Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wuRB2RF2r4F-8DM1kcO5bvyCNN4.roa
File: wuRB2RF2r4F-8DM1kcO5bvyCNN4.roa (raw, json)
Hash identifier: 4PoOXw+L6NoMfrM6eZFaY3hBGBofp6xEHSYgyA78B+U=
Subject key identifier: C2:E4:41:D9:11:76:AF:81:7E:F0:33:35:91:C3:B9:6E:FC:82:34:DE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01F9F367
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wuRB2RF2r4F-8DM1kcO5bvyCNN4.roa
Signing time: Thu 17 Feb 2022 09:31:37 +0000
ROA not before: Thu 17 Feb 2022 09:31:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
194.33.32.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
2a0e:e980::/29 maxlen: 29
2a0f:ac00::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:a02::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a0f:a03::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33157991 (0x1f9f367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 17 09:31:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2e441d91176af817ef0333591c3b96efc8234de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:29:f9:55:1b:f9:8f:89:87:2c:68:e1:45:
0e:f0:61:7e:43:da:8c:be:09:36:8b:6e:ca:cc:45:
76:98:03:fc:c1:4a:0e:12:49:fc:78:cf:38:40:81:
41:27:b3:83:a0:ea:84:33:a3:f4:fc:e6:41:2f:d6:
e6:b7:2b:00:3b:a0:44:d7:de:e3:5a:2f:8b:72:64:
68:8d:9e:9a:c9:a6:51:50:81:17:60:3f:10:81:8d:
25:21:34:ea:64:9d:56:69:1c:5d:29:f7:38:8d:d2:
18:d1:65:7e:ee:77:f7:b9:9d:19:5c:f1:07:98:c1:
ba:b3:4b:64:71:62:56:00:dd:c4:c4:c1:9d:af:f8:
72:12:92:5e:b7:96:97:22:46:13:83:1c:ef:b3:dc:
6d:9f:29:94:33:99:b2:f1:80:a1:8f:2c:d8:72:6c:
1f:66:4f:92:27:c2:2b:81:6e:8b:ef:fd:4a:1b:ff:
be:fb:33:f2:9a:ff:cc:42:44:f0:6c:86:87:e7:74:
94:b1:91:cd:cf:9e:d4:a9:7d:31:2d:c3:a9:86:5a:
82:37:c3:13:fb:e3:68:c4:28:c9:ef:b7:60:a8:63:
33:e4:57:0c:20:90:58:6f:63:f4:03:b2:1e:2a:0b:
0c:be:87:a1:1a:8c:46:ac:40:44:45:c5:a6:4c:09:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E4:41:D9:11:76:AF:81:7E:F0:33:35:91:C3:B9:6E:FC:82:34:DE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wuRB2RF2r4F-8DM1kcO5bvyCNN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.95.98.0/24
45.128.77.0/24
45.137.41.0/24
45.137.86.0/24
45.152.197.0/24
45.157.38.0/24
193.39.209.0/24
193.111.4.0/23
193.111.18.0/23
194.33.32.0/24
IPv6:
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c7::/32
Signature Algorithm: sha256WithRSAEncryption
4f:62:2c:88:da:1a:d4:fe:7d:b6:e6:90:3f:db:f6:62:6f:d8:
13:62:d9:dd:72:26:54:45:75:ca:30:3e:ea:87:4e:ff:c8:ff:
63:22:7b:01:e9:00:2e:98:7d:8e:d1:ab:03:7c:bb:6b:b8:26:
be:5b:7e:4b:e4:c9:06:d7:0f:8a:e5:f8:0e:d2:34:e8:ff:55:
7a:55:5b:60:e9:33:20:7e:ca:41:fe:cb:58:cb:87:14:45:d4:
69:3c:3a:9b:69:ce:dc:82:83:bb:9b:72:e8:b4:01:ac:dd:ac:
64:72:80:17:bd:9b:d9:e0:ca:f3:8c:1b:06:98:34:2a:3a:57:
7b:0d:19:76:71:69:7b:4b:81:a4:17:97:42:53:3f:db:79:32:
de:53:3a:17:26:21:02:c1:45:0c:b0:bc:9b:dd:02:c0:3c:5e:
e5:d2:e4:50:3d:68:0d:c6:9a:51:3c:54:24:a0:6e:d4:a4:32:
e4:38:f8:73:1b:b3:ff:fe:6b:3b:43:ff:de:46:be:1e:db:b7:
6c:04:bb:a2:14:b4:84:88:69:53:97:41:38:1e:56:dd:8d:e2:
9e:6a:d2:39:d3:2e:81:a7:fc:9d:7e:fc:60:e1:36:59:37:a9:
5e:16:c0:17:26:81:a6:52:c0:99:43:f3:ae:ab:26:09:55:bf:
8a:81:b8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:08 2025 by rpki-client