Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KE7108Q-tgN1oB3wTe_cF2zgr6M.roa
File: KE7108Q-tgN1oB3wTe_cF2zgr6M.roa (raw, json)
Hash identifier: QA1dIDsZJZbTWVwCwr9XklRDI7HP7iGWbYcNrGoiTfM=
Subject key identifier: 28:4E:F5:D3:C4:3E:B6:03:75:A0:1D:F0:4D:EF:DC:17:6C:E0:AF:A3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01883355DBF5F4CD5C0D84598546F4590243
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KE7108Q-tgN1oB3wTe_cF2zgr6M.roa
Signing time: Fri 19 May 2023 09:27:24 +0000
ROA not before: Fri 19 May 2023 09:27:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 93.190.246.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
2a0d:1140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:55:db:f5:f4:cd:5c:0d:84:59:85:46:f4:59:02:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 09:27:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=284ef5d3c43eb60375a01df04defdc176ce0afa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:de:96:e5:03:26:99:12:81:26:0e:af:26:
d3:0d:c0:e9:65:da:8f:ed:44:34:3e:5c:c9:b9:01:
ce:c1:17:80:08:5d:4a:a0:7f:8d:c8:31:c9:de:2c:
04:35:7c:96:ba:4e:05:75:83:35:1c:cf:79:0b:dc:
9e:70:14:33:dc:2a:62:c1:9f:f7:e9:ad:52:89:06:
38:dd:d8:d5:a6:46:48:82:fb:7c:0c:73:dd:c3:10:
ca:3c:63:3b:d4:0a:a3:e0:3e:e8:25:af:e3:d3:2d:
a3:c8:34:d4:37:bb:34:43:08:06:b4:fa:e6:50:55:
85:fb:97:7b:a8:4f:a6:fa:4f:e5:6a:c1:9e:7a:63:
af:e7:d1:a3:e5:ec:e2:22:88:e6:b1:cb:eb:ee:b5:
7c:5f:31:bb:db:59:49:7d:ae:aa:bd:1f:ee:6b:93:
31:d5:27:f5:4e:e7:37:6a:df:93:ae:38:41:3b:28:
25:9f:29:16:e8:e2:3f:6e:7f:b9:e1:35:d6:1f:d3:
0b:f9:31:87:e3:f1:06:63:71:5c:d9:43:a2:c7:87:
ac:7c:d6:fc:23:c4:0b:f0:5e:12:ad:c3:00:eb:b9:
7f:5f:46:60:14:35:6d:92:3f:fd:66:04:da:3d:6e:
e2:fa:6f:8f:71:b8:af:ac:a2:5c:b5:e8:b7:72:bc:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4E:F5:D3:C4:3E:B6:03:75:A0:1D:F0:4D:EF:DC:17:6C:E0:AF:A3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KE7108Q-tgN1oB3wTe_cF2zgr6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.79.0/24
93.190.246.0/24
IPv6:
2a0d:1140::/29
Signature Algorithm: sha256WithRSAEncryption
c2:00:fb:9b:53:de:cb:49:9a:66:73:83:fb:be:49:72:ce:7c:
17:58:47:09:eb:77:12:3a:76:1c:91:e5:d7:c0:8e:db:ae:e7:
af:5b:2a:c0:30:52:cb:b2:5c:15:75:87:43:59:1b:bf:b4:3d:
38:aa:ce:3e:b4:1c:64:73:af:de:92:05:1c:d9:be:75:6a:67:
4d:29:dc:70:32:36:11:74:2b:c1:51:aa:b7:c3:0d:44:fa:2b:
dd:6e:bf:f1:4b:0b:f4:31:83:f5:44:7c:f9:1a:b8:3e:cd:1f:
ad:2f:ea:99:30:e2:af:67:3e:bb:08:b1:67:c2:bf:91:4a:f2:
a1:da:f3:ee:1d:0e:15:29:a8:2e:e4:13:3d:76:0c:b4:e5:3e:
18:38:57:98:04:35:11:43:53:d6:64:d1:e0:1a:e8:a6:39:f3:
8e:16:f3:80:46:6d:f3:1c:dd:5f:fe:9f:a4:56:7a:b1:27:97:
d5:f9:bc:c4:68:bf:fe:42:3f:08:e6:ff:2c:86:4d:52:1a:80:
cb:d9:50:46:12:27:ba:d4:2d:46:16:88:34:aa:32:51:5c:73:
97:88:b3:ff:ff:7f:80:56:5e:cf:ee:22:f3:62:b4:e5:8c:b3:
15:0e:96:e2:f7:1d:bc:87:b3:54:6e:c6:0c:4e:67:02:1e:21:
52:2b:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:12:04 2025 by rpki-client