Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_oemDvc6eYDWYTL_teYSSOrUd9s.roa
File: _oemDvc6eYDWYTL_teYSSOrUd9s.roa (raw, json)
Hash identifier: 2M0GGDqIDthyMc0eFMKKPep7AkVuTaeIBpEPvI6IRkQ=
Subject key identifier: FE:87:A6:0E:F7:3A:79:80:D6:61:32:FF:B5:E6:12:48:EA:D4:77:DB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018799BB3F09892D4853FD48910AF5A1A8C3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_oemDvc6eYDWYTL_teYSSOrUd9s.roa
Signing time: Wed 19 Apr 2023 13:36:38 +0000
ROA not before: Wed 19 Apr 2023 13:36:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399989
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.128.25.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:bb:3f:09:89:2d:48:53:fd:48:91:0a:f5:a1:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 19 13:36:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe87a60ef73a7980d66132ffb5e61248ead477db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:fc:be:a1:cd:6c:3e:91:dd:31:eb:84:c7:
43:a4:8e:b0:3d:d5:e4:84:ec:f7:d6:90:7a:a7:ce:
ae:12:21:37:1b:6f:aa:40:55:0f:af:2b:60:58:60:
ee:8e:44:0e:0f:23:6b:d3:a6:86:14:6e:f2:4a:67:
53:94:b8:f0:87:78:70:b4:25:23:95:11:57:31:3c:
77:e9:f5:7f:d9:62:f1:79:7f:e7:c4:53:27:ec:df:
d2:98:09:6b:7b:88:5a:e3:44:f5:ae:c4:f3:81:f8:
e6:77:64:06:ca:49:49:d0:58:64:fa:58:4f:a1:f2:
d1:c3:7f:47:3e:5e:b3:11:e9:a9:e6:29:6e:b9:de:
14:5a:52:b7:0a:c0:39:30:58:b5:a0:ad:9a:33:46:
43:04:99:b0:47:e2:48:32:87:0b:52:a0:96:2f:c2:
b7:da:e0:5d:d2:fc:9a:06:5c:53:40:7e:b0:67:84:
fe:58:43:83:8b:8b:20:a5:ac:06:05:77:3c:09:b7:
7e:60:b4:a5:3c:e7:bc:e6:f6:db:1c:d1:23:74:41:
7c:65:6d:57:32:70:2e:45:13:3f:a8:fe:bf:03:9b:
be:7d:90:70:9a:bb:91:90:5e:e2:1e:cb:ae:4e:85:
83:9e:3d:ba:f8:1b:a4:0a:a1:b8:5a:ff:83:c8:ba:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:A6:0E:F7:3A:79:80:D6:61:32:FF:B5:E6:12:48:EA:D4:77:DB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_oemDvc6eYDWYTL_teYSSOrUd9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
45.128.79.0/24
45.129.127.0/24
45.135.37.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:92:3b:7d:ce:85:67:b8:78:7a:5e:59:e5:6f:09:79:63:af:
55:c5:83:fb:80:50:6b:fc:f5:fa:54:78:5f:3d:6f:1e:af:ad:
68:60:a7:36:a9:c5:b6:63:5a:37:8c:c7:24:8f:36:58:06:ea:
88:ee:11:00:3c:70:07:cb:1f:64:84:d2:e9:b1:60:97:b0:db:
13:13:b1:db:43:e0:c1:47:84:7e:2b:6a:5c:24:69:2e:4e:a2:
61:26:af:0c:91:13:bd:f6:23:e1:0d:98:cf:de:f1:5c:49:32:
9b:1c:11:b0:cb:17:11:0f:8c:d1:b0:d8:3f:3f:83:71:88:31:
70:50:b6:f3:53:ad:b4:d8:ab:ad:f8:36:ae:c3:fd:fa:ba:a4:
43:81:42:be:18:0e:da:72:4f:0e:0b:02:23:f6:7f:b5:6f:c1:
7f:f9:02:a7:a9:a9:28:38:02:ca:4e:d9:00:be:d7:57:80:aa:
ea:61:ce:fc:91:f2:ff:d7:69:d6:93:f5:09:ca:87:27:bd:f7:
99:f6:05:20:91:3d:49:e1:43:b5:6f:96:4c:6b:09:0e:0c:7e:
34:d1:f9:58:02:96:98:6d:3c:79:36:e2:6d:53:74:4e:0f:d1:
78:4c:b6:c4:78:d9:91:2e:c3:02:eb:91:33:85:a3:dd:50:33:
dc:65:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:29:30 2025 by rpki-client