Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/su39yIqVIMShIeYWcP8A2xrVnDg.roa
File: su39yIqVIMShIeYWcP8A2xrVnDg.roa (raw, json)
Hash identifier: OtOl3p8/72lPAUxTQZZ57RSaLBhilVQjQTs5QhzW1Hw=
Subject key identifier: B2:ED:FD:C8:8A:95:20:C4:A1:21:E6:16:70:FF:00:DB:1A:D5:9C:38
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0187B312BAF2A19626E7B90671CA11819A24
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/su39yIqVIMShIeYWcP8A2xrVnDg.roa
Signing time: Mon 24 Apr 2023 11:42:41 +0000
ROA not before: Mon 24 Apr 2023 11:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a13:8200::/29 maxlen: 29
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:12:ba:f2:a1:96:26:e7:b9:06:71:ca:11:81:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 24 11:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2edfdc88a9520c4a121e61670ff00db1ad59c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:1b:a0:7c:4d:00:60:aa:c4:b4:77:f6:50:
a6:0a:20:bd:01:21:ca:24:d7:a8:82:c2:50:87:22:
fd:8a:37:97:bb:d0:e8:56:11:dd:9d:5a:2a:bd:09:
55:32:e0:4d:c5:90:43:78:31:76:bc:44:fb:c2:bb:
e6:95:84:ee:88:9b:1d:f9:f5:28:10:50:cf:34:00:
27:f1:07:d8:42:db:07:7d:0e:1f:45:bc:00:c6:16:
dd:4d:27:d6:8f:94:23:42:c3:0a:34:ca:71:5b:ed:
18:fd:56:fd:7e:42:87:62:2c:f0:4a:56:30:82:b4:
30:19:83:e4:97:d5:3b:fa:d0:36:d6:4a:e6:66:cf:
d1:cd:c9:24:a4:e3:83:aa:34:f5:54:e1:1b:c7:8a:
72:e0:e9:07:f3:e8:77:45:b7:d0:78:e7:37:fb:33:
ed:55:fc:b4:75:f1:29:82:07:75:9b:a5:46:ba:02:
50:3d:01:1c:3c:5e:9e:19:04:9e:36:c5:ed:28:42:
3f:11:97:9f:9c:55:a9:15:c1:cd:89:18:d0:46:a5:
35:75:b9:f9:d8:45:c8:b7:6d:af:b0:1b:0e:7c:07:
b5:8c:fe:5b:db:4f:b4:b9:41:7c:70:9e:54:30:c3:
7f:4a:c7:e5:73:9d:65:b9:79:e0:c3:ad:f3:cd:1b:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:FD:C8:8A:95:20:C4:A1:21:E6:16:70:FF:00:DB:1A:D5:9C:38
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/su39yIqVIMShIeYWcP8A2xrVnDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0c:4880::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:e00::/29
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
2a13:4900::/29
2a13:8200::/29
Signature Algorithm: sha256WithRSAEncryption
04:05:9e:0f:68:af:58:6b:09:ca:56:52:77:f4:f5:53:50:42:
24:68:56:67:ba:d5:5a:39:e0:df:ad:bb:05:4d:a1:ef:4b:90:
d4:07:15:76:a5:ef:a9:48:91:46:00:b5:c2:64:38:42:75:99:
3e:82:a8:8a:54:60:fe:84:4d:2e:af:7c:75:be:cd:38:7e:f0:
ff:b1:2b:fe:f6:3f:62:66:69:9b:fe:41:48:74:99:80:4b:1d:
15:d4:0c:8a:19:64:a8:4b:57:1f:25:38:40:f6:cb:98:41:47:
aa:d6:fe:85:77:86:40:75:d0:4d:13:7e:0b:80:94:d9:f8:33:
d1:ea:75:69:e1:5e:d9:4c:a7:3f:7c:ce:ea:09:d7:10:30:cc:
df:bf:b3:ba:f9:ee:7c:b4:73:8f:3c:00:94:04:f4:9e:da:65:
24:25:b0:ce:f3:c9:6c:43:d3:ca:22:37:50:b1:f3:f4:5d:23:
8a:d9:ef:45:14:6c:ad:4f:91:b3:ab:ec:1d:a0:4e:e5:83:7f:
95:69:18:83:0a:5f:7e:1a:ca:46:87:9c:eb:6a:d5:f5:f1:7d:
cf:ed:40:6f:84:d0:d8:57:d9:fc:17:52:46:a4:cb:4d:10:7f:
8f:8e:27:41:1d:0a:91:56:05:10:3c:1a:a2:4b:80:3e:62:46:
a4:fd:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:26 2025 by rpki-client