Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bDY61g2_fF5EIIdDFuzis5o6diM.roa
File: bDY61g2_fF5EIIdDFuzis5o6diM.roa (raw, json)
Hash identifier: vWIsDiEoIZnhDoxcvK5D9eREBe6KiTz39ai5uQb65oI=
Subject key identifier: 6C:36:3A:D6:0D:BF:7C:5E:44:20:87:43:16:EC:E2:B3:9A:3A:76:23
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01838F7F4FD319CA920857B6BE890261B220
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bDY61g2_fF5EIIdDFuzis5o6diM.roa
Signing time: Fri 30 Sep 2022 17:43:48 +0000
ROA not before: Fri 30 Sep 2022 17:43:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.39.209.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
2a0f:e840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8f:7f:4f:d3:19:ca:92:08:57:b6:be:89:02:61:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 30 17:43:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c363ad60dbf7c5e4420874316ece2b39a3a7623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:16:55:e8:ab:83:2b:1a:c0:e5:85:b4:63:
4c:29:54:70:22:12:98:a3:f2:e1:d7:e8:d0:fc:4a:
20:47:86:75:47:37:05:d1:43:8b:ce:c2:ef:46:61:
d5:e9:7e:c2:5a:86:1e:56:3c:d3:26:1f:f2:73:81:
27:8e:4c:b2:9a:3d:46:1b:d4:0c:8b:56:55:51:ad:
80:f8:5e:cd:de:51:65:1e:14:b7:22:94:aa:b5:3c:
4b:2a:8e:e0:30:bc:6c:21:d1:e9:c1:ee:e3:0e:59:
fb:4b:c8:be:79:ba:38:1b:4e:9a:45:12:98:75:27:
94:9d:22:2e:19:91:06:73:bb:80:36:08:f2:19:85:
5f:c7:e6:83:20:ac:4f:6f:51:d6:1e:f6:a9:73:1e:
dc:4d:bf:8c:8c:37:d4:e2:f2:b5:bc:84:23:8b:84:
05:4d:b6:59:e3:04:56:e8:26:a8:72:fa:f9:13:3e:
7a:f5:cb:2b:70:c6:3b:1e:c8:12:a4:84:fd:3b:3d:
8d:ab:65:c2:43:49:8b:12:dc:ad:49:e8:69:c6:04:
7a:31:26:ec:2b:33:bb:77:b1:40:de:2a:5d:c0:4a:
ff:0a:48:bd:c0:7d:06:5e:43:6a:a4:e8:a5:2a:16:
15:14:22:7a:a0:09:b1:e2:ce:79:54:3d:8a:57:e5:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:3A:D6:0D:BF:7C:5E:44:20:87:43:16:EC:E2:B3:9A:3A:76:23
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bDY61g2_fF5EIIdDFuzis5o6diM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.187.0/24
45.130.254.0/24
45.145.59.0/24
45.146.129.0/24
45.146.181.0/24
45.147.31.0/24
45.157.37.0/24
45.157.39.0/24
80.253.248.0/24
85.209.131.0/24
91.212.120.0/24
103.59.40.0/22
103.74.76.0/23
193.39.209.0/24
193.41.39.0/24
193.41.68.0/23
193.41.86.0/24
194.33.62.0/24
194.41.38.0/24
IPv6:
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
5c:35:6a:57:e4:47:61:3a:3f:09:7a:12:43:17:b4:82:b6:1f:
d5:1f:fb:e5:44:2e:2a:62:2d:fe:2d:4d:86:4d:2e:03:9b:69:
77:13:b2:ee:20:19:da:9d:80:2f:8d:03:b1:23:c0:af:cf:35:
d6:fc:f2:2c:57:6e:87:f4:dd:ab:ea:ae:d9:c5:3f:32:78:53:
89:86:0d:ca:58:b2:21:9f:1a:8d:2c:f5:9b:1e:db:dd:d1:95:
3e:7b:26:98:82:16:d0:a8:52:bc:5e:78:3f:a1:5a:b0:06:46:
eb:58:cb:ec:f3:fa:39:fc:b7:7c:7a:a9:f0:45:cb:2f:7f:39:
17:65:82:b8:e9:7c:e5:10:3f:75:79:90:38:fd:0e:71:9c:f2:
9e:5a:09:9f:80:5b:98:92:76:10:67:20:b1:1c:f7:82:9a:a4:
e2:ee:49:1f:89:36:01:2b:d4:3e:bc:ed:0e:c5:d3:25:05:9b:
58:09:5a:be:09:26:90:2c:89:26:63:53:51:5a:ad:d0:62:59:
3d:1e:fe:e0:79:a5:79:97:c8:c1:73:9c:d2:3e:04:11:fc:d8:
03:57:57:af:cd:05:5b:49:c7:5d:9d:d6:3a:26:b3:12:9b:0f:
06:79:8b:e4:37:62:2e:cf:3d:c0:8a:b7:dd:da:49:14:1d:8c:
58:20:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:00:17 2025 by rpki-client