Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zhlBuE9FWtrvnTxAFmYt4WemZ7w.roa
File: zhlBuE9FWtrvnTxAFmYt4WemZ7w.roa (raw, json)
Hash identifier: 1WLS+MjlAqaU/Nu2Dh7cNi4RSU8bfpYA7CMNdBfL/+M=
Subject key identifier: CE:19:41:B8:4F:45:5A:DA:EF:9D:3C:40:16:66:2D:E1:67:A6:67:BC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01AEDDE7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zhlBuE9FWtrvnTxAFmYt4WemZ7w.roa
Signing time: Tue 01 Feb 2022 13:40:46 +0000
ROA not before: Tue 01 Feb 2022 13:40:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
2a0f:a03::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a0f:1f80::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
2a0f:a02::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28237287 (0x1aedde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 1 13:40:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce1941b84f455adaef9d3c4016662de167a667bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:7a:27:63:c7:b6:0c:5c:c6:7a:57:a7:0a:
da:0b:4f:ae:3c:ac:bf:99:54:c4:ae:e9:1b:54:3e:
61:5c:33:e8:91:4d:c6:fd:93:b5:aa:c2:67:4b:2f:
d7:f2:ea:34:da:b6:87:d5:68:29:04:aa:7d:2c:c5:
51:2c:09:f7:dd:29:36:c4:33:6e:df:c1:7c:9a:ae:
8e:b8:c6:1a:92:1b:84:56:91:06:ec:26:1f:17:bc:
bd:f9:88:98:3c:f6:b5:c7:f2:60:86:b7:00:ab:45:
77:ac:40:d0:7c:52:52:82:87:86:2d:8e:c6:8c:99:
fb:f0:83:4e:23:b7:ca:a7:51:ab:a2:a5:49:67:d4:
2f:b5:a7:bb:8d:20:75:ae:fa:ae:9c:bf:b2:b7:85:
01:9c:e4:18:7d:37:a0:02:ff:61:c3:b4:0f:3c:45:
41:98:7b:f1:73:8e:9e:70:8d:64:0f:f8:33:62:84:
f1:8c:af:6f:30:a7:dd:1e:ab:c2:9b:5b:77:bd:78:
63:bf:9a:62:ad:93:2a:20:13:fd:c0:61:ec:55:ea:
65:a9:83:a3:9b:b3:1a:5f:24:c7:7b:01:47:cc:90:
10:80:4f:30:3b:7a:63:2e:92:e7:fe:2d:f2:fb:0a:
4d:ff:37:95:48:36:75:05:0a:10:4b:99:57:aa:91:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:19:41:B8:4F:45:5A:DA:EF:9D:3C:40:16:66:2D:E1:67:A6:67:BC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zhlBuE9FWtrvnTxAFmYt4WemZ7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.98.0/24
45.137.86.0/24
193.111.4.0/23
193.111.18.0/23
IPv6:
2a0e:2240:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:da40::/29
Signature Algorithm: sha256WithRSAEncryption
bc:b0:20:0e:b4:c8:b0:0e:c6:d1:38:7a:99:00:42:1c:81:28:
ae:04:74:e3:3a:be:44:ec:dc:f6:ff:83:0e:79:ed:03:01:15:
c4:74:09:0f:af:89:9c:f6:58:5c:98:81:e2:2a:e8:0b:89:60:
10:fc:31:73:d9:82:19:b0:1a:fd:77:69:3f:e2:ab:1e:b5:a9:
8c:49:eb:06:bb:f8:03:53:b5:0c:11:08:25:a3:e4:12:92:aa:
37:45:0d:50:e7:fa:4c:80:f0:66:2e:3b:92:a0:0d:02:f3:ca:
a3:15:aa:58:97:e4:66:48:92:11:98:50:18:ac:07:3c:80:a5:
25:c1:19:ad:b5:4d:2b:b9:84:a7:5b:0d:79:ef:20:03:7d:21:
65:5a:75:50:e2:36:29:a7:eb:f4:a3:7b:1d:46:17:48:fc:cb:
a0:79:fa:a9:f8:d5:8e:a5:9a:98:2c:9b:e1:2b:5b:24:2f:6c:
45:03:f7:7c:26:0c:63:44:32:93:19:b9:05:45:6d:b3:71:9e:
41:73:ab:7e:25:58:81:e5:01:96:fe:ae:27:cf:7d:a5:f7:d3:
17:69:4a:27:b7:9a:a0:34:4c:1c:04:51:6a:bd:f9:43:e4:d0:
4f:42:9f:32:c3:eb:ef:34:c8:9d:4e:76:1e:52:de:54:3f:f8:
fe:44:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:11 2025 by rpki-client