Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/soZLJx5NHExXG7bnBIWiG57tWHQ.roa
File: soZLJx5NHExXG7bnBIWiG57tWHQ.roa (raw, json)
Hash identifier: zWMOvldxNWsNS0SkQgxogClBJMC0YNWpDx8L70uCRJ4=
Subject key identifier: B2:86:4B:27:1E:4D:1C:4C:57:1B:B6:E7:04:85:A2:1B:9E:ED:58:74
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018338EB55D3B6E7FD69EB1BE5D78D6790D9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/soZLJx5NHExXG7bnBIWiG57tWHQ.roa
Signing time: Tue 13 Sep 2022 22:14:50 +0000
ROA not before: Tue 13 Sep 2022 22:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.39.209.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
2a07:7885::/32 maxlen: 32
2a0f:39c2::/32 maxlen: 32
2a0f:39c1::/32 maxlen: 32
2a07:7884::/32 maxlen: 32
2a07:7887::/32 maxlen: 32
2a0f:e840::/32 maxlen: 32
2a0f:39c6::/32 maxlen: 32
2a0f:39c3::/32 maxlen: 32
2a0f:39c0::/32 maxlen: 32
2a07:7881::/32 maxlen: 32
2a07:7882::/32 maxlen: 32
2a0f:39c5::/32 maxlen: 32
2a0f:39c4::/32 maxlen: 32
2a0f:39c7::/32 maxlen: 32
2a07:7886::/32 maxlen: 32
2a07:7883::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:eb:55:d3:b6:e7:fd:69:eb:1b:e5:d7:8d:67:90:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 13 22:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2864b271e4d1c4c571bb6e70485a21b9eed5874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:b0:88:aa:2c:26:85:a6:85:3e:08:d2:15:
80:8e:05:11:b0:9f:89:e1:50:2d:74:b1:7d:e8:6a:
db:02:cc:6d:65:69:e8:b4:f3:aa:67:bd:94:49:00:
53:97:04:a3:45:fb:1e:dc:21:4c:89:69:40:a5:dc:
87:ce:b8:10:cb:4c:6b:3f:38:e8:7f:32:b0:44:61:
07:4d:c7:98:48:d7:c0:4d:ae:41:b2:b0:72:8e:0b:
68:b1:41:7f:be:17:7d:d8:c5:45:f7:08:d8:1e:b2:
17:dc:b0:77:e6:47:ad:4c:67:bb:36:32:57:bb:4a:
d2:41:aa:0a:80:32:26:3a:72:1a:ef:c8:55:75:88:
2c:38:0c:9c:cc:9a:84:6a:dd:65:34:32:69:58:58:
84:26:d0:5a:e4:56:1a:44:7d:c1:10:f0:fc:b5:a3:
9b:99:d1:d1:fc:b2:13:99:5a:ef:90:72:b3:f7:85:
3c:e4:c2:e1:af:63:32:bb:78:7f:23:e4:11:3d:e7:
76:b6:30:91:f2:b9:c2:3d:3b:c4:b1:e8:56:b5:2a:
33:58:ff:4f:2d:49:6f:2c:1e:fa:6c:a5:75:26:2f:
7b:7a:f1:85:fe:13:a5:2f:5d:2a:58:d4:7a:d6:fe:
5b:cf:1a:b9:a9:f1:f0:be:31:03:14:22:32:5f:a6:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:4B:27:1E:4D:1C:4C:57:1B:B6:E7:04:85:A2:1B:9E:ED:58:74
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/soZLJx5NHExXG7bnBIWiG57tWHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.187.0/24
45.130.254.0/24
45.145.59.0/24
45.147.31.0/24
45.152.197.0/24
45.157.37.0/24
45.157.39.0/24
80.253.248.0/24
85.209.131.0/24
91.212.120.0/24
103.59.40.0/22
103.74.76.0/23
193.39.209.0/24
193.41.39.0/24
193.41.68.0/23
193.41.86.0/24
194.33.62.0/24
194.41.38.0/24
IPv6:
2a07:7881::-2a07:7887:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:39c0::/29
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
b2:51:57:57:7e:c0:92:9a:59:9b:1d:e8:54:ec:a2:39:c8:8e:
5f:a9:f4:a7:67:f5:bc:a5:43:62:9f:2e:9c:18:bd:85:28:ea:
3f:d9:96:f6:d4:d2:b5:56:67:d3:a3:96:8c:48:dd:d6:02:1b:
89:17:a9:48:2b:5e:2d:d9:d8:33:eb:eb:59:29:85:bc:11:8b:
4d:29:e0:99:80:80:3a:bf:2a:d4:d8:1e:88:29:a9:e8:00:d4:
b5:51:ce:b9:11:44:aa:dc:ff:98:7d:6d:f4:28:d8:38:5a:b2:
a3:2e:34:41:47:98:7f:4b:0a:f0:55:a7:19:40:15:29:d1:c9:
3c:e3:d0:88:2f:3e:40:02:f5:a2:00:b5:fe:40:37:ea:f4:57:
ee:74:af:6e:f6:29:2b:4e:e0:fb:63:86:3b:58:55:91:a3:35:
50:38:14:ce:99:ad:e2:6a:14:63:24:1e:b8:71:91:d9:02:04:
0a:54:43:da:e5:b3:7a:7d:d6:4b:f5:07:d6:2b:a1:1e:f5:de:
b9:80:a6:0d:4b:d3:d8:87:3f:bd:55:d8:7c:a5:95:35:2c:5f:
c2:8d:8f:6c:2d:1d:3f:9d:27:c2:2e:c4:5a:27:84:e3:68:ad:
22:1e:cc:e8:75:97:ec:24:55:67:36:e5:4e:f5:2a:a9:8c:14:
87:0f:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:58:53 2025 by rpki-client