Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w_sB_r2PU7fDKrcA-2rkCCEbnfw.roa
File: w_sB_r2PU7fDKrcA-2rkCCEbnfw.roa (raw, json)
Hash identifier: i89/eLKhgRWQWJZeCm/GeYWo3ISfvno2m7bT5Sa8k5Q=
Subject key identifier: C3:FB:01:FE:BD:8F:53:B7:C3:2A:B7:00:FB:6A:E4:08:21:1B:9D:FC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018B4C3D1F1FF779C4D3ADC151DBC0DDC1CD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w_sB_r2PU7fDKrcA-2rkCCEbnfw.roa
Signing time: Fri 20 Oct 2023 08:39:15 +0000
ROA not before: Fri 20 Oct 2023 08:39:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a10:67c5:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac41::/32 maxlen: 32
2a12:ac40:f::/48 maxlen: 48
2a0f:ea42::/32 maxlen: 32
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a12:ecc2::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a13:1940::/29 maxlen: 29
2a0f:1e00:def9::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a07:f306:123::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:3d:1f:1f:f7:79:c4:d3:ad:c1:51:db:c0:dd:c1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 20 08:39:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3fb01febd8f53b7c32ab700fb6ae408211b9dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:58:5a:ff:9e:df:69:5e:a4:29:47:f8:81:
48:6e:0c:41:62:4e:64:d6:90:7f:5d:67:4b:ad:ea:
62:4f:03:da:86:b2:5c:2b:16:8e:8d:23:f8:f6:a5:
05:48:e7:db:90:f1:1b:f5:9d:f7:b5:0c:71:90:a8:
73:e2:1d:01:9d:76:71:1b:26:f6:4a:fc:d6:f2:99:
4d:12:25:36:25:f7:d6:82:df:85:3b:8e:de:a8:31:
47:36:dc:27:28:df:b8:8f:3a:3d:49:55:79:1a:99:
1f:f4:bf:f5:60:e9:99:b6:79:fb:15:5a:92:ca:fc:
17:7e:ea:81:0b:f2:cf:c6:1a:bf:ef:26:6f:15:e4:
d6:5b:28:09:ef:de:6d:41:f7:8d:64:c2:4e:d5:0c:
76:c9:38:f0:6e:f1:a2:fa:ed:50:c3:4f:e7:13:8a:
6d:fb:05:09:cd:8f:c3:bd:83:7c:90:70:99:0b:c8:
93:a8:3c:eb:90:06:8f:95:b2:31:76:1c:32:1e:30:
dc:d8:e8:f1:b1:ef:40:60:53:09:10:2e:af:b9:0d:
8b:f5:cb:20:f4:bf:bb:60:4d:7c:d9:8a:93:31:ad:
96:81:b0:cb:72:74:f2:93:c5:63:7f:9b:22:fd:0a:
1a:a2:ee:98:f4:db:ec:8c:93:ad:ba:1e:25:5e:ea:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:01:FE:BD:8F:53:B7:C3:2A:B7:00:FB:6A:E4:08:21:1B:9D:FC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/w_sB_r2PU7fDKrcA-2rkCCEbnfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/29
2a0c:9240::/29
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d87::/32
2a0f:e940::/29
2a0f:ea42::/32
2a10:67c5:1::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:ac41::/32
2a12:ecc2::/32
2a13:18c0:1::/48
2a13:18c3::/32
2a13:1940::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
9d:ec:0f:ba:36:0a:04:a1:2c:97:22:21:e9:de:e4:5e:70:83:
03:31:d5:c6:16:8a:a7:52:f4:47:b8:7b:60:03:66:de:3c:0e:
1f:fb:31:90:3d:3c:88:b5:5e:f9:b0:75:ef:72:24:39:5d:dd:
64:6b:fc:2a:19:13:e0:8a:ef:15:30:2d:41:d3:2d:e7:68:28:
79:f0:6f:a9:6d:e5:ea:44:fe:fb:61:88:be:22:48:6c:88:60:
9c:56:ac:d2:87:6c:86:45:e9:b6:d2:37:4d:b6:bb:5a:59:c4:
aa:2c:09:9c:66:bd:a9:f0:c6:8b:f3:69:6a:3e:22:f0:4a:d9:
38:b1:b7:3e:25:89:d7:7b:cf:78:a6:ff:a0:5c:e2:ab:70:57:
a0:58:94:4d:82:8c:3d:75:99:73:d2:8a:3a:24:23:56:4b:ed:
97:36:e9:19:9c:d8:e2:5a:96:1d:63:43:f6:7a:d2:28:1e:00:
92:11:a5:f0:23:34:bb:83:67:d0:33:a4:3b:89:2e:f3:df:f4:
b7:22:4a:d2:79:04:0c:7a:a8:63:31:d9:07:70:70:fa:eb:86:
d6:ee:5b:90:dd:5b:1e:d0:73:05:d6:f9:4d:78:15:47:0d:84:
98:9b:95:ca:c7:26:b0:c9:37:24:74:31:6d:e6:05:33:a6:e2:
c3:8e:e7:a4
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgISAYtMPR8f93nE063BUdvA3cHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMxMDIwMDgzOTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2ZiMDFmZWJkOGY1M2I3YzMyYWI3MDBmYjZhZTQwODIxMWI5ZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9lYWv+e32lepClH+IFIbgxBYk5k
1pB/XWdLrepiTwPahrJcKxaOjSP49qUFSOfbkPEb9Z33tQxxkKhz4h0BnXZxGyb2
SvzW8plNEiU2JffWgt+FO47eqDFHNtwnKN+4jzo9SVV5Gpkf9L/1YOmZtnn7FVqS
yvwXfuqBC/LPxhq/7yZvFeTWWygJ795tQfeNZMJO1Qx2yTjwbvGi+u1Qw0/nE4pt
+wUJzY/DvYN8kHCZC8iTqDzrkAaPlbIxdhwyHjDc2Ojxse9AYFMJEC6vuQ2L9csg
9L+7YE182YqTMa2WgbDLcnTyk8Vjf5si/Qoaou6Y9NvsjJOtuh4lXuq42wIDAQAB
o4IDMjCCAy4wHQYDVR0OBBYEFMP7Af69j1O3wyq3APtq5AghG538MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvd19zQl9yMlBVN2ZES3JjQS0ycmtDQ0VibmZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBRgYIKwYBBQUHAQcBAf8EggE1MIIBMTAYBAIAATASAwQA
LYF/AwQALYclAwQAwaTHMIIBEwQCAAIwggELAwUDKgfzAAMFAyoMSIADBQMqDJJA
AwUAKg4agAMFACoOx4ADBwAqDvIBAAEDBQEqDwoAAwcAKg8eAAEjAwcAKg8eAARW
AwcAKg8eAAmHAwcAKg8eAAq8AwcAKg8eAN75AwcAKg8eAQABAwcAKg8egQACAwcA
Kg8egRKTAwcAKg8egUMZAwcAKg8egZLoAwcAKg8egaPQAwcAKg8egc2uAwcAKg89
gAEjAwUAKg89hwMFAyoP6UADBQAqD+pCAwcAKhBnxQABAwUDKhBtQAMHACoSrEAA
AAMHACoSrEAADwMFACoSrEEDBQAqEuzCAwcAKhMYwAABAwUAKhMYwwMFAyoTGUAD
BQMqE0kAMA0GCSqGSIb3DQEBCwUAA4IBAQCd7A+6NgoEoSyXIiHp3uRecIMDMdXG
FoqnUvRHuHtgA2bePA4f+zGQPTyItV75sHXvciQ5Xd1ka/wqGRPgiu8VMC1B0y3n
aCh58G+pbeXqRP77YYi+IkhsiGCcVqzSh2yGRem20jdNtrtaWcSqLAmcZr2p8MaL
82lqPiLwStk4sbc+JYnXe894pv+gXOKrcFegWJRNgow9dZlz0oo6JCNWS+2XNukZ
nNjiWpYdY0P2etIoHgCSEaXwIzS7g2fQM6Q7iS7z3/S3IkrSeQQMeqhjMdkHcHD6
64bW7luQ3Vse0HMF1vlNeBVHDYSYm5XKxyawyTckdDFt5gUzpuLDjuek
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:59:13 2025 by rpki-client