Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Db86c-waYEANC0461nK0DxMLAWw.roa
File: Db86c-waYEANC0461nK0DxMLAWw.roa (raw, json)
Hash identifier: LRT5hn5e6ax4OVlx7iPXjRh+9AphF3D9rZqV6RNHqGU=
Subject key identifier: 0D:BF:3A:73:EC:1A:60:40:0D:0B:4E:3A:D6:72:B4:0F:13:0B:01:6C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188F668B2E8C79336E22C5C58330DD56BAA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Db86c-waYEANC0461nK0DxMLAWw.roa
Signing time: Mon 26 Jun 2023 06:33:56 +0000
ROA not before: Mon 26 Jun 2023 06:33:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.135.38.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:68:b2:e8:c7:93:36:e2:2c:5c:58:33:0d:d5:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 26 06:33:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dbf3a73ec1a60400d0b4e3ad672b40f130b016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:4e:50:a4:0a:f8:53:a3:5a:6d:00:95:c9:
43:e9:4a:e5:70:6e:51:18:4c:fc:00:87:27:34:e9:
53:95:dc:2f:36:4b:f8:53:3d:5f:0c:5f:4c:c3:77:
75:ee:d9:7b:90:d1:90:53:50:55:73:36:fa:76:45:
f9:56:c7:f0:5f:37:47:bf:ce:09:43:ac:e9:14:93:
71:43:d5:19:ab:db:4c:ef:6b:b9:25:75:e2:f7:23:
cc:b2:cf:8b:1e:64:96:3c:b6:97:b5:7b:15:a2:dd:
54:6a:1f:f1:ec:5b:be:14:aa:8f:2d:15:70:97:29:
8e:df:25:ed:ab:d2:96:e8:e5:48:0c:9b:6b:07:e0:
6e:af:50:d5:1f:76:5a:e2:a0:b8:1e:4d:96:ae:fd:
21:b8:02:0a:2f:dd:e6:98:d7:8d:6f:9e:a1:8b:82:
53:fb:14:7a:94:fb:7c:d2:a9:c7:b1:20:68:0c:98:
6a:97:14:de:4a:f4:e2:a3:ee:48:29:18:1d:d5:e7:
43:b1:4c:ed:c3:73:8b:70:fa:be:d5:50:a0:e0:a3:
59:ba:da:66:8c:66:fd:a9:aa:1d:a7:4d:78:0a:38:
d2:d3:28:72:95:55:f5:43:13:e1:f8:0f:36:99:9b:
9c:88:bb:19:b2:a6:08:20:76:61:f9:17:ef:83:36:
8a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BF:3A:73:EC:1A:60:40:0D:0B:4E:3A:D6:72:B4:0F:13:0B:01:6C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Db86c-waYEANC0461nK0DxMLAWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.38.0/24
193.41.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e9:e1:a0:34:ea:c6:7b:23:de:f3:5b:26:6a:af:1e:c9:3e:
01:46:0d:ec:1e:7c:e3:79:4b:ea:14:15:ea:3c:e3:5a:e2:cc:
69:69:41:9a:96:96:6f:cf:35:58:89:bb:e0:c0:58:d7:6c:ec:
1d:d4:92:c9:17:2c:01:42:ee:43:a6:aa:c0:dd:ab:ed:44:3c:
7f:92:e4:02:72:29:12:e2:0d:d0:9a:b4:86:d0:86:73:37:4f:
66:69:33:3a:2c:d0:56:bf:e8:fd:7b:a0:f6:bb:5d:f2:a5:fb:
32:b3:2d:a9:1e:4e:de:09:6f:4d:5a:15:9d:9a:8f:19:d4:b3:
75:3e:99:25:78:0c:73:30:7a:fa:ba:ff:5f:84:ad:52:95:c7:
cd:43:4d:5d:07:08:e5:76:88:93:3a:fe:7f:ee:6e:8a:5b:26:
7f:35:01:29:a4:60:a7:bc:21:69:4e:63:b6:c6:2f:60:54:2a:
21:9b:09:c1:18:27:b0:e3:5f:96:14:e2:e7:05:c1:36:54:cb:
71:1d:b9:ea:ff:bc:5a:25:9a:6f:75:9f:86:19:f9:47:b1:be:
16:2a:18:a8:9f:70:e4:12:fc:0b:9f:4f:63:e5:ae:10:00:a0:
6c:6e:88:b3:6c:23:c9:31:1f:db:c9:9e:1f:6b:1f:5a:fd:0d:
48:7f:5b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:16:17 2025 by rpki-client