Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n0AGWm-d0EmElx4QEW9y4Tp_K-M.roa
File: n0AGWm-d0EmElx4QEW9y4Tp_K-M.roa (raw, json)
Hash identifier: fp9oJovz9Xs2pLIcz8QEQFZAY5ZP404/ByEcY1sB8FQ=
Subject key identifier: 9F:40:06:5A:6F:9D:D0:49:84:97:1E:10:11:6F:72:E1:3A:7F:2B:E3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188334E89A268FD5DD089CDFC9270F14022
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n0AGWm-d0EmElx4QEW9y4Tp_K-M.roa
Signing time: Fri 19 May 2023 09:19:25 +0000
ROA not before: Fri 19 May 2023 09:19:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:4e:89:a2:68:fd:5d:d0:89:cd:fc:92:70:f1:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 09:19:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f40065a6f9dd04984971e10116f72e13a7f2be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:23:74:9d:97:7b:21:e9:f9:d6:77:a7:82:59:
12:22:ea:ae:32:c4:fa:27:b3:a9:93:ba:11:a0:04:
84:82:23:09:64:74:ac:46:16:64:cd:62:d3:bb:af:
85:d8:73:34:09:74:f8:12:c9:25:1c:7b:9e:08:c4:
6f:be:a1:22:6f:03:bc:e9:8f:9d:81:bf:f3:6f:53:
3f:3b:ee:67:ee:95:e3:ed:47:f7:ab:2a:c2:d7:94:
51:d5:ce:5c:49:12:84:43:1b:62:0e:84:36:52:1c:
bc:20:7a:ab:9e:06:e8:84:4b:a9:37:4e:f4:44:e3:
be:e4:c6:d4:9b:d8:81:81:bb:36:8b:41:55:81:26:
5c:82:60:db:c5:8c:1e:a3:85:f1:ec:3e:6b:d1:d8:
57:d5:cd:5f:df:8a:64:af:f8:5c:e8:01:88:f6:e8:
e3:64:7b:2c:46:c6:99:5b:8e:8c:21:b6:06:59:10:
41:70:f2:d8:33:57:32:a5:95:5a:ad:79:1a:56:d3:
f4:f9:48:d9:e3:27:6d:30:bd:4c:f8:0b:eb:af:3b:
f1:75:ec:8b:16:fb:5c:a8:06:c8:f5:29:0e:9b:9d:
0a:ed:e3:1a:67:49:b4:fb:46:5e:35:fb:b3:74:70:
f7:59:03:b7:10:5a:96:ea:29:a7:b9:4a:0c:38:94:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:40:06:5A:6F:9D:D0:49:84:97:1E:10:11:6F:72:E1:3A:7F:2B:E3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/n0AGWm-d0EmElx4QEW9y4Tp_K-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.129.127.0/24
45.135.37.0/24
93.190.246.0/23
Signature Algorithm: sha256WithRSAEncryption
03:af:09:a6:3d:93:e8:46:ac:5b:e1:12:43:58:4a:ad:12:54:
bc:f0:22:2f:57:57:0e:b6:c5:c1:e0:3b:cb:ae:8c:d8:92:9b:
13:01:92:6e:9f:41:d3:1d:29:da:62:b0:24:b6:b1:82:0d:ae:
bc:28:3e:04:5e:30:a5:fc:7a:8a:8e:1f:7b:83:6c:c8:c6:20:
92:73:8c:a6:69:16:41:a4:73:94:d5:21:c3:5a:23:f3:34:73:
f2:23:a5:63:cc:46:05:c8:96:3b:85:6e:14:39:21:f9:04:4b:
53:f4:da:be:55:8e:40:8f:89:23:2e:08:99:8a:50:56:6f:1e:
12:79:d3:42:6a:de:70:2f:f7:c4:d1:6a:93:ce:61:d6:c4:1d:
f1:61:45:40:3e:42:59:11:b9:e5:0b:30:59:02:d0:fb:32:43:
94:d3:66:80:f9:db:30:69:6c:1a:64:5a:40:45:69:be:21:c2:
f7:9c:94:ca:e2:f7:30:7f:a8:1c:f8:99:fb:06:cc:7b:68:74:
ba:cd:03:64:20:99:d1:56:94:8a:70:63:ac:15:b5:e4:ab:a5:
f0:f6:93:18:2a:e2:3e:52:c3:84:b2:ee:9d:2b:ef:27:aa:c8:
1d:14:0e:a5:c9:50:8d:5d:49:9b:7a:0b:c1:c9:53:23:82:b1:
16:fa:59:6c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYgzTomiaP1d0InN/JJw8UAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNTE5MDkxOTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjQwMDY1YTZmOWRkMDQ5ODQ5NzFlMTAxMTZmNzJlMTNhN2YyYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiN0nZd7Ien51nenglkSIuquMsT6
J7Opk7oRoASEgiMJZHSsRhZkzWLTu6+F2HM0CXT4EsklHHueCMRvvqEibwO86Y+d
gb/zb1M/O+5n7pXj7Uf3qyrC15RR1c5cSRKEQxtiDoQ2Uhy8IHqrngbohEupN070
ROO+5MbUm9iBgbs2i0FVgSZcgmDbxYweo4Xx7D5r0dhX1c1f34pkr/hc6AGI9ujj
ZHssRsaZW46MIbYGWRBBcPLYM1cypZVarXkaVtP0+UjZ4ydtML1M+AvrrzvxdeyL
FvtcqAbI9SkOm50K7eMaZ0m0+0ZeNfuzdHD3WQO3EFqW6imnuUoMOJQB0wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ9ABlpvndBJhJceEBFvcuE6fyvjMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbjBBR1dtLWQwRW1FbHg0UUVXOXk0VHBfSy1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYAaAwQA
LYF/AwQALYclAwQBXb72MA0GCSqGSIb3DQEBCwUAA4IBAQADrwmmPZPoRqxb4RJD
WEqtElS88CIvV1cOtsXB4DvLrozYkpsTAZJun0HTHSnaYrAktrGCDa68KD4EXjCl
/HqKjh97g2zIxiCSc4ymaRZBpHOU1SHDWiPzNHPyI6VjzEYFyJY7hW4UOSH5BEtT
9Nq+VY5Aj4kjLgiZilBWbx4SedNCat5wL/fE0WqTzmHWxB3xYUVAPkJZEbnlCzBZ
AtD7MkOU02aA+dswaWwaZFpARWm+IcL3nJTK4vcwf6gc+Jn7Bsx7aHS6zQNkIJnR
VpSKcGOsFbXkq6Xw9pMYKuI+UsOEsu6dK+8nqsgdFA6lyVCNXUmbegvByVMjgrEW
+lls
-----END CERTIFICATE-----
Generated at Mon May 12 17:47:32 2025 by rpki-client