Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zMeCinul9jcQi6tpcCDgsP_3GZI.roa
File: zMeCinul9jcQi6tpcCDgsP_3GZI.roa (raw, json)
Hash identifier: zajmyITp0UN1atbYR9Ru5n101+I8RrZEy7T4YHWsJ8I=
Subject key identifier: CC:C7:82:8A:7B:A5:F6:37:10:8B:AB:69:70:20:E0:B0:FF:F7:19:92
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAEA73C31E8616DCD1D4CF06CA7BF1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zMeCinul9jcQi6tpcCDgsP_3GZI.roa
Signing time: Sun 01 Jan 2023 14:44:52 +0000
ROA not before: Sun 01 Jan 2023 14:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.154.247.0/24 maxlen: 24
45.128.25.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ea:73:c3:1e:86:16:dc:d1:d4:cf:06:ca:7b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccc7828a7ba5f637108bab697020e0b0fff71992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:d5:7f:26:1e:22:ec:6d:fa:8e:77:69:3c:
aa:6a:8e:15:64:fc:d6:73:f1:d0:ef:99:1a:e3:ad:
9a:f6:6d:d5:a7:9d:16:8b:e9:25:5a:c1:1b:34:ae:
8f:e1:36:58:06:ca:36:64:c2:eb:75:62:d5:e6:8e:
e9:32:8c:57:b7:70:ac:92:da:47:31:0b:a9:42:b8:
32:81:10:6b:9e:eb:cc:67:2f:b1:ce:72:af:f0:b7:
0c:ff:c5:fb:d1:59:3b:82:7f:be:c1:a4:e3:6c:07:
a9:17:1b:a3:23:96:71:9c:96:4f:bc:6e:77:9c:a5:
7e:c7:99:28:98:06:01:b5:b4:8f:c8:ff:8a:ff:bd:
27:26:d4:b1:38:5c:d0:27:62:6c:5c:1c:f4:df:f0:
5a:90:a8:48:12:13:0a:02:86:66:2f:80:ad:62:82:
96:d8:2d:42:00:a2:bc:bc:2e:72:98:a8:02:8f:ef:
9f:6b:3d:e6:f1:2a:32:3b:87:fc:25:1b:ff:8a:8c:
57:38:1b:32:8d:91:ce:17:e8:0f:01:b8:49:3c:d6:
46:28:34:f8:89:6e:b3:0d:35:fa:88:a9:7c:1d:07:
6c:c2:f5:37:06:f4:b4:d1:b0:4c:40:41:29:e3:74:
d1:3c:3a:56:50:89:e5:bc:77:97:8d:c5:82:2a:c3:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:82:8A:7B:A5:F6:37:10:8B:AB:69:70:20:E0:B0:FF:F7:19:92
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zMeCinul9jcQi6tpcCDgsP_3GZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
45.128.79.0/24
45.129.127.0/24
45.135.37.0-45.135.38.255
45.146.88.0/24
45.154.229.0/24
45.154.247.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
60:bf:7e:c0:c2:4a:1d:2d:0d:ca:de:b3:96:01:e8:0c:a1:41:
fd:40:34:cb:08:bc:4e:53:21:0a:6b:bf:b7:40:16:15:2c:63:
5f:e8:dc:06:e2:0c:e2:08:20:80:3d:12:7b:c9:1f:6b:ce:50:
02:a8:0e:b3:5e:11:23:dc:13:1a:3a:d4:5b:5e:df:82:39:bb:
37:1e:b7:52:f3:5f:fc:8a:9b:eb:11:8f:80:37:eb:43:90:23:
d2:f5:52:e9:9b:18:17:f8:7a:3c:3e:37:a3:0a:34:f4:d7:4e:
8c:f8:5b:ec:34:24:c0:05:3d:63:71:e2:db:e6:43:19:81:ff:
a9:65:2e:13:b6:1a:49:38:f4:3e:09:5f:e9:cc:2e:41:ad:d3:
28:73:94:82:a5:eb:19:d7:91:a2:11:64:4b:fd:4e:07:f1:24:
e5:5b:4a:83:d3:f2:9e:e5:4c:ee:4f:1f:fc:2a:f4:3b:c7:73:
83:71:59:4c:1c:7f:c8:51:07:6e:83:e3:66:04:89:2e:36:61:
86:8e:ba:6f:db:40:41:ed:67:76:6d:e7:47:d7:78:3f:53:0c:
d2:8c:6a:82:14:39:d1:af:5d:4b:e8:54:90:04:d3:3e:28:7b:
4e:48:92:61:12:41:d4:b9:1c:fc:83:17:8e:5c:8b:f7:8a:60:
a4:f6:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:18 2025 by rpki-client