Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X6YNdCSkDdomNq7yGpLkw2wDUMk.roa
File: X6YNdCSkDdomNq7yGpLkw2wDUMk.roa (raw, json)
Hash identifier: hhpfsSrDehsazV9wzYH/XzXuwt+vVdYVc2zIGD9U7bc=
Subject key identifier: 5F:A6:0D:74:24:A4:0D:DA:26:36:AE:F2:1A:92:E4:C3:6C:03:50:C9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018B51521694F640373BF21C66503BFC4E33
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X6YNdCSkDdomNq7yGpLkw2wDUMk.roa
Signing time: Sat 21 Oct 2023 08:20:15 +0000
ROA not before: Sat 21 Oct 2023 08:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a10:67c5:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac41::/32 maxlen: 32
2a12:ac40:f::/48 maxlen: 48
2a0f:ea42::/32 maxlen: 32
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a12:ecc2::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a13:1940::/29 maxlen: 29
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a13:18c3::/32 maxlen: 32
2a07:f306:123::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:52:16:94:f6:40:37:3b:f2:1c:66:50:3b:fc:4e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 21 08:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa60d7424a40dda2636aef21a92e4c36c0350c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:76:26:ee:ca:ce:bf:ba:89:eb:e4:38:cd:09:
e0:9a:c4:de:24:da:45:97:1b:12:99:51:16:34:c0:
49:68:84:99:0a:c6:7b:f6:ff:fe:13:21:12:04:04:
c3:0f:cd:29:d6:02:fe:10:31:14:ac:0e:43:84:5e:
ed:75:67:51:95:cd:37:ca:45:75:2f:71:47:b8:7f:
8b:3b:32:cd:36:12:1e:4e:2a:22:12:67:b4:55:83:
76:5f:24:79:70:5b:fa:16:c9:cd:d2:63:21:c8:7f:
bc:be:c3:da:17:49:07:1a:cf:02:f1:e7:38:1d:dc:
cf:2b:4a:ce:e9:34:ee:01:8f:f9:4e:85:36:a4:ce:
ec:44:b7:6c:5f:c7:d9:74:3b:e1:e8:95:1a:45:dc:
8c:e2:d3:bc:84:aa:d0:6e:c9:68:df:c5:76:1a:e5:
1d:81:eb:68:ca:b7:22:80:9e:20:8c:41:30:39:c9:
1d:af:3b:96:f3:17:54:ab:f0:c3:c6:18:5f:75:0c:
1d:09:f4:0a:f2:5c:ec:c3:30:2d:75:5d:44:6d:4d:
0d:4e:9f:40:db:75:8d:7f:b4:ca:71:72:e1:43:e2:
e7:f3:90:1e:e2:7d:ca:51:70:4d:5a:12:db:2a:34:
90:33:d2:52:b5:36:28:88:55:74:85:1d:0c:e1:71:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:0D:74:24:A4:0D:DA:26:36:AE:F2:1A:92:E4:C3:6C:03:50:C9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X6YNdCSkDdomNq7yGpLkw2wDUMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/29
2a0c:9240::/29
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d87::/32
2a0f:e940::/29
2a0f:ea42::/32
2a10:67c5:1::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:ac41::/32
2a12:ecc2::/32
2a13:18c0:1::/48
2a13:18c3::/32
2a13:1940::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
bd:91:3d:9c:a7:48:a9:fb:c9:f7:fd:43:a0:c1:4e:49:82:48:
79:41:e7:8a:3f:4d:96:fb:99:d1:7d:31:31:cd:0f:b4:9f:09:
0b:9f:68:f1:4e:82:44:f0:78:f8:04:2b:93:85:d9:e1:e1:c8:
41:6e:31:db:b7:c3:fc:4e:72:5c:98:f7:57:d4:64:99:d6:38:
ea:2d:63:db:2d:32:74:f3:99:d6:2d:c5:d6:0e:cb:96:8f:91:
47:4f:0a:2a:41:fa:6f:be:95:a6:ea:87:92:fc:65:91:60:0c:
7f:5a:ff:f2:fc:23:1a:13:f1:9e:21:78:f7:58:e5:fb:29:36:
08:31:3c:84:20:60:8c:4f:13:41:53:d3:f9:bd:1d:5c:54:f5:
07:19:32:ec:65:1a:9e:14:e5:44:1c:84:46:90:45:57:81:1e:
47:26:48:f6:83:39:7d:da:92:e5:86:55:e1:56:0d:db:69:ba:
fb:e7:a8:ac:89:45:72:a6:48:8b:4a:4f:ca:5e:ec:31:a7:5e:
06:b9:3c:f5:68:64:8c:13:ee:15:c1:fe:90:3e:2a:83:9b:ca:
df:37:87:f2:f3:43:de:a6:55:95:a9:68:b5:74:c0:4b:1f:a8:
5c:88:00:cd:7b:60:1f:08:b5:71:9b:25:0e:56:f7:78:a8:d9:
d7:1c:b8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:40:06 2025 by rpki-client