Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/e8-_zCloWMnb4YnsRZU-5-BvCUA.roa
File: e8-_zCloWMnb4YnsRZU-5-BvCUA.roa (raw, json)
Hash identifier: VO6oMAjrZucAbL7C/6QAAv0LAIXBD++01ROBaUmwzZQ=
Subject key identifier: 7B:CF:BF:CC:29:68:58:C9:DB:E1:89:EC:45:95:3E:E7:E0:6F:09:40
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018B6AC6CFB1AA783A8A71CE8B0C3386037A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/e8-_zCloWMnb4YnsRZU-5-BvCUA.roa
Signing time: Thu 26 Oct 2023 06:58:16 +0000
ROA not before: Thu 26 Oct 2023 06:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a10:67c5:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac41::/32 maxlen: 32
2a12:ac40:f::/48 maxlen: 48
2a0f:ea42::/32 maxlen: 32
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a12:ecc2::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a13:1940::/29 maxlen: 29
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a13:18c3::/32 maxlen: 32
2a07:f306:123::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:c6:cf:b1:aa:78:3a:8a:71:ce:8b:0c:33:86:03:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 26 06:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bcfbfcc296858c9dbe189ec45953ee7e06f0940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:8f:93:84:d8:38:c0:a7:9b:93:8a:36:07:
fb:1c:87:e7:3e:c8:cf:08:7f:9a:a9:4f:4c:76:e1:
d0:fa:2f:0b:3f:07:a2:b5:20:11:e9:aa:3d:72:ca:
b9:2d:5a:01:7d:06:9f:c0:9c:ba:23:76:1f:51:02:
e4:9a:af:1e:4c:ee:23:d8:3f:7e:22:bf:1a:35:3f:
98:68:58:7e:1e:5d:b5:4a:27:ec:97:9f:2e:14:43:
9f:9e:f5:77:1b:eb:6a:1c:03:f9:58:25:ce:f5:f8:
8e:c9:c1:ec:36:c5:30:be:70:b3:2c:22:04:66:fe:
30:e3:98:9b:fd:d9:d3:95:f4:22:dd:ab:32:6c:ab:
0f:67:59:48:d9:53:d8:10:4f:03:44:fb:e6:64:6a:
c9:57:8c:a6:c0:06:d8:78:2f:c4:dc:1d:df:67:0f:
bd:aa:4d:bf:4a:27:df:48:64:39:55:0d:18:8c:4c:
a7:18:5a:10:26:52:e9:7c:fc:b6:7c:7b:12:46:36:
77:a8:6b:55:7c:55:22:8d:b2:9c:2d:23:5b:f5:76:
85:0e:22:1f:b2:4f:fb:d4:13:fe:92:18:0f:44:74:
d6:95:b8:79:4f:5b:17:e0:c5:dc:dd:f1:59:17:35:
82:7c:af:29:14:fd:33:31:e6:82:a0:4c:c2:66:f3:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CF:BF:CC:29:68:58:C9:DB:E1:89:EC:45:95:3E:E7:E0:6F:09:40
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/e8-_zCloWMnb4YnsRZU-5-BvCUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a07:f306:123::/48
2a0c:4880::/29
2a0c:9247:1::/48
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d87::/32
2a0f:e940::/29
2a0f:ea42::/32
2a10:67c5:1::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:ac41::/32
2a12:ecc2::/32
2a13:18c0:1::/48
2a13:18c3::/32
2a13:1940::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
1c:c3:52:a5:e8:da:5d:0d:c1:0d:d6:bd:41:cb:b4:c0:d2:8d:
48:7c:b3:ca:26:e0:28:f2:38:23:18:89:9f:72:71:43:ab:23:
46:ac:c2:40:dd:45:bb:3a:5d:84:a7:c5:12:c5:fd:28:de:09:
2e:c5:d5:a2:c3:b0:e6:fc:9b:a6:75:87:51:9a:02:93:f7:b1:
17:7c:80:2c:d4:66:00:a9:4d:3f:a7:b1:e5:76:6f:cd:8e:44:
52:f4:61:bc:be:ce:86:39:bf:50:29:5b:2d:8a:85:89:28:7e:
24:16:ed:6d:c2:4a:f7:15:6d:6d:bb:f6:f6:08:56:ca:76:a4:
35:83:db:67:84:d1:ba:9b:cb:59:31:5f:5c:71:0a:9a:20:49:
8d:49:84:31:31:7e:28:0a:c1:5f:c3:91:ab:1d:25:ea:86:2f:
6b:be:d6:04:df:e8:30:ae:14:3f:9f:30:4e:d2:6d:30:2d:4c:
83:59:08:16:42:00:93:13:b3:e2:e5:5a:b9:80:5f:c1:76:74:
69:c4:0d:3a:a9:ff:b9:6b:01:b8:fe:ef:17:2a:c5:4f:e9:94:
c7:18:e3:d4:f3:7e:c7:4b:f5:f6:a2:ad:b4:94:0e:94:a3:42:
14:f0:21:33:ce:c6:df:b3:68:1d:13:e9:6a:31:78:f4:37:4c:
94:68:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:28:43 2025 by rpki-client