Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zYRN9N1WOIZ7XJQgZS1w7k_Ejgk.roa
File: zYRN9N1WOIZ7XJQgZS1w7k_Ejgk.roa (raw, json)
Hash identifier: lHq63C8eW6BWjE1eDFj7r0WlXUJeeN2aiDjPl/5x8Sc=
Subject key identifier: CD:84:4D:F4:DD:56:38:86:7B:5C:94:20:65:2D:70:EE:4F:C4:8E:09
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018832C8695B19F960FADE15772D10C48A79
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zYRN9N1WOIZ7XJQgZS1w7k_Ejgk.roa
Signing time: Fri 19 May 2023 06:52:54 +0000
ROA not before: Fri 19 May 2023 06:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 93.190.246.0/23 maxlen: 23
45.129.127.0/24 maxlen: 24
45.128.79.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
2a0f:e840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:c8:69:5b:19:f9:60:fa:de:15:77:2d:10:c4:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 06:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd844df4dd5638867b5c9420652d70ee4fc48e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:d6:29:ea:02:ce:8e:51:87:a2:eb:55:0b:
17:30:84:40:ed:9e:41:61:05:9a:2a:3d:53:88:13:
77:01:0e:30:14:ad:0a:da:42:38:3e:94:8c:0a:cb:
d0:57:d3:34:2e:9f:ae:f5:de:c0:0b:0b:5f:69:bc:
8b:f2:bf:e3:4f:e3:6f:75:79:ce:5a:e4:cf:12:70:
4e:0b:9e:a7:8d:98:af:10:5b:cc:cd:a2:a3:55:62:
57:0d:3f:62:8b:c6:32:58:9b:d9:a1:f4:85:43:7f:
6f:4c:bd:73:02:80:61:fb:8d:dc:26:62:3e:2d:fe:
38:ad:a3:43:ca:6f:b2:5c:ff:42:50:3a:78:84:c8:
e0:43:7d:f5:8f:15:04:0c:c5:ff:45:2c:1f:02:12:
c8:2b:1a:bf:26:13:9e:aa:97:c6:f5:67:98:e0:a1:
c5:62:a1:92:87:cd:b8:01:79:78:6a:8b:de:5e:ce:
d8:57:ed:c4:55:7a:4c:cb:f9:13:b1:5d:ed:b1:e8:
ea:fd:ab:80:20:74:f9:4a:d9:5d:be:8b:ef:c7:56:
7a:bb:aa:71:cc:83:77:41:4b:6e:fa:a5:8d:b9:2e:
9a:8e:c8:f3:31:c4:b6:df:97:fe:91:3a:30:f1:1e:
d2:90:2f:7f:eb:b0:cf:5d:7b:bc:1f:37:53:b4:a5:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:4D:F4:DD:56:38:86:7B:5C:94:20:65:2D:70:EE:4F:C4:8E:09
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zYRN9N1WOIZ7XJQgZS1w7k_Ejgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
45.128.79.0/24
45.129.127.0/24
45.135.37.0/24
93.190.246.0/23
IPv6:
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
aa:5c:5f:de:7b:7c:07:c5:b4:e3:bc:00:26:8a:49:3a:9f:2b:
1c:ce:2f:9f:93:75:67:d5:d4:84:fa:8b:f0:c8:4f:d8:74:1c:
1a:80:05:30:e0:72:a8:1b:fe:e8:c2:a1:92:ea:3e:c5:55:3e:
45:91:21:7e:e0:39:b4:03:e5:d0:78:85:4a:b0:b6:da:61:62:
a8:03:be:ee:c7:1e:b9:05:1c:ef:24:36:0b:cb:69:69:f6:7e:
bd:11:0e:01:e3:b0:bd:27:b0:be:ca:3d:6e:d5:8f:77:26:a0:
0b:61:3e:55:e9:bd:ee:8e:9c:bf:fe:b2:01:c0:b7:7e:4f:ad:
ba:39:81:4e:45:23:49:e7:2a:bb:76:3f:75:d0:0a:b0:b3:ea:
d8:59:b3:0f:6d:ef:8d:b1:08:19:ef:2d:04:2f:96:20:5c:ae:
9e:a9:a0:4c:b3:dc:80:ee:06:67:fe:17:56:da:f1:40:16:70:
5c:3a:53:aa:47:e7:62:ef:ed:32:e0:92:d8:b9:72:3d:03:53:
e6:b8:a9:c3:e1:a1:69:fd:5a:55:19:4a:ee:48:f1:dc:9d:08:
99:c8:26:45:60:a9:b3:30:bb:71:5c:83:c3:09:2b:de:8a:67:
bd:49:f8:e7:1b:b0:07:c4:d3:6d:ce:03:3a:e4:15:99:0b:0e:
4a:37:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:57:47 2025 by rpki-client