Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7CY92mKOjmFuOzLFyUgjK-eAFEw.roa
File: 7CY92mKOjmFuOzLFyUgjK-eAFEw.roa (raw, json)
Hash identifier: JnNyjxjqeerIbCM9OUbEjiVzgf9tLYgZ8X+1H97QqaY=
Subject key identifier: EC:26:3D:DA:62:8E:8E:61:6E:3B:32:C5:C9:48:23:2B:E7:80:14:4C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0357FBF4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7CY92mKOjmFuOzLFyUgjK-eAFEw.roa
Signing time: Mon 30 May 2022 17:32:13 +0000
ROA not before: Mon 30 May 2022 17:32:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.39.208.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
2a0f:a203::/32 maxlen: 32
2a0f:3d86::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0f:a207::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0e:2240:3::/48 maxlen: 48
2a0f:a200::/32 maxlen: 32
2a0f:3d81::/32 maxlen: 32
2a0f:a206::/32 maxlen: 32
2a0e:2240:4::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:a205::/32 maxlen: 32
2a0f:a201::/32 maxlen: 32
2a0f:a204::/32 maxlen: 32
2a0f:3d85::/32 maxlen: 32
2a0f:a202::/32 maxlen: 32
2a07:7880::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56097780 (0x357fbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 30 17:32:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec263dda628e8e616e3b32c5c948232be780144c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:64:a5:0d:45:1e:35:d4:7a:43:3e:28:34:
9d:09:b1:c9:b2:9d:bc:fc:f2:67:20:d2:4b:ba:a0:
96:07:d7:ce:ac:27:ba:77:83:99:bf:84:3b:b5:e6:
21:29:01:8f:37:4b:f5:fb:6b:b9:0c:6d:47:d4:74:
e4:21:34:27:93:60:9c:8a:37:ac:63:57:30:0e:2c:
8d:9d:90:80:c4:4d:46:fb:45:7f:2c:d1:c9:d1:20:
70:f2:7f:f9:12:69:fa:f7:14:d7:5a:43:58:55:9a:
92:44:71:21:ae:39:b4:71:a4:c5:c7:17:c2:fa:9c:
0b:22:ec:72:c6:0b:bc:e0:09:95:10:2d:83:9d:d1:
19:79:e3:7b:a5:d5:0a:3a:c0:53:7d:d2:c3:3c:f5:
7b:4c:ba:d2:21:28:a1:11:b5:72:78:ce:3a:5b:b2:
30:6b:7e:b7:39:e9:95:88:75:95:30:ce:79:25:00:
6b:a9:16:e7:a2:14:dd:04:c7:0f:5e:ea:b7:dd:5b:
18:d6:f3:fe:7e:22:9f:71:fb:e9:18:0b:c6:4c:fd:
57:86:e2:4a:73:0b:3d:6e:3b:93:65:2e:44:1c:d5:
f8:72:01:c5:c5:a5:14:34:88:f8:ae:7d:e2:73:d6:
ec:d8:a5:18:0b:f5:3a:8d:58:ba:1b:a5:6c:53:40:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:3D:DA:62:8E:8E:61:6E:3B:32:C5:C9:48:23:2B:E7:80:14:4C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7CY92mKOjmFuOzLFyUgjK-eAFEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.143.0/24
193.39.208.0/24
193.41.38.0/24
IPv6:
2a07:7880::/32
2a0e:2240:3::-2a0e:2240:5:ffff:ffff:ffff:ffff:ffff
2a0f:3d81::/32
2a0f:3d83::-2a0f:3d87:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/29
Signature Algorithm: sha256WithRSAEncryption
62:e5:d9:dd:1c:89:1c:22:b1:66:1b:46:29:b0:d4:8b:89:6b:
ab:4b:e7:c9:05:97:0b:9f:1a:f8:0f:df:da:db:02:6b:b4:e3:
58:cf:16:d6:74:c4:49:6a:36:83:f1:df:33:66:64:33:ed:00:
21:ab:6e:4f:8f:34:61:ca:c7:49:3d:cf:74:89:40:53:7e:4b:
c8:23:7c:a9:d9:c9:ed:d5:2b:38:9f:25:7c:93:20:76:6d:5e:
14:a1:8c:95:df:13:d2:0b:df:43:77:86:bf:5d:f0:86:7c:81:
37:62:b6:b9:c0:29:c8:c8:01:e6:5b:23:6c:7a:8a:e1:3d:3b:
a1:d4:ea:a6:b5:33:34:06:a9:f4:fe:49:37:43:ef:b2:35:37:
70:f1:3e:1c:d7:92:6f:e1:00:8d:f0:11:05:c4:9b:da:c5:da:
0d:66:ba:41:ec:ba:67:b0:6d:09:c3:58:78:4d:7c:fc:50:d3:
ec:14:2f:f6:eb:65:4a:ae:6d:60:18:e4:58:5d:28:26:48:6a:
62:7b:df:70:4f:69:0d:88:f3:f9:85:dd:61:66:dd:41:ae:b5:
90:39:cf:d1:2b:d8:ee:da:7b:21:bb:38:51:27:2c:f0:5a:04:
8d:43:35:d8:e5:ec:64:07:8a:c8:12:73:72:19:da:71:80:46:
1b:e2:de:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:07:49 2025 by rpki-client