Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Fnv1WatsHAnfEZArvzvIi2kfWhc.roa
File: Fnv1WatsHAnfEZArvzvIi2kfWhc.roa (raw, json)
Hash identifier: 3hyG0y3uNAWtQRAgUv/YJ6gkzybn7zm2HVmiuY9RGSg=
Subject key identifier: 16:7B:F5:59:AB:6C:1C:09:DF:11:90:2B:BF:3B:C8:8B:69:1F:5A:17
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018C98C63F042F070A081F1C7FA4350B02F3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Fnv1WatsHAnfEZArvzvIi2kfWhc.roa
Signing time: Sat 23 Dec 2023 22:22:58 +0000
ROA not before: Sat 23 Dec 2023 22:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
2a12:d6c0::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a0f:e840::/32 maxlen: 32
2a13:fd00::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a13:18c4::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:98:c6:3f:04:2f:07:0a:08:1f:1c:7f:a4:35:0b:02:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 23 22:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=167bf559ab6c1c09df11902bbf3bc88b691f5a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:eb:b8:19:4a:ae:71:75:0e:90:d3:f0:bc:
27:fe:0d:e1:82:75:1c:cb:4a:5f:a9:73:2a:96:5c:
16:71:c6:1a:1a:13:30:ff:f4:b2:4a:f9:25:45:59:
61:74:bb:c1:3b:c9:18:b2:4f:40:1e:d9:70:de:b0:
63:69:ef:cc:68:82:70:bf:26:40:d0:87:28:63:c3:
98:fc:f7:54:35:66:4f:96:0a:dc:ff:e6:1a:4f:1d:
de:e6:45:1d:b0:9f:6a:66:80:a6:a0:6e:87:77:d8:
4c:46:db:7e:bb:f5:be:c6:d5:16:32:f3:27:c3:74:
9a:af:3f:ce:6b:8a:a7:1e:94:c3:9d:d7:98:36:86:
3b:86:49:1f:8c:97:76:9a:ff:80:79:46:1d:19:5d:
40:eb:0f:a4:c8:6f:54:59:57:47:1a:f0:25:b6:e1:
27:2d:4a:6a:dd:72:66:db:84:15:71:7f:28:c4:69:
ce:93:a8:69:1f:05:9e:3e:34:b0:00:e2:1e:18:6a:
ef:8c:67:01:25:15:35:47:8a:35:d3:48:66:ad:73:
9f:cc:a6:35:e9:3f:c1:f9:3d:60:7e:cd:f5:c0:85:
52:5e:da:e8:05:49:10:24:59:78:c1:48:18:4f:f0:
6d:6b:0b:a9:09:8c:cb:6e:e6:58:0b:7b:2b:eb:11:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7B:F5:59:AB:6C:1C:09:DF:11:90:2B:BF:3B:C8:8B:69:1F:5A:17
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Fnv1WatsHAnfEZArvzvIi2kfWhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
93.190.246.0/23
IPv6:
2a06:b5c0::/29
2a0f:2f80::/29
2a0f:e840::/32
2a12:d6c0::/29
2a13:18c4::/32
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:85:84:f0:1e:9b:3d:34:eb:31:f1:5c:fe:8a:74:15:b6:6f:
30:4e:1d:2e:90:3c:bc:93:3d:d6:54:a9:6d:60:b6:da:c3:a3:
04:ec:60:ae:5e:42:70:ee:53:7f:15:5e:4b:29:31:ff:2b:7a:
d0:e6:89:5a:7d:01:f2:b6:39:b1:ab:9a:dd:22:7e:52:69:80:
86:0b:71:19:4f:18:41:6e:4c:ee:10:b9:16:be:bb:83:8d:22:
d8:91:33:92:ce:6e:8a:d3:a2:74:aa:2f:54:06:ec:84:45:20:
1c:32:a3:73:15:95:b0:ce:e9:02:11:c9:a1:88:e0:99:33:f1:
f4:aa:a8:4c:14:d6:94:36:49:46:25:70:c1:c0:9f:21:cd:4e:
9f:f8:06:78:60:f4:33:64:51:9a:49:1a:47:d0:8d:03:85:02:
f5:4f:d4:5f:46:35:b2:19:07:99:70:df:90:a5:65:64:54:6e:
ed:58:86:9e:4a:67:e0:ee:59:26:8d:de:2b:bb:65:98:db:4b:
33:b3:7e:43:a8:4a:82:5e:62:1a:22:16:be:ac:0f:a8:e0:e1:
2e:f7:f1:c0:c0:58:5c:54:e4:26:0e:84:21:28:36:65:eb:46:
be:97:71:3c:2d:56:0e:8b:60:8a:82:91:32:fe:32:a2:b3:f5:
7e:ad:44:fb
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYyYxj8ELwcKCB8cf6Q1CwLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMxMjIzMjIyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjdiZjU1OWFiNmMxYzA5ZGYxMTkwMmJiZjNiYzg4YjY5MWY1YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncTruBlKrnF1DpDT8Lwn/g3hgnUc
y0pfqXMqllwWccYaGhMw//SySvklRVlhdLvBO8kYsk9AHtlw3rBjae/MaIJwvyZA
0IcoY8OY/PdUNWZPlgrc/+YaTx3e5kUdsJ9qZoCmoG6Hd9hMRtt+u/W+xtUWMvMn
w3Sarz/Oa4qnHpTDndeYNoY7hkkfjJd2mv+AeUYdGV1A6w+kyG9UWVdHGvAltuEn
LUpq3XJm24QVcX8oxGnOk6hpHwWePjSwAOIeGGrvjGcBJRU1R4o100hmrXOfzKY1
6T/B+T1gfs31wIVSXtroBUkQJFl4wUgYT/BtawupCYzLbuZYC3sr6xHx7QIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFBZ79VmrbBwJ3xGQK787yItpH1oXMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRm52MVdhdHNIQW5mRVpBcnZ6dklpMmtmV2hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAYBAIAATASAwQALYAaAwQA
LYF/AwQBXb72MDAEAgACMCoDBQMqBrXAAwUDKg8vgAMFACoP6EADBQMqEtbAAwUA
KhMYxAMFAyoT/QAwDQYJKoZIhvcNAQELBQADggEBAD2FhPAemz006zHxXP6KdBW2
bzBOHS6QPLyTPdZUqW1gttrDowTsYK5eQnDuU38VXkspMf8retDmiVp9AfK2ObGr
mt0iflJpgIYLcRlPGEFuTO4QuRa+u4ONItiRM5LOborTonSqL1QG7IRFIBwyo3MV
lbDO6QIRyaGI4Jkz8fSqqEwU1pQ2SUYlcMHAnyHNTp/4Bnhg9DNkUZpJGkfQjQOF
AvVP1F9GNbIZB5lw35ClZWRUbu1Yhp5KZ+DuWSaN3iu7ZZjbSzOzfkOoSoJeYhoi
Fr6sD6jg4S738cDAWFxU5CYOhCEoNmXrRr6XcTwtVg6LYIqCkTL+MqKz9X6tRPs=
-----END CERTIFICATE-----
Generated at Thu May 8 09:15:46 2025 by rpki-client