Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TmTHud4FzdcmebQdaNQZGO0woQ0.roa
File: TmTHud4FzdcmebQdaNQZGO0woQ0.roa (raw, json)
Hash identifier: zlKvlbrKC/MJn9egnMV5Vr8eEUTyDtorRNOKpqNpQ8U=
Subject key identifier: 4E:64:C7:B9:DE:05:CD:D7:26:79:B4:1D:68:D4:19:18:ED:30:A1:0D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188B90EEE679FAB910B238E78C4592CF54A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TmTHud4FzdcmebQdaNQZGO0woQ0.roa
Signing time: Wed 14 Jun 2023 08:39:03 +0000
ROA not before: Wed 14 Jun 2023 08:39:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0e:f201:1::/48 maxlen: 48
2a10:67c5:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:0e:ee:67:9f:ab:91:0b:23:8e:78:c4:59:2c:f5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 14 08:39:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e64c7b9de05cdd72679b41d68d41918ed30a10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:0d:c0:27:50:b9:dd:19:b6:b4:a1:c2:73:
82:b0:c8:dc:83:ee:09:c3:d3:d1:b8:ca:9a:82:cc:
80:78:b7:51:6b:04:ef:8f:10:a2:70:f8:a7:ad:77:
9e:21:d1:aa:c2:ad:05:30:fe:6b:96:49:3c:96:15:
0d:f8:4b:be:f6:ab:4e:7d:ad:eb:11:68:b5:20:ce:
82:4a:42:5e:ac:14:fb:d9:51:bc:30:b1:79:ce:c4:
cf:dd:b4:f5:81:99:ef:cc:ad:39:0c:22:30:ad:09:
f7:17:b4:8b:38:c6:80:2e:20:95:ac:4b:d4:8d:cd:
82:6d:60:ab:30:03:69:b9:f6:62:cc:2e:ba:ec:b7:
cf:1b:49:ae:62:5e:66:50:41:d8:34:9a:ef:0f:c8:
25:5b:c2:87:c0:d5:c8:64:e3:e7:b6:ab:b3:21:8e:
3a:e9:81:88:d1:e0:dd:2f:30:51:59:3d:d0:85:d0:
6b:c5:09:36:5a:6b:3f:13:e9:08:85:59:a8:7e:06:
2a:1e:6a:51:c4:7d:4f:11:18:cb:1b:58:d1:c9:b2:
76:7d:52:1d:46:90:52:d1:7c:17:c7:6b:84:19:2f:
a6:53:05:e7:58:1b:a0:b0:28:4a:fe:3e:3d:ca:02:
13:5c:e2:22:a5:85:f9:4e:1d:20:d9:af:f0:f7:96:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:C7:B9:DE:05:CD:D7:26:79:B4:1D:68:D4:19:18:ED:30:A1:0D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TmTHud4FzdcmebQdaNQZGO0woQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0c:4880::/29
2a0c:9247:1::/48
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a01::/32
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a10:67c5:1::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
2a13:18c0:1::/48
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
89:69:30:44:ec:d2:6c:72:16:33:88:37:92:b0:14:55:ec:b5:
89:38:6f:a0:4b:9b:ec:64:b6:08:ec:f9:b1:fc:2f:b7:54:57:
47:27:47:b6:65:32:13:07:3b:ec:aa:32:fb:e5:de:cd:23:23:
aa:39:45:d3:68:59:95:a4:b5:e2:d8:cb:38:18:b1:1e:6a:14:
30:9d:58:a4:96:45:ef:7d:0f:fc:82:23:dd:af:f7:f6:e3:74:
7d:af:34:4e:6b:a8:a2:d0:67:46:84:dc:40:6a:7c:7e:72:6c:
dc:6c:c7:14:b1:07:89:a7:7c:86:d0:af:1f:9e:60:20:8f:b8:
b8:87:b3:39:7c:c8:42:68:b5:83:07:45:ab:64:1a:01:18:18:
17:53:aa:08:fe:f9:68:1f:a2:93:f8:23:c9:e4:db:f8:48:7e:
3d:dd:14:da:b0:9f:0a:a9:f2:6d:18:e9:13:90:a1:e5:7e:00:
95:98:02:c3:7c:0b:fa:ad:a7:e9:9f:e1:38:73:ca:af:f3:b7:
55:5d:34:77:2b:c1:5a:9c:e9:ea:dc:80:1c:c7:e8:d1:3f:0d:
92:2a:72:54:8f:3e:6a:64:c6:c2:f2:1d:73:81:70:46:7b:43:
f7:ca:1e:fe:7b:5d:1c:0e:51:ef:20:e1:5f:9e:34:3a:0c:63:
75:2c:c2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:35:23 2025 by rpki-client