Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7E6Lq2N3WQZ-s_bvkPG3USqiSyI.roa
File: 7E6Lq2N3WQZ-s_bvkPG3USqiSyI.roa (raw, json)
Hash identifier: LVkqYP+z0P5OXjfvejNb5Kitc3BTi01g5OMVaWNqDpg=
Subject key identifier: EC:4E:8B:AB:63:77:59:06:7E:B3:F6:EF:90:F1:B7:51:2A:A2:4B:22
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01825B9FEAE7F66469A535527634C6C3BFA0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7E6Lq2N3WQZ-s_bvkPG3USqiSyI.roa
Signing time: Mon 01 Aug 2022 22:56:23 +0000
ROA not before: Mon 01 Aug 2022 22:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.39.208.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
2a0f:a203::/32 maxlen: 32
2a0f:3d86::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0f:a207::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0e:2240:3::/48 maxlen: 48
2a0f:a200::/32 maxlen: 32
2a0f:3d81::/32 maxlen: 32
2a0f:a206::/32 maxlen: 32
2a0e:2240:4::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0f:a205::/32 maxlen: 32
2a0f:a201::/32 maxlen: 32
2a0f:a204::/32 maxlen: 32
2a0f:3d85::/32 maxlen: 32
2a0f:a202::/32 maxlen: 32
2a07:7880::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5b:9f:ea:e7:f6:64:69:a5:35:52:76:34:c6:c3:bf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 1 22:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec4e8bab637759067eb3f6ef90f1b7512aa24b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:34:35:b0:18:74:43:98:53:6d:e4:e2:8e:
50:d9:6f:0b:25:80:f4:06:76:7e:b2:8a:21:74:ec:
ed:99:8a:23:3e:3a:6d:16:49:26:11:d8:40:28:f4:
0a:e2:c5:aa:d2:46:48:bc:9e:0b:b1:9a:8e:ac:49:
7c:16:4f:a7:85:95:1e:00:75:b4:e0:26:30:45:b4:
bf:f2:07:6c:a3:95:1d:9b:cd:37:1d:72:03:d4:d7:
68:1d:34:2e:25:e7:fc:92:24:a2:90:d7:ec:5f:3f:
82:15:1e:13:47:d4:62:d3:fb:2e:12:66:80:f1:06:
8c:9a:53:64:4a:f7:d8:ca:1b:83:d2:57:74:f8:ad:
17:6f:e6:09:7b:38:96:29:6a:80:e4:0e:f0:34:99:
6a:17:27:d0:62:02:d9:ee:87:4a:6b:88:25:e5:3b:
02:c2:2e:15:5c:b8:38:c8:9c:d0:e7:48:4a:f1:7f:
e3:92:e7:d4:c2:05:ed:aa:18:fc:ef:f6:11:12:16:
63:7c:ea:22:90:f6:79:1f:9d:2a:fc:51:5d:fc:29:
6c:a5:11:f8:7a:ad:93:a2:c8:5f:98:e6:9d:9f:68:
62:6a:55:01:90:9a:4e:7e:6f:01:3e:ef:c8:8d:db:
ff:98:8a:17:db:e2:b7:ef:e3:65:a8:7d:1e:23:25:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4E:8B:AB:63:77:59:06:7E:B3:F6:EF:90:F1:B7:51:2A:A2:4B:22
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7E6Lq2N3WQZ-s_bvkPG3USqiSyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.143.0/24
193.39.208.0/24
193.41.38.0/24
IPv6:
2a07:7880::/32
2a0e:2240:3::-2a0e:2240:5:ffff:ffff:ffff:ffff:ffff
2a0f:3d81::/32
2a0f:3d83::-2a0f:3d87:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/29
Signature Algorithm: sha256WithRSAEncryption
2a:a9:de:f7:1f:61:3c:e9:a8:32:94:42:9e:02:91:4b:f2:94:
60:80:5f:10:8d:2b:a4:3a:75:b5:5e:30:ba:42:a5:24:9e:69:
07:1c:05:4e:a3:09:35:73:5a:f3:ee:f0:94:df:d6:af:68:60:
cb:fa:19:c5:64:18:34:ee:16:6c:56:65:15:69:63:7c:9c:16:
53:57:b0:d3:58:f6:bc:ab:99:3e:d4:f2:be:3c:eb:92:4e:8b:
b1:c4:01:e4:2f:12:33:fd:55:b4:9a:8e:ee:6e:90:fc:9e:19:
9c:49:23:36:84:28:a4:05:53:9e:b1:28:09:62:b4:d3:8b:10:
9e:d0:5e:0d:b6:7b:55:99:72:60:8f:6d:8f:1e:95:2e:dd:3a:
77:dc:03:83:f9:e9:95:68:79:9e:8b:c4:d4:e2:39:11:fc:87:
e9:73:66:5a:99:39:6f:86:6e:73:a8:b6:2e:66:08:12:60:6d:
74:db:83:38:76:36:df:14:0e:91:85:4b:ba:54:2f:d1:35:e8:
95:65:12:87:1b:0a:b3:4b:11:28:92:30:3a:fe:29:cb:5e:6c:
a4:3b:b7:31:1d:21:3d:89:7f:69:9e:c4:b0:26:dc:f2:33:ab:
69:39:50:b5:14:c1:ed:da:f8:36:be:60:9d:2c:e9:39:79:01:
98:21:0a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:14:50 2025 by rpki-client