Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zv5bfMd6SB1XBbPU0A50-v6wstU.roa
File: zv5bfMd6SB1XBbPU0A50-v6wstU.roa (raw, json)
Hash identifier: gUDrpLpUAiojHFrpD8xOhh4Txo+knKeHyC9zO1bfb4U=
Subject key identifier: CE:FE:5B:7C:C7:7A:48:1D:57:05:B3:D4:D0:0E:74:FA:FE:B0:B2:D5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188F6FDEEEF03B8EFB6E9881AB41433A3BD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zv5bfMd6SB1XBbPU0A50-v6wstU.roa
Signing time: Mon 26 Jun 2023 09:16:56 +0000
ROA not before: Mon 26 Jun 2023 09:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.141.179.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:fd:ee:ef:03:b8:ef:b6:e9:88:1a:b4:14:33:a3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 26 09:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cefe5b7cc77a481d5705b3d4d00e74fafeb0b2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:8b:8b:4a:c4:94:11:b6:60:f0:94:96:01:
b6:d0:b7:09:e2:03:ed:18:a4:4d:ab:0c:23:82:01:
3b:a8:49:e6:6d:e2:08:dc:5d:64:ac:a6:38:06:04:
9c:5f:2b:aa:4f:d1:ef:de:00:87:ce:2b:f9:8f:f0:
b4:19:01:a2:e0:1c:29:d4:21:9f:b4:05:28:d3:57:
ff:e2:5a:24:e0:6c:74:94:1c:19:b8:a9:0b:0b:be:
8e:c4:9e:eb:f0:f0:ed:37:f6:d3:0a:54:c9:d7:97:
b3:b1:67:43:ac:4b:78:8e:d6:24:24:5e:1d:26:95:
05:9c:c5:df:32:54:63:1c:11:c9:82:d4:fb:be:3a:
11:e8:70:5c:68:2e:47:89:73:1d:66:2b:30:29:4e:
bd:98:66:53:96:62:98:a1:d7:fd:a3:a4:48:d4:8f:
6d:22:94:a5:75:2f:8e:bd:21:89:bb:ad:53:6d:eb:
fc:f6:cf:e8:50:63:dc:ae:21:6b:a7:75:69:71:37:
56:0d:2a:48:3e:71:5d:82:a0:45:ec:79:93:79:72:
51:5d:ca:f3:68:33:9a:fa:a8:a6:24:3c:f9:c7:87:
d2:ad:2f:60:5c:59:25:2f:20:8c:d3:19:ca:66:54:
57:a5:41:a8:6f:6a:0a:f5:82:a4:1a:49:56:92:36:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FE:5B:7C:C7:7A:48:1D:57:05:B3:D4:D0:0E:74:FA:FE:B0:B2:D5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zv5bfMd6SB1XBbPU0A50-v6wstU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.38.0/24
45.141.179.0/24
193.41.69.0/24
Signature Algorithm: sha256WithRSAEncryption
92:82:7c:76:b9:85:c5:a8:62:9e:3d:67:ca:92:7f:12:45:38:
41:c8:de:7f:19:8e:25:81:57:1c:52:dd:94:5e:8b:bf:c2:85:
84:5e:95:12:2d:1e:07:11:12:e8:ea:c7:45:22:d9:74:ef:00:
06:d8:8e:3f:f6:68:f9:b7:d7:77:03:44:dd:e5:5c:c0:8e:3b:
9d:08:c9:ea:0e:88:4c:f2:79:d8:43:52:61:fb:da:2f:7a:46:
f8:92:32:9c:88:c6:16:59:ac:28:96:ae:5a:12:06:ce:08:fc:
60:39:7a:7f:48:4e:e7:1b:c6:bf:d9:2a:27:24:0b:13:0e:7c:
44:4f:40:8e:d2:15:9e:6d:ee:14:e6:21:1f:66:0f:94:8d:8f:
87:5d:c2:cb:1f:ac:49:e8:e7:7d:6f:b7:8f:41:78:69:63:eb:
13:c8:f3:aa:3e:68:ae:dc:f2:7b:f1:d7:ad:39:9f:d2:57:31:
cc:48:c0:31:d4:31:d7:cc:e3:a8:f9:3e:fc:c8:e9:2c:1f:4b:
96:53:03:1d:6e:21:3d:7a:e1:bb:68:00:de:32:6f:6a:54:50:
3b:00:34:86:99:a5:cb:7f:42:b7:ab:64:89:23:c0:6d:57:7b:
3e:52:48:84:39:fa:33:af:ea:43:2c:da:46:88:9a:70:05:9c:
ae:18:ba:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:46:31 2025 by rpki-client