Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zZNJ6MEn8qVMtN27Hu2_oDSX19E.roa
File: zZNJ6MEn8qVMtN27Hu2_oDSX19E.roa (raw, json)
Hash identifier: bK8Bm43i/t4YROZmP7yU5eSIYREhwWaNlPaHLX68z6Y=
Subject key identifier: CD:93:49:E8:C1:27:F2:A5:4C:B4:DD:BB:1E:ED:BF:A0:34:97:D7:D1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018BC75375C1650983CD673BCE13643CDE5D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zZNJ6MEn8qVMtN27Hu2_oDSX19E.roa
Signing time: Mon 13 Nov 2023 06:16:57 +0000
ROA not before: Mon 13 Nov 2023 06:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a13:9580::/29 maxlen: 29
2a0e:c780::/32 maxlen: 32
2a13:9680::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a10:67c5:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a13:fd00::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a13:9080::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a13:8200::/29 maxlen: 29
2a0f:1e00:abc::/48 maxlen: 48
2a13:9280::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac41::/32 maxlen: 32
2a12:ac40:f::/48 maxlen: 48
2a0f:ea42::/32 maxlen: 32
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a12:ecc2::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a13:1940::/29 maxlen: 29
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a13:18c3::/32 maxlen: 32
2a07:f306:123::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:53:75:c1:65:09:83:cd:67:3b:ce:13:64:3c:de:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 13 06:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd9349e8c127f2a54cb4ddbb1eedbfa03497d7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:ab:28:79:fe:8b:b5:7e:98:0a:0c:7a:16:
17:e2:ab:d8:f9:ef:fd:5b:a0:e4:cc:ad:ce:25:4b:
37:79:97:d4:f1:e4:46:fd:57:c5:02:f6:5c:59:1f:
ea:67:89:f3:8e:ea:d1:d3:44:da:73:0f:c0:9d:7e:
65:bc:ee:0c:c9:da:74:a9:f1:ae:3c:95:a3:6e:00:
15:1e:b0:17:a4:2c:b8:8c:29:13:bc:1b:91:5d:ff:
0b:57:6e:a8:00:b7:28:eb:82:91:9f:3b:9b:45:78:
8a:44:8f:a0:e1:b4:9e:4b:25:81:01:2c:d4:a3:20:
b3:45:9e:cd:e6:bd:e4:c6:f4:57:3b:c0:e2:c9:a7:
e8:2a:8e:20:5b:95:52:ac:8f:b3:50:d0:3b:01:c9:
99:ed:0a:ff:a1:86:ba:bd:e9:2b:02:fa:ff:5e:ab:
ad:a6:66:67:ff:82:b3:2b:3c:0e:a1:61:42:bb:df:
8f:ed:58:24:1c:24:67:bf:f0:fe:b8:9a:5b:e7:bc:
6c:62:b3:14:89:15:4b:b6:e1:d5:80:47:02:06:f7:
da:47:6f:25:d7:7c:93:5f:84:3a:f7:b9:7e:ee:d2:
06:7e:75:ee:81:2c:0f:23:b5:dc:63:b0:d1:27:52:
09:66:53:e1:0b:bd:18:05:ac:74:91:78:07:f3:95:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:93:49:E8:C1:27:F2:A5:4C:B4:DD:BB:1E:ED:BF:A0:34:97:D7:D1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zZNJ6MEn8qVMtN27Hu2_oDSX19E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a07:f306:123::/48
2a0c:4880::/29
2a0c:9247:1::/48
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/31
2a0f:3d87::/32
2a0f:e940::/29
2a0f:ea42::/32
2a10:67c5:1::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:ac41::/32
2a12:ecc2::/32
2a13:18c0:1::/48
2a13:18c3::/32
2a13:1940::/29
2a13:4900::/29
2a13:8200::/29
2a13:9080::/29
2a13:9280::/29
2a13:9580::/29
2a13:9680::/29
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
c5:f1:85:0c:0f:33:10:e9:3a:6c:c0:d4:12:62:69:d6:e4:6f:
62:22:72:64:f4:d9:e9:20:82:96:ec:7a:7a:e2:32:e0:e0:62:
16:90:32:91:37:22:5f:3d:9e:26:72:57:07:7d:49:22:4e:28:
cb:0f:c6:fc:f4:24:86:a8:53:7e:fd:c9:84:b3:88:e4:9b:3a:
c0:c2:24:08:ef:0e:63:bf:bc:26:d5:ea:9c:2c:5c:fb:a9:37:
3c:ec:40:db:29:96:82:08:86:f4:93:60:95:f2:98:a8:0d:98:
3b:10:a6:f0:1d:f5:dc:b7:9d:dc:f0:0c:31:5f:05:b0:0d:e6:
8f:2b:75:53:0b:31:0e:66:c1:be:05:67:6b:ad:1e:35:3f:db:
ff:03:a3:ce:65:e3:d9:c7:02:19:e6:ca:46:ce:aa:fc:85:d0:
04:94:4c:74:92:1b:13:72:e9:9f:f6:e8:a8:19:87:f5:e6:ed:
1c:12:48:67:06:82:3d:f5:95:41:ae:60:fb:d6:99:16:43:60:
ec:ba:5f:08:cd:9a:17:f1:9d:84:a6:d1:3b:aa:90:fe:b1:e7:
30:33:7d:fe:a2:a1:ee:79:8a:25:bc:3b:30:fa:00:32:38:ad:
c2:12:d2:d9:af:96:27:c3:ad:a9:68:6a:db:5b:52:74:8e:2e:
34:d8:06:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:50 2025 by rpki-client