Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/whaK_X6JUXg8qDxtdJjmQMpanRY.roa
File: whaK_X6JUXg8qDxtdJjmQMpanRY.roa (raw, json)
Hash identifier: eJpEvCnHVEbZOk2q1G4CM/d8I4S7ZGTPXuO/OJ4Z5Vw=
Subject key identifier: C2:16:8A:FD:7E:89:51:78:3C:A8:3C:6D:74:98:E6:40:CA:5A:9D:16
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018920C4AC6B5199D800E9BAD122891B8705
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/whaK_X6JUXg8qDxtdJjmQMpanRY.roa
Signing time: Tue 04 Jul 2023 11:58:27 +0000
ROA not before: Tue 04 Jul 2023 11:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a12:ac40::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:a00::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a10:67c5:1::/48 maxlen: 48
2a13:4900::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a0c:9247:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0f:1e81:1293::/48 maxlen: 48
2a0c:9240::/29 maxlen: 29
2a0f:1e00:abc::/48 maxlen: 48
2a10:6d40::/29 maxlen: 29
2a0f:1e81:a3d0::/48 maxlen: 48
2a12:ac41::/32 maxlen: 32
2a12:ac40:f::/48 maxlen: 48
2a0c:4880::/29 maxlen: 29
2a0f:a01::/32 maxlen: 32
2a12:ecc2::/32 maxlen: 32
2a0f:1e00:123::/48 maxlen: 48
2a13:1940::/29 maxlen: 29
2a0f:1e00:def9::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:c4:ac:6b:51:99:d8:00:e9:ba:d1:22:89:1b:87:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 4 11:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2168afd7e8951783ca83c6d7498e640ca5a9d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:ca:fb:21:d4:01:bf:40:0d:42:dc:64:3a:
83:4c:7f:a3:d9:81:c7:e2:5c:9c:d5:6c:9c:67:0d:
ad:1c:4a:46:99:61:cd:66:be:5b:e8:39:b8:f3:56:
35:95:2a:ec:aa:f4:a5:1d:b4:c8:e6:d2:7a:40:db:
c0:78:6d:b6:fc:16:4d:59:4d:a1:bb:e2:8a:95:39:
81:6f:8d:8d:05:a7:32:23:47:7a:00:cc:c2:6f:e0:
39:70:ce:45:54:b6:ea:90:c1:19:9c:ac:3f:8d:d3:
c9:e5:c4:73:44:57:a9:c0:b8:63:88:96:b7:d6:5b:
cc:74:01:10:f4:af:d4:27:b4:89:c8:b0:a3:3f:52:
39:86:22:e2:e3:fa:6a:e8:87:f5:a7:aa:be:99:95:
af:aa:51:e3:9d:9b:6f:40:86:44:01:ac:95:13:8c:
71:4b:14:9a:9e:45:6e:c9:9a:84:91:7d:57:f7:0c:
8c:8b:61:b9:3a:92:f7:93:3f:bc:6a:ac:de:8f:58:
27:2e:40:fa:7b:db:61:63:c6:0f:8b:7f:8f:59:40:
f3:58:41:25:e4:95:d4:55:57:aa:e6:4f:ae:ab:75:
e3:6c:c8:66:b9:4a:2f:b3:62:a8:04:40:91:86:4d:
d8:fe:ac:9a:97:d6:f0:c8:40:42:2f:38:7f:39:16:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:16:8A:FD:7E:89:51:78:3C:A8:3C:6D:74:98:E6:40:CA:5A:9D:16
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/whaK_X6JUXg8qDxtdJjmQMpanRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a07:f300::/29
2a0c:4880::/29
2a0c:9240::/29
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:a00::/31
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:3d80:123::/48
2a0f:3d82::/32
2a0f:e940::/29
2a10:67c5:1::/48
2a10:6d40::/29
2a12:ac40::/48
2a12:ac40:f::/48
2a12:ac41::/32
2a12:ecc2::/32
2a13:18c0:1::/48
2a13:1940::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
85:1c:10:e3:3f:58:b3:7c:d7:48:a9:4b:4a:7c:35:eb:3d:f7:
6a:68:60:4f:2f:5d:a0:88:90:00:50:45:17:c9:79:fd:61:00:
7a:9b:a4:e4:8c:d4:5e:61:31:90:e6:8b:98:3d:6c:ba:02:86:
50:2e:db:3c:2f:79:d9:6d:f6:ad:ec:80:9c:52:df:b9:29:b5:
a5:c6:ec:e3:80:49:7d:d8:63:9e:82:fb:d8:e7:35:5e:80:65:
cb:2e:0d:1b:dc:ff:3c:75:55:5e:33:11:5d:85:d1:d9:17:ad:
9a:e9:5f:fb:22:bb:20:05:7b:e9:70:8a:01:de:68:eb:f1:41:
f3:88:32:5b:4b:f0:fc:11:1d:d3:0b:14:23:c7:80:58:38:fd:
9b:6c:71:46:07:6d:ef:a3:60:8e:76:05:ff:4f:5d:63:65:d0:
cf:af:0b:ee:cf:00:fe:00:34:ae:29:cc:3a:54:ba:a2:b7:f9:
f8:0b:ec:f0:a8:a1:5f:b7:f0:e1:f6:59:ed:47:b8:0c:da:52:
b7:66:cd:be:61:1c:cb:da:8a:5e:24:5c:c6:82:d0:08:bf:67:
7c:b2:01:0e:5f:53:79:8a:64:a4:89:3b:c0:85:94:b1:ca:6f:
70:e2:74:3d:2d:67:8d:ec:48:6e:12:56:ea:92:a0:8a:72:e8:
05:f4:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:55:50 2025 by rpki-client