Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xYQeZFgo0lUMwa3V944pQ-x2XV4.roa
File: xYQeZFgo0lUMwa3V944pQ-x2XV4.roa (raw, json)
Hash identifier: z2iMGt7dIxk6rommzNFRLIO+nh2K2v3P7rylx1J2OJ0=
Subject key identifier: C5:84:1E:64:58:28:D2:55:0C:C1:AD:D5:F7:8E:29:43:EC:76:5D:5E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01864B5CFD9B5BC2BC2A88AE6750E7946465
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xYQeZFgo0lUMwa3V944pQ-x2XV4.roa
Signing time: Mon 13 Feb 2023 15:20:30 +0000
ROA not before: Mon 13 Feb 2023 15:20:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 193.41.87.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:5c:fd:9b:5b:c2:bc:2a:88:ae:67:50:e7:94:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 13 15:20:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5841e645828d2550cc1add5f78e2943ec765d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:4c:a8:8d:45:43:7f:bf:bd:28:a7:25:5c:
50:c6:fe:cb:1d:ab:e9:38:05:18:97:7a:42:88:ea:
e5:df:a0:d7:93:2b:ee:ad:66:3a:fa:c0:88:a7:98:
4e:8e:44:53:69:1c:1b:30:fd:35:69:8c:7a:69:66:
6e:83:0a:a8:53:c6:2f:6b:f6:43:cf:ad:a1:5c:d6:
a6:08:46:7e:81:2f:4f:5e:16:b9:e7:22:a3:47:27:
95:d4:da:84:a1:67:c0:95:53:cd:f5:77:4e:77:a5:
db:19:a6:b7:0c:08:92:e9:69:50:ba:c8:33:c3:c5:
03:73:9d:a2:08:76:3c:d5:cd:d4:1b:8e:24:b7:d3:
8a:5c:db:31:3f:71:b4:49:2d:c0:7a:27:e0:ee:c9:
23:d6:11:70:06:36:db:37:c9:d8:c8:81:36:ce:71:
3f:b5:65:40:ce:68:85:bd:2d:b6:64:bd:e7:43:3b:
29:ec:d5:7f:aa:a9:96:f2:a7:b8:fe:80:7c:b2:25:
81:57:9a:28:7d:22:cc:46:ca:03:63:b3:89:a4:ed:
92:fe:1e:ab:32:dd:88:a7:9f:cf:c7:60:6d:44:76:
b8:86:5e:08:9f:00:fd:32:c5:e6:03:a0:07:52:99:
d4:3b:60:60:43:dd:06:44:a2:c5:2f:cb:48:70:5d:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:84:1E:64:58:28:D2:55:0C:C1:AD:D5:F7:8E:29:43:EC:76:5D:5E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xYQeZFgo0lUMwa3V944pQ-x2XV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.87.0/24
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a0f:e842::/32
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
99:9d:07:35:a2:d6:69:d1:c6:ec:a1:c7:fb:32:59:86:69:b1:
ae:31:a1:29:f2:ef:09:75:c6:93:82:75:46:6f:96:e1:c4:81:
64:69:ea:c8:8e:59:3a:97:a9:d7:ec:82:80:c8:ba:36:4e:18:
18:82:28:c4:53:4b:0f:d1:4c:e0:cb:24:8f:eb:08:da:91:e1:
f5:e7:4a:2d:59:33:4d:5f:9c:03:31:48:d2:fc:4f:ec:e0:e6:
a2:7d:f0:f9:83:3c:da:36:d0:67:c5:5a:b2:8d:2d:c8:a9:21:
30:bf:df:00:91:1d:8f:91:db:35:aa:b9:72:cb:41:73:d9:86:
8f:53:73:52:26:68:98:b5:3a:2c:da:f7:f2:bc:6c:e0:8d:f7:
b7:98:62:a0:cb:9f:07:47:37:8d:cd:04:63:2d:27:3e:49:7c:
a9:1c:18:c7:4c:5f:1c:20:2a:cd:f4:c4:eb:83:9c:7e:0a:11:
19:71:1e:2f:6f:c4:60:cd:22:8b:49:a5:80:75:a9:45:e1:cd:
fc:d7:5c:f5:95:42:04:65:97:17:00:5a:13:8b:51:18:a5:01:
85:a2:22:da:eb:40:10:55:20:7b:20:1b:c1:de:35:ce:ce:e0:
1e:8f:39:e7:be:06:9f:d3:e1:11:b3:0c:4c:9e:30:0b:0e:bd:
29:e0:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:51 2025 by rpki-client