Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dy5C9W_m6SEAO7tlNyVAUYR0wBE.roa
File: dy5C9W_m6SEAO7tlNyVAUYR0wBE.roa (raw, json)
Hash identifier: X7vLnD0gpYeEwKxUGruAqBrcRrjsnh7GBRmD9rFTQYw=
Subject key identifier: 77:2E:42:F5:6F:E6:E9:21:00:3B:BB:65:37:25:40:51:84:74:C0:11
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184D28AC8D30177904003435009CD761CFF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dy5C9W_m6SEAO7tlNyVAUYR0wBE.roa
Signing time: Fri 02 Dec 2022 11:13:41 +0000
ROA not before: Fri 02 Dec 2022 11:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 45.118.248.0/24 maxlen: 24
2a0f:7d00:1::/48 maxlen: 48
2a0e:15c1::/32 maxlen: 32
2a12:d6c1::/32 maxlen: 32
2a12:d6c0::/29 maxlen: 29
2a0e:2240:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:8a:c8:d3:01:77:90:40:03:43:50:09:cd:76:1c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 2 11:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=772e42f56fe6e921003bbb65372540518474c011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4a:d5:e2:ab:d1:ad:c1:76:4f:a6:87:bb:54:
27:ca:b6:2b:c9:ad:4c:26:78:cf:d7:4b:a2:1d:84:
0f:3e:16:65:44:2e:01:40:bc:23:04:43:b6:55:45:
d2:fb:f8:55:4a:15:62:92:bb:fc:49:e6:86:96:07:
14:12:71:2f:33:0d:7f:6c:ef:1e:02:87:a3:87:5e:
95:8d:ac:20:b3:96:10:8d:f0:24:48:ed:d0:82:1b:
67:c8:7f:28:9e:be:af:7b:3b:67:3d:76:00:69:8d:
37:9d:f8:9a:dc:6e:29:85:1e:b7:a8:8a:b3:9b:79:
e9:1f:ae:c6:58:9f:d0:66:de:f8:37:ee:67:7e:12:
5e:09:d2:be:59:86:3f:cb:b5:57:7d:ee:8d:df:c4:
84:f7:f1:32:11:df:8f:d8:bc:5a:5b:4e:22:6a:5a:
e0:39:8c:27:1f:b9:09:45:18:91:ea:77:b7:a0:94:
af:b8:ab:02:a8:dc:b6:8e:a3:59:e8:6d:28:a2:0b:
0c:16:16:8f:5b:48:30:6e:9f:79:ed:8c:ae:e1:ad:
45:d5:fa:39:15:9f:19:4a:ce:7c:64:0e:77:9a:ec:
35:4b:ea:ca:30:ed:ba:88:91:2f:2f:ef:4f:32:6a:
a7:02:b8:0a:87:ec:a3:3e:7c:6f:71:09:ba:2d:5d:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2E:42:F5:6F:E6:E9:21:00:3B:BB:65:37:25:40:51:84:74:C0:11
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dy5C9W_m6SEAO7tlNyVAUYR0wBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.248.0/24
IPv6:
2a0e:15c1::/32
2a0e:2240:1::/48
2a0f:7d00:1::/48
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:74:70:b7:6b:cd:2f:13:99:2b:8f:3d:31:b8:3b:ab:59:ca:
0c:4b:ef:db:e1:bf:26:22:ab:e1:b1:66:b8:b1:c0:f1:e1:65:
d6:e7:c0:40:a4:ac:fb:f0:f4:06:af:e9:db:5b:ed:77:b4:7d:
d1:9b:98:a7:cd:26:e1:71:00:ed:36:09:02:69:f5:fa:90:6c:
ea:3c:e5:36:d8:a9:14:6b:82:b6:26:e2:a7:ec:23:25:12:78:
2d:bb:c0:82:1b:88:e8:2c:2c:82:43:a5:41:f7:ce:ee:20:11:
3a:d0:9b:c9:73:fe:81:98:14:6f:02:67:6c:7f:c0:c0:ab:01:
ea:fa:82:73:c9:d9:41:d3:6e:e2:b3:50:15:be:13:6c:2b:6b:
0b:63:15:d0:34:87:e2:08:15:16:cb:d5:e8:a8:d4:6d:0d:e5:
a0:8b:68:e1:7b:8a:ea:c3:82:d4:32:91:15:ab:a4:0f:02:e3:
7e:2d:5e:32:62:50:0e:7c:c7:03:00:bd:e5:c3:59:e0:2f:af:
8f:17:0b:30:28:dc:a0:22:79:a0:ff:a2:8f:e3:16:a5:2a:f4:
5d:39:44:26:20:db:76:9b:10:f8:28:40:b2:b5:fe:7a:58:5e:
4c:72:8a:1b:8a:e3:7b:8c:a0:cd:3d:4b:ac:d3:0d:44:25:83:
73:35:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:00 2025 by rpki-client