Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/viUtqWfJ5T_kGqD5FFmbur6ZgdA.roa
File: viUtqWfJ5T_kGqD5FFmbur6ZgdA.roa (raw, json)
Hash identifier: qcCgD6hnKbBAVfvOWAps1Oj9qX737yUNZULONIiXFGU=
Subject key identifier: BE:25:2D:A9:67:C9:E5:3F:E4:1A:A0:F9:14:59:9B:BA:BE:99:81:D0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0187C7D3891472F94E40270C0DA314CA2497
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/viUtqWfJ5T_kGqD5FFmbur6ZgdA.roa
Signing time: Fri 28 Apr 2023 12:25:41 +0000
ROA not before: Fri 28 Apr 2023 12:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 93.190.247.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:d3:89:14:72:f9:4e:40:27:0c:0d:a3:14:ca:24:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 28 12:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be252da967c9e53fe41aa0f914599bbabe9981d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:86:2a:e7:2b:d0:f1:2b:04:92:d3:5a:33:
6e:f2:fe:7b:ee:05:bd:04:8f:e7:c2:95:1d:73:a7:
8b:bf:26:35:93:53:26:c2:4e:ba:e3:5c:f2:32:ee:
2c:d3:ed:0b:ce:d0:0d:af:6b:82:5e:d5:0d:ac:ab:
7c:cf:af:05:e2:d2:d3:54:1a:59:74:71:03:7d:19:
64:18:d1:3a:90:ee:80:8d:a1:9b:51:2d:21:4b:06:
d2:82:5f:59:8e:47:2f:41:93:8b:b4:c2:29:7b:cd:
7b:56:cf:9f:47:43:f0:6a:e4:b7:11:17:ec:62:70:
94:84:fb:ab:64:39:65:2c:0e:7c:16:39:0d:ef:71:
0b:60:46:ca:7e:d8:8d:c3:43:02:6b:e8:0a:06:c9:
5d:18:21:5f:7a:e5:6e:85:ae:82:01:18:3f:91:b7:
a4:65:86:a4:c0:a6:29:e6:c8:55:b7:99:8d:67:4c:
27:39:42:08:25:7d:65:b7:53:17:90:e0:db:95:e8:
b0:e7:58:6f:3d:15:86:8e:a6:f1:0d:3b:69:c2:da:
a6:ca:d5:19:bb:11:a5:b9:cb:33:eb:96:b6:dd:f3:
59:e2:69:43:17:2f:a7:be:4d:66:4e:66:c1:60:36:
07:8d:e7:9a:2a:39:5e:9f:30:bf:3b:76:16:97:82:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:25:2D:A9:67:C9:E5:3F:E4:1A:A0:F9:14:59:9B:BA:BE:99:81:D0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/viUtqWfJ5T_kGqD5FFmbur6ZgdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.38.0/24
93.190.247.0/24
Signature Algorithm: sha256WithRSAEncryption
83:51:65:92:1f:cd:83:81:e6:15:bf:d0:f1:91:18:03:3b:6b:
cc:b5:8a:c6:3d:b9:53:dc:a7:62:26:3a:db:93:14:10:4f:fb:
1f:4c:18:11:15:b8:ef:03:21:e7:f4:de:33:3a:cb:99:df:b5:
77:a4:dc:c0:31:6d:23:87:c9:d3:88:10:7b:0a:d4:18:3b:f8:
b5:85:00:ad:71:42:b4:8e:c9:f1:8b:c7:42:55:27:45:ee:72:
07:f6:ea:c7:cc:4a:d2:3e:2e:53:f9:76:f7:34:1a:10:7d:d2:
19:5f:27:3c:39:9d:ad:22:79:dc:d3:c9:90:66:e2:bb:4f:12:
55:22:5e:c5:43:c4:c7:4d:ce:61:32:fe:3e:32:9a:a4:02:a7:
85:45:c8:d1:fc:57:b9:b6:d6:df:26:fc:8d:6d:b7:67:81:ee:
a2:a2:31:d5:2c:9c:38:c5:68:c0:e2:10:c6:3b:1f:28:57:56:
6e:07:a8:59:8b:e6:b2:f1:6c:7a:93:c1:de:94:e1:57:4f:37:
54:f2:94:b8:87:e4:29:77:f5:0c:bb:90:aa:a5:b1:a4:df:46:
9a:2d:b6:53:1b:07:0f:41:cf:2c:77:b3:0d:92:7f:e2:21:fa:
c2:1e:00:40:58:c6:05:98:6e:bb:2c:fd:67:8c:63:40:70:46:
7f:bf:de:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:39 2025 by rpki-client