Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7MkcUiHet2o7gNIuyjaeD9JrpCw.roa
File: 7MkcUiHet2o7gNIuyjaeD9JrpCw.roa (raw, json)
Hash identifier: MlqW3ijj8/JSOyw9SkeciezI64v8pMgl0vUOg0zuQV0=
Subject key identifier: EC:C9:1C:52:21:DE:B7:6A:3B:80:D2:2E:CA:36:9E:0F:D2:6B:A4:2C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01856DCAEDE5D9426686996C027F562FAB98
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7MkcUiHet2o7gNIuyjaeD9JrpCw.roa
Signing time: Sun 01 Jan 2023 14:44:53 +0000
ROA not before: Sun 01 Jan 2023 14:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30058
IP address blocks: 45.137.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ed:e5:d9:42:66:86:99:6c:02:7f:56:2f:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 1 14:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecc91c5221deb76a3b80d22eca369e0fd26ba42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:8a:4c:4a:79:05:58:df:98:8c:d6:df:ef:
6e:f7:b8:3e:76:90:6f:05:14:a8:63:b4:e1:6b:66:
c6:e0:da:6e:8d:bc:b4:63:3e:e2:9a:01:88:38:e0:
16:8f:c7:59:f6:c0:88:4b:26:d5:48:40:4d:d9:3c:
33:5d:50:84:2b:59:e8:af:91:72:fb:27:9e:98:d9:
32:cb:c0:76:11:8c:fd:4e:1a:d8:25:72:b2:f1:df:
0b:3b:6c:fc:f0:4a:b1:a6:52:87:5c:cc:38:c9:cd:
d3:fe:dd:3d:df:ec:29:0b:76:49:c1:24:c5:b1:ea:
fc:30:ad:60:63:f3:3a:fe:31:bf:23:85:1a:54:77:
f6:a9:40:c6:d3:94:8a:70:a2:63:23:aa:49:30:9f:
c5:9d:b6:4a:33:da:d2:95:3a:95:c1:23:4f:11:65:
43:df:ef:e5:bd:2f:e5:1e:9c:e6:40:c6:a1:56:75:
63:2e:93:ce:61:52:93:0f:e6:20:7e:8b:35:63:49:
4e:d7:c0:cd:cc:4a:79:4d:52:c6:47:b9:c6:3b:7f:
50:fe:7a:76:b0:e5:8f:83:83:ed:bd:e5:df:3c:10:
c3:66:53:91:11:85:32:65:87:1f:00:23:f1:42:d2:
a2:00:8c:4a:ee:81:7c:79:d0:fc:d2:c8:0d:f2:09:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:1C:52:21:DE:B7:6A:3B:80:D2:2E:CA:36:9E:0F:D2:6B:A4:2C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7MkcUiHet2o7gNIuyjaeD9JrpCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.87.0/24
Signature Algorithm: sha256WithRSAEncryption
79:07:e5:ec:a5:a8:eb:bf:f8:16:63:d5:23:46:38:42:c1:cd:
b7:d5:1f:34:3d:eb:81:e3:9a:d8:3f:d8:2e:35:c3:b0:96:fc:
b0:c6:c5:f0:e2:53:3c:05:41:fd:a4:01:bc:16:d6:9f:70:53:
30:81:90:8b:e9:3f:1d:71:c8:ae:3f:4a:a6:72:51:77:24:6f:
a7:82:58:4d:8e:76:9c:b0:60:b6:07:88:32:88:a0:82:dc:43:
b3:2d:d1:b1:a1:64:55:02:ac:be:f3:cd:6e:57:f8:8d:f3:81:
f1:7d:74:23:2f:c9:5f:80:b3:19:f3:a2:a9:7e:04:ef:dc:00:
17:09:eb:e2:df:2f:76:f1:f3:c0:ee:4d:3d:b6:b4:04:91:66:
ba:e3:6c:1f:bf:03:73:fb:09:85:ab:7b:59:4b:fc:cc:fb:fb:
e4:44:46:c2:ed:57:96:08:a7:e4:3a:1a:a9:ed:7e:3c:52:83:
de:8a:24:9c:4c:cd:ab:38:11:65:14:4a:7b:f1:7e:6e:93:27:
d7:2e:f7:ea:9c:c1:b0:33:42:29:61:e6:c5:6a:8e:97:ee:3a:
ca:ba:7b:42:72:2c:2c:00:61:68:3d:88:1f:db:9c:77:30:f6:
85:2a:51:e7:e3:ca:90:75:60:1b:ee:67:9e:b8:2c:42:ea:4d:
19:fb:eb:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtyu3l2UJmhplsAn9WL6uYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwMTAxMTQ0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2M5MWM1MjIxZGViNzZhM2I4MGQyMmVjYTM2OWUwZmQyNmJhNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixKKTEp5BVjfmIzW3+9u97g+dpBv
BRSoY7Tha2bG4Npujby0Yz7imgGIOOAWj8dZ9sCISybVSEBN2TwzXVCEK1nor5Fy
+yeemNkyy8B2EYz9ThrYJXKy8d8LO2z88EqxplKHXMw4yc3T/t093+wpC3ZJwSTF
ser8MK1gY/M6/jG/I4UaVHf2qUDG05SKcKJjI6pJMJ/FnbZKM9rSlTqVwSNPEWVD
3+/lvS/lHpzmQMahVnVjLpPOYVKTD+Ygfos1Y0lO18DNzEp5TVLGR7nGO39Q/np2
sOWPg4PtveXfPBDDZlOREYUyZYcfACPxQtKiAIxK7oF8edD80sgN8glTjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOzJHFIh3rdqO4DSLso2ng/Sa6QsMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvN01rY1VpSGV0Mm83Z05JdXlqYWVEOUpycEN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYlXMA0G
CSqGSIb3DQEBCwUAA4IBAQB5B+Xspajrv/gWY9UjRjhCwc231R80PeuB45rYP9gu
NcOwlvywxsXw4lM8BUH9pAG8FtafcFMwgZCL6T8dcciuP0qmclF3JG+nglhNjnac
sGC2B4gyiKCC3EOzLdGxoWRVAqy+881uV/iN84HxfXQjL8lfgLMZ86KpfgTv3AAX
Cevi3y928fPA7k09trQEkWa642wfvwNz+wmFq3tZS/zM+/vkREbC7VeWCKfkOhqp
7X48UoPeiiScTM2rOBFlFEp78X5ukyfXLvfqnMGwM0IpYebFao6X7jrKuntCciws
AGFoPYgf25x3MPaFKlHn48qQdWAb7meeuCxC6k0Z++v8
-----END CERTIFICATE-----
Generated at Fri May 9 05:09:36 2025 by rpki-client