Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/fWg5h_V9xtaO2tEXgp4B7-7HOWM.roa
File: fWg5h_V9xtaO2tEXgp4B7-7HOWM.roa (raw, json)
Hash identifier: 0799SHlJ7G3/yuEipZgOQUtflZ5v+O8KYiQSujTK38I=
Subject key identifier: 7D:68:39:87:F5:7D:C6:D6:8E:DA:D1:17:82:9E:01:EF:EE:C7:39:63
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 0184E6FEF997652A46E746474D36D074C46B
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/fWg5h_V9xtaO2tEXgp4B7-7HOWM.roa
Signing time: Tue 06 Dec 2022 10:33:00 +0000
ROA not before: Tue 06 Dec 2022 10:33:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203759
IP address blocks: 45.83.160.0/24 maxlen: 24
45.129.40.0/21 maxlen: 24
193.148.160.0/19 maxlen: 24
185.86.188.0/22 maxlen: 24
185.124.192.0/22 maxlen: 24
193.19.128.0/22 maxlen: 24
2a05:b540::/29 maxlen: 48
2a06:b500::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:fe:f9:97:65:2a:46:e7:46:47:4d:36:d0:74:c4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Dec 6 10:33:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d683987f57dc6d68edad117829e01efeec73963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:30:ce:5a:65:36:9f:9d:77:40:07:9a:0b:
b8:4d:e1:a0:e1:57:a9:52:f3:2a:4b:2f:49:8b:4e:
da:db:ff:d8:9b:f1:57:c7:ec:6a:bd:d7:3f:8c:a2:
40:d7:07:41:f5:bb:3c:93:a6:d7:8f:cf:2a:18:e3:
c9:8b:43:d4:6b:bf:90:f5:57:e8:a9:54:5d:5f:7b:
0a:55:c4:4a:fd:e7:8b:8b:c5:f2:98:55:b1:0d:35:
75:b0:21:49:ef:d7:e4:08:ee:6d:a7:4e:85:7a:ab:
59:ac:a5:13:91:c3:3b:9c:d9:d9:7a:6b:d6:5a:7c:
dc:e7:9a:77:f4:b2:55:6e:51:a7:8a:c5:ff:c0:0d:
f4:16:ba:2f:06:11:7c:2e:57:f5:73:95:f6:08:26:
dc:3c:87:9a:13:2a:72:8d:6f:f1:c7:6b:7b:0b:42:
95:8e:d8:48:a6:de:04:22:cb:f9:ee:10:f3:4d:a2:
68:3e:ac:86:68:51:27:1c:3d:77:0f:57:f1:8e:86:
d0:e6:39:ca:bd:5a:26:8b:24:79:d5:06:33:32:36:
ae:75:da:84:90:df:73:ab:d9:b4:aa:b5:bf:a5:23:
bc:06:c2:2a:e3:8f:67:b8:9d:17:13:44:f2:39:36:
56:41:aa:7e:ab:fa:7f:ed:e1:04:9e:aa:dd:50:26:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:68:39:87:F5:7D:C6:D6:8E:DA:D1:17:82:9E:01:EF:EE:C7:39:63
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/fWg5h_V9xtaO2tEXgp4B7-7HOWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.160.0/24
45.129.40.0/21
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.160.0/19
IPv6:
2a05:b540::/29
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
6d:a6:51:1e:8c:68:fd:4e:1d:12:20:1b:0f:3c:0a:24:15:2c:
c9:ee:dd:87:ba:3e:4f:a7:da:df:a8:58:a0:0f:5e:bb:25:e9:
93:94:e6:5f:9d:0b:35:90:71:db:02:ed:0d:b4:ac:af:70:cb:
bd:9d:8a:8c:26:6b:a0:36:2d:e6:2f:e8:09:b1:a9:45:e7:18:
a7:01:ad:a2:f5:1d:e6:35:c8:cc:ef:31:ec:2c:9a:4a:a4:99:
a9:02:57:b7:b0:96:28:d7:44:50:a0:1a:2e:7b:3a:ea:3e:27:
56:04:d1:22:9c:f4:ce:4d:2a:b2:7b:5e:7e:44:6a:3a:a9:44:
2b:1e:f6:3d:4b:b6:34:e9:5e:cc:5a:c0:62:f1:8c:ef:23:d3:
ba:83:40:af:3a:71:76:52:61:1e:ee:da:7c:40:7e:46:c0:12:
84:65:22:f6:de:7d:1b:6d:3d:64:70:c4:d0:4b:ce:f2:ff:11:
47:25:fc:ea:de:56:d8:db:dc:af:3b:c2:25:b3:0c:72:65:17:
1c:74:6f:cb:a3:a8:e6:ec:73:b5:73:16:5b:f1:e7:07:38:df:
6c:14:f0:05:da:41:f4:03:81:ff:ec:5f:8a:ad:91:8c:bf:6d:
9a:ce:07:66:3e:14:5a:00:a1:00:df:85:71:b0:6f:14:11:b5:
81:68:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:27:34 2025 by rpki-client