Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8U7W7jPEv2_VTKiFJ_x1UO2GxqI.roa
File: 8U7W7jPEv2_VTKiFJ_x1UO2GxqI.roa (raw, json)
Hash identifier: 7UhZXLuM21xnMiObiI1g88JF6BXgS/QqNAKcGcYoiGw=
Subject key identifier: F1:4E:D6:EE:33:C4:BF:6F:D5:4C:A8:85:27:FC:75:50:ED:86:C6:A2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0187940E5B5F0D0A530D731131394AAEC041
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8U7W7jPEv2_VTKiFJ_x1UO2GxqI.roa
Signing time: Tue 18 Apr 2023 11:09:41 +0000
ROA not before: Tue 18 Apr 2023 11:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:0e:5b:5f:0d:0a:53:0d:73:11:31:39:4a:ae:c0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 18 11:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f14ed6ee33c4bf6fd54ca88527fc7550ed86c6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:e8:cf:5a:0f:89:d5:43:95:ce:71:5a:67:
c1:e3:b2:5c:c2:2d:72:3f:d6:28:a1:97:e0:f6:d3:
04:10:53:4c:92:83:14:a0:27:91:83:ba:12:6f:2c:
1c:34:72:10:a1:4a:e2:5b:e6:d1:70:22:04:79:d8:
21:bf:32:7b:92:5d:bd:d8:91:2d:8e:d3:03:f5:64:
e6:35:ab:32:18:93:48:da:81:25:cd:9f:d3:c5:90:
a9:d3:7c:3c:e1:5a:d8:3b:29:98:d5:90:6e:e4:66:
72:7e:64:7a:62:4e:fa:d2:56:43:c1:56:93:bc:d2:
22:12:2c:6d:22:a1:fe:0c:1b:d2:f1:2a:2a:06:6a:
19:7c:0b:ce:1a:b5:e9:ab:f1:cc:37:91:08:7b:55:
9e:55:9f:b0:2b:62:bb:1c:b9:51:b5:a2:ef:46:a1:
26:f3:b5:cf:8e:50:c8:d6:59:96:51:f4:85:00:6d:
f2:f3:c1:df:8a:d0:05:73:20:e7:c9:52:11:56:8c:
be:0a:ea:67:cb:c7:53:ee:5d:a4:b0:e2:42:03:83:
dc:ba:5d:d5:3e:9f:28:82:5e:91:9b:f3:08:6e:b2:
ae:d8:a0:74:45:b2:fc:a5:4d:00:f7:15:97:9a:97:
e2:c0:86:42:93:57:a5:34:48:24:53:04:99:b2:90:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4E:D6:EE:33:C4:BF:6F:D5:4C:A8:85:27:FC:75:50:ED:86:C6:A2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8U7W7jPEv2_VTKiFJ_x1UO2GxqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/29
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:e00::/29
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
46:af:15:9d:28:ca:97:fc:19:e5:40:02:d8:fe:1d:b8:8e:82:
c5:36:8d:a6:c2:89:73:71:62:de:75:cf:b8:4d:25:32:9a:fc:
e2:ac:a4:81:2c:94:1c:97:ba:b3:f9:f4:70:22:cc:2b:15:dc:
ba:a9:d8:cc:ff:2d:4d:06:00:39:4c:30:f2:10:2a:d6:91:76:
c2:bc:42:ee:54:fe:37:51:59:46:99:e1:53:24:c4:76:25:ad:
2d:3b:a9:a7:e0:89:02:f4:ad:f3:2f:8e:92:10:f9:87:30:ee:
4f:29:19:8a:e9:4d:9b:44:e3:19:9c:e9:08:6d:fa:64:c5:98:
53:2d:96:b3:bf:6c:6a:fb:82:62:23:fa:af:30:ca:13:d5:65:
08:10:27:1c:74:06:05:ef:b2:3e:4e:67:f6:19:cf:bb:79:c6:
49:3b:10:2b:27:26:df:6d:15:82:c0:60:94:57:1a:60:98:7c:
e0:4f:68:3b:4e:2b:34:fa:3e:3f:7d:cc:a5:cf:99:c6:66:d7:
ea:7d:e9:92:67:95:13:a5:16:0e:ba:f8:5c:67:74:c6:af:8a:
5c:09:93:4d:4a:20:4c:61:96:6a:f8:fb:df:64:8a:fa:c5:d3:
bb:e4:d5:0e:0b:60:c1:48:d1:ef:32:de:a4:ff:6c:2b:6b:fb:
cb:e2:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:42:34 2025 by rpki-client