Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w3m1BGeyjHwamx4fIZSNuX_Bg3s.roa
File: w3m1BGeyjHwamx4fIZSNuX_Bg3s.roa (raw, json)
Hash identifier: uQmbk/6f4oSCsIADc+cXccgBLJoJmsqvsdnBum/MZ3U=
Subject key identifier: C3:79:B5:04:67:B2:8C:7C:1A:9B:1E:1F:21:94:8D:B9:7F:C1:83:7B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188B3B1A386D747E6174E23531DB4C1F600
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w3m1BGeyjHwamx4fIZSNuX_Bg3s.roa
Signing time: Tue 13 Jun 2023 07:39:03 +0000
ROA not before: Tue 13 Jun 2023 07:39:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.135.38.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:b1:a3:86:d7:47:e6:17:4e:23:53:1d:b4:c1:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 13 07:39:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c379b50467b28c7c1a9b1e1f21948db97fc1837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6d:c0:31:b8:90:11:1b:c8:28:80:84:d9:18:
e4:27:ae:dd:bb:ff:9a:da:cf:47:8e:35:2d:25:5a:
32:f1:03:4d:17:61:f5:55:76:42:bb:e5:57:8c:99:
77:50:9c:32:a3:a0:8d:c2:f3:3c:91:f8:c8:12:cc:
fe:a0:cb:11:01:90:ff:cb:3a:46:2a:74:f0:10:0d:
62:48:0f:97:3d:cd:c6:bb:39:ff:00:1c:82:22:23:
a2:b0:0c:ee:2b:a8:a5:f4:e5:af:fb:de:ad:44:39:
ad:5d:bf:d6:a4:c9:8f:f3:f6:12:11:12:53:92:8e:
de:f3:93:da:38:55:2e:93:12:9b:4e:aa:d7:23:68:
56:a1:da:52:0f:d0:f8:5e:85:46:e5:80:15:ab:1f:
51:74:40:83:50:af:76:5d:a3:fd:66:a4:e9:b5:a6:
b1:2c:c9:ad:5e:72:0c:e7:80:1a:eb:e7:6d:34:f5:
f0:d7:be:3f:5c:8d:66:fa:f1:a1:b6:f2:ed:ae:d6:
7c:67:6f:e7:c4:b5:53:33:01:7a:e8:f3:f2:a5:08:
68:34:b1:23:7e:2d:10:8f:51:ec:4e:d0:7c:1b:04:
d1:b0:c4:10:4b:6a:0e:a3:43:c3:98:f6:dc:c3:5a:
9a:1c:e6:b7:e5:40:80:9a:da:a4:ca:f7:b6:6f:b7:
65:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:B5:04:67:B2:8C:7C:1A:9B:1E:1F:21:94:8D:B9:7F:C1:83:7B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w3m1BGeyjHwamx4fIZSNuX_Bg3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.38.0/24
193.41.69.0/24
Signature Algorithm: sha256WithRSAEncryption
86:29:de:ff:03:71:56:48:6d:1f:19:b8:be:2b:05:87:87:88:
73:39:95:93:b5:db:d8:f9:83:c9:d8:8c:b5:b0:91:c3:f0:ab:
50:0d:7b:08:5e:e3:7c:3f:54:fa:58:da:b1:6a:2b:71:d3:b2:
1c:02:66:90:73:18:e4:5a:4d:ac:93:24:7f:b8:68:17:d5:de:
99:8d:8e:24:cb:aa:30:4c:95:63:6d:b2:43:65:7d:44:ee:6f:
d7:7a:d2:90:9f:76:b7:b3:60:23:2d:75:84:8b:b0:37:65:41:
fc:63:84:d2:e7:bc:2c:10:f1:8e:57:6a:9c:53:a1:4b:e2:4a:
65:7d:1f:d7:53:62:de:db:44:40:fc:ba:d6:20:c3:94:83:65:
c8:dc:75:4e:1d:a9:51:e5:bd:fe:18:1d:5b:22:bb:a7:17:77:
cd:1c:48:7c:86:b4:eb:08:f9:b3:56:c2:9d:cc:62:63:b0:1b:
cb:63:e8:5b:0c:ca:91:de:4d:5b:71:63:f7:2a:0e:75:7f:37:
50:eb:23:c4:38:44:4a:5b:ab:57:2c:a5:ab:67:df:b0:89:4c:
fa:05:ed:40:47:fd:f7:2d:c0:3d:45:16:12:dd:85:9d:6d:5a:
b9:9f:7c:0a:3a:f8:11:c1:1e:dd:4f:1b:36:7a:72:3f:b6:40:
ef:20:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:31 2025 by rpki-client