Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wiqXo0KxpARLllFQpf9SLPDX5Io.roa
File: wiqXo0KxpARLllFQpf9SLPDX5Io.roa (raw, json)
Hash identifier: wWBF79FR0ZkDaTm/uEOYZJX2aCHNfdjOGZn4zZ5qrcU=
Subject key identifier: C2:2A:97:A3:42:B1:A4:04:4B:96:51:50:A5:FF:52:2C:F0:D7:E4:8A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188668EF451A19F12320FCA0255D0094ADB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wiqXo0KxpARLllFQpf9SLPDX5Io.roa
Signing time: Mon 29 May 2023 08:10:24 +0000
ROA not before: Mon 29 May 2023 08:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a10:67c5:1::/48 maxlen: 48
2a0f:e847:ffff::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a13:18c0:1::/48 maxlen: 48
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:7d04:1::/48 maxlen: 48
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a13:1940:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:8e:f4:51:a1:9f:12:32:0f:ca:02:55:d0:09:4a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 29 08:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c22a97a342b1a4044b965150a5ff522cf0d7e48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:e3:d6:2a:bf:ad:7b:6c:ff:6a:de:ee:4d:
38:56:e3:b3:49:38:f1:92:3f:13:20:52:28:6c:85:
94:20:e3:a6:e7:d5:5c:36:ef:38:b2:0d:1a:88:5d:
bf:4b:b4:7b:f9:75:67:1a:4e:73:d8:4e:07:76:52:
3a:2c:9d:ba:1f:27:be:9c:07:71:92:9e:be:d7:46:
26:58:c5:2a:a8:5c:14:ea:79:75:84:40:f9:d2:29:
bf:6c:d8:a3:a3:5a:61:d7:4c:46:67:e6:6c:e8:c8:
28:aa:e4:6f:5a:13:73:9a:17:7e:3d:a2:51:5c:01:
68:1e:10:d9:5b:2e:c5:3b:41:ce:56:e0:f8:38:db:
7c:e4:01:c5:ec:7e:c0:a5:ea:5c:c8:45:2d:ae:d7:
aa:d4:c3:53:87:c4:ac:08:80:ee:80:e9:43:63:3e:
63:ab:80:07:99:46:56:9e:c3:41:5f:9b:69:2d:5c:
4e:89:01:57:98:56:d3:3d:3e:70:6e:7a:05:b8:62:
2f:96:94:dc:9b:5d:78:6e:6f:22:17:c3:cc:47:aa:
2e:d9:da:2e:0a:5d:8d:fc:67:e1:07:20:11:a4:7c:
08:94:55:d2:1e:75:cb:76:74:e3:c0:8e:07:78:20:
61:49:53:74:e2:72:2e:3d:9a:b7:51:41:16:d3:82:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:97:A3:42:B1:A4:04:4B:96:51:50:A5:FF:52:2C:F0:D7:E4:8A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wiqXo0KxpARLllFQpf9SLPDX5Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0c:4880::/29
2a0c:9247:1::/48
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7d04:1::/48
2a0f:7f00::/31
2a0f:e847:ffff::/48
2a10:67c5:1::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
2a13:18c0:1::/48
2a13:1940:1::/48
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
15:85:35:fc:31:ec:9f:32:42:a4:ed:66:aa:86:52:4c:3a:34:
bc:10:e0:df:ec:ed:05:b0:51:75:a7:c5:cd:34:9c:80:12:a7:
d3:46:73:ae:99:21:a8:e1:83:53:76:67:40:a5:27:a4:a9:26:
25:50:a2:2c:54:e3:8b:70:01:12:57:17:63:71:d1:39:60:4c:
85:f1:91:74:87:13:e0:26:47:e1:fb:b3:d6:76:99:c5:e9:32:
39:83:87:6d:54:ee:dd:20:a5:54:95:b1:d8:30:e6:07:43:57:
0d:8a:c0:4a:8b:27:20:91:60:22:ce:59:46:aa:27:af:7a:f8:
e4:07:20:6f:67:ba:b1:96:89:d6:d8:6f:1f:3a:a2:29:59:71:
64:78:6c:ed:7e:ba:9f:c7:78:57:8e:ff:c5:12:92:43:ee:ec:
12:92:03:43:4c:3e:ec:94:df:5e:cf:df:5b:e8:d6:8d:22:d1:
38:e2:9e:06:f1:51:db:63:4a:a2:b7:9f:c6:4d:b7:6b:24:4f:
4b:84:76:6d:f3:4f:ef:59:f1:7d:b2:a0:7a:e5:0e:3f:ae:6a:
27:b2:b7:35:b4:30:ba:97:23:1f:0f:90:5d:59:01:a2:fc:62:
4c:b1:b1:b7:b2:62:61:63:a5:7e:04:5f:31:86:2f:3b:e4:b7:
45:ec:29:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgISAYhmjvRRoZ8SMg/KAlXQCUrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNTI5MDgxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjJhOTdhMzQyYjFhNDA0NGI5NjUxNTBhNWZmNTIyY2YwZDdlNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xvj1iq/rXts/2re7k04VuOzSTjx
kj8TIFIobIWUIOOm59VcNu84sg0aiF2/S7R7+XVnGk5z2E4HdlI6LJ26Hye+nAdx
kp6+10YmWMUqqFwU6nl1hED50im/bNijo1ph10xGZ+Zs6MgoquRvWhNzmhd+PaJR
XAFoHhDZWy7FO0HOVuD4ONt85AHF7H7ApepcyEUtrteq1MNTh8SsCIDugOlDYz5j
q4AHmUZWnsNBX5tpLVxOiQFXmFbTPT5wbnoFuGIvlpTcm114bm8iF8PMR6ou2dou
Cl2N/GfhByARpHwIlFXSHnXLdnTjwI4HeCBhSVN04nIuPZq3UUEW04LxrwIDAQAB
o4IDTzCCA0swHQYDVR0OBBYEFMIql6NCsaQES5ZRUKX/Uizw1+SKMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvd2lxWG8wS3hwQVJMbGxGUXBmOVNMUERYNUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYwYIKwYBBQUHAQcBAf8EggFSMIIBTjAYBAIAATASAwQA
LYF/AwQALYclAwQAwaTHMIIBMAQCAAIwggEoAwUDKgxIgAMHACoMkkcAAQMFACoO
GoADBQMqDlqAAwUAKg7HgAMHACoO8gEAAQMFASoPCgADBwAqDx4AASMDBwAqDx4A
BFYDBwAqDx4ACYcDBwAqDx4ACrwDBwAqDx4A3vkDBwAqDx4BAAEDBwAqDx6BAAID
BwAqDx6BEpMDBwAqDx6BQxkDBwAqDx6BkugDBwAqDx6Bo9ADBwAqDx6Bza4DBQMq
DyEAAwUBKg85wAMHACoPPYABIwMFACoPPYIDBQAqDz2EAwUAKg89hwMHACoPfQQA
AQMFASoPfwADBwAqD+hH//8DBwAqEGfFAAEDBQMqEG1AAwcAKhKsQAAAAwcAKhKs
QAAPAwUDKhLVQAMHACoTGMAAAQMHACoTGUAAAQMFAyoTSQAwDQYJKoZIhvcNAQEL
BQADggEBABWFNfwx7J8yQqTtZqqGUkw6NLwQ4N/s7QWwUXWnxc00nIASp9NGc66Z
Iajhg1N2Z0ClJ6SpJiVQoixU44twARJXF2Nx0TlgTIXxkXSHE+AmR+H7s9Z2mcXp
MjmDh21U7t0gpVSVsdgw5gdDVw2KwEqLJyCRYCLOWUaqJ696+OQHIG9nurGWidbY
bx86oilZcWR4bO1+up/HeFeO/8USkkPu7BKSA0NMPuyU317P31vo1o0i0Tjingbx
UdtjSqK3n8ZNt2skT0uEdm3zT+9Z8X2yoHrlDj+uaieytzW0MLqXIx8PkF1ZAaL8
YkyxsbeyYmFjpX4EXzGGLzvkt0XsKbc=
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:09:51 2025 by rpki-client