c:ed:cf:96:65:a9:85:18:c2:27:dc:96:ff:
b5:bf:83:0a:f5:23:c1:55:23:76:9d:f1:11:bc:ee:2c:d1:c7:
72:ea:b6:9c:eb:3c:c1:75:00:3d:f5:4e:62:c7:76:65:c7:99:
3c:26:a4:bc:da:ce:39:01:6a:9f:ad:95:de:27:f1:be:ed:2c:
cf:b7:dd:b1:41:e8:7f:09:ed:bc:fb:18:71:ee:d4:3a:6c:1e:
54:3d:2a:f2:f7:ed:30:47:01:8b:4d:40:47:47:4f:bc:93:e0:
08:2a:a4:5b:ee:40:3f:27:8e:8e:82:00:3a:5b:74:86:ae:53:
45:f6:da:71:1c:6f:6b:e0:2f:f0:b3:1e:fe:7a:9e:cf:36:0e:
5f:1b:fd:f2:07:c6:12:7f:17:7e:34:45:9e:8d:b5:84:a2:e3:
b5:f3:b7:5c:93:9e:48:fa:53:ce:94:73:40:8f:d0:c6:1f:40:
7d:cd:7c:06:4a:0e:55:d1:f2:aa:aa:c0:4a:c4:15:36:be:4c:
97:8d:0b:f2:1c:0e:9c:cd:40:7b:34:6d:cd:36:aa:0b:c0:9b:
dc:68:c0:ff:9f:e1:26:ff:17:d6:21:8f:c3:3b:30:7a:e0:a3:
20:8b:34:0d:69:73:2f:b2:b0:68:98:07:cd:1f:be:b4:68:5b:
89:53:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:51:34 2025 by rpki-client