Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sK-49N21yZ6w5SjBhO_kDN1YaeA.roa
File: sK-49N21yZ6w5SjBhO_kDN1YaeA.roa (raw, json)
Hash identifier: ZPUiQNeh3WJAeBaItRoN9aBasPhDNvwmmrag/Z3TDwo=
Subject key identifier: B0:AF:B8:F4:DD:B5:C9:9E:B0:E5:28:C1:84:EF:E4:0C:DD:58:69:E0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0186FDFF884EF630086800F8AB7D9C7D4CE9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sK-49N21yZ6w5SjBhO_kDN1YaeA.roa
Signing time: Mon 20 Mar 2023 07:50:27 +0000
ROA not before: Mon 20 Mar 2023 07:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 193.41.87.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:39c1::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0f:7f00::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:3d84::/32 maxlen: 32
2a0e:5a80::/29 maxlen: 29
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:4880::/32 maxlen: 32
2a0f:1e81:2::/48 maxlen: 48
2a12:d540::/29 maxlen: 29
2a0f:39c0::/32 maxlen: 32
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac40:f::/48 maxlen: 48
2a0f:a01::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:7f01::/32 maxlen: 32
2a0f:e842::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:ff:88:4e:f6:30:08:68:00:f8:ab:7d:9c:7d:4c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 20 07:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0afb8f4ddb5c99eb0e528c184efe40cdd5869e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:f4:74:3a:b0:98:52:74:a0:3d:af:b6:23:
3f:89:ad:26:75:08:a7:e2:2b:c0:62:6f:5f:cc:31:
55:36:75:a5:2a:38:ed:46:69:98:66:2f:4a:0d:4e:
46:0a:57:46:88:3d:89:88:a1:5b:9a:3d:68:c6:98:
ea:99:81:88:98:e1:d2:b9:f4:f8:96:38:d7:a2:ca:
4d:c1:03:f3:c0:dd:85:2c:e5:73:4c:3b:ee:79:22:
8b:7f:e9:12:53:a6:40:de:35:09:c8:08:da:6c:c9:
f6:62:54:72:9a:4e:26:fa:dc:a4:b1:12:2f:24:7b:
41:14:16:54:08:22:70:de:c6:bb:b5:ce:c8:64:57:
7d:8d:a7:41:cf:c2:dd:a0:3d:3f:0d:cc:78:5f:a6:
61:3b:ce:bf:5f:f2:80:d1:e8:cf:7b:05:64:7f:37:
28:1d:de:20:12:50:3b:fa:55:18:7c:08:25:49:98:
4e:63:3a:a0:9e:b7:2e:4e:89:e1:8b:3f:61:fe:95:
8a:6b:26:10:63:ed:75:fc:ba:fb:00:eb:55:79:f5:
5a:b4:95:08:f0:89:33:4c:a3:9f:73:cd:24:99:55:
33:f0:8f:40:12:89:f1:5e:cd:12:b1:48:4a:5e:18:
df:0a:47:0d:a6:d9:42:76:ea:46:98:f6:91:fa:2f:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AF:B8:F4:DD:B5:C9:9E:B0:E5:28:C1:84:EF:E4:0C:DD:58:69:E0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sK-49N21yZ6w5SjBhO_kDN1YaeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.87.0/24
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/32
2a0e:1a80::/32
2a0e:5a80::/29
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:39c0::/31
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7f00::/31
2a0f:e842::/32
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
02:d9:e7:b2:66:43:a0:59:e3:83:38:04:20:29:52:9b:16:7b:
8b:4d:65:64:5f:9a:73:fa:7e:0c:f2:bf:44:66:b9:be:63:82:
88:89:f5:1d:9a:bf:68:8e:fd:e6:91:bf:e7:0d:6e:4d:bc:72:
a6:96:df:7a:60:c8:dc:e6:62:55:95:31:f2:32:b1:47:54:89:
7f:a5:76:fe:d7:c5:9f:cc:81:d6:f6:e6:0e:5d:8a:b0:bc:48:
92:8d:75:27:57:96:d0:7c:57:f2:0b:9d:82:89:24:be:9a:1a:
3d:74:9e:67:ff:4f:25:db:38:81:42:5d:ed:29:51:9b:f4:a2:
90:68:32:dc:60:b8:c6:78:fd:4f:62:13:50:f0:a4:cf:cd:8e:
ec:a8:ec:68:ff:6e:61:b1:9c:aa:90:f7:2d:b4:65:8f:ef:8b:
8d:94:be:8c:3e:89:6d:84:24:31:eb:1c:13:f0:eb:ea:84:be:
53:35:2b:48:bf:20:0a:f2:ae:ae:87:0d:76:fe:52:fa:5c:16:
02:23:3d:85:6e:19:5a:b6:47:57:cb:fb:82:33:c0:44:16:45:
01:df:3c:84:5c:a7:de:01:7c:85:39:cb:ef:3b:19:0a:aa:7c:
eb:d1:c9:7d:8a:f6:99:bb:95:c3:c1:7f:8e:11:68:2e:94:db:
9a:d2:eb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:30:25 2025 by rpki-client