Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_ACNXA1auaZa4Vo7zJ4Vv7Q9CyY.roa
File: _ACNXA1auaZa4Vo7zJ4Vv7Q9CyY.roa (raw, json)
Hash identifier: C2TeDrnF9+puekfhoMfRUIpPzk9DpA/XZ2BkPZFOqTc=
Subject key identifier: FC:00:8D:5C:0D:5A:B9:A6:5A:E1:5A:3B:CC:9E:15:BF:B4:3D:0B:26
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188334E8A8EAA820B6BD93CD3767C14CB4F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_ACNXA1auaZa4Vo7zJ4Vv7Q9CyY.roa
Signing time: Fri 19 May 2023 09:19:25 +0000
ROA not before: Fri 19 May 2023 09:19:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135377
IP address blocks: 93.190.246.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:4e:8a:8e:aa:82:0b:6b:d9:3c:d3:76:7c:14:cb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 09:19:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc008d5c0d5ab9a65ae15a3bcc9e15bfb43d0b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:78:91:d5:d0:26:e6:62:e4:6a:5d:4a:00:
b8:cf:69:d4:e5:8c:4b:8f:d3:38:3a:a2:3f:be:05:
c3:31:74:d9:a7:87:23:8a:2e:bc:a4:b6:0e:fe:b8:
fc:8c:41:58:e3:0d:9f:87:27:63:0f:41:02:fe:3e:
b1:b9:08:97:56:c3:54:2f:54:ea:7e:8b:4a:7a:c9:
97:de:78:9e:a9:a7:f7:0a:65:4b:b0:cb:8e:8a:c9:
87:75:a0:59:b6:73:17:b5:63:d1:bf:ec:c9:69:57:
32:1c:a7:81:9b:ac:cc:0a:08:8d:c9:c4:46:71:24:
84:c1:58:99:99:8d:a2:ed:15:2e:f1:4e:db:e2:1e:
d8:67:f1:64:2a:d6:88:f2:db:92:f5:29:0a:0a:14:
f9:8a:9d:5d:6c:91:84:53:50:5d:29:54:f2:5a:59:
9f:f5:3e:e5:40:a3:a6:17:4c:ac:fb:1c:87:41:83:
ec:a0:2a:36:d1:0c:12:ac:e8:32:38:7e:c1:97:47:
55:95:24:b3:41:d8:a9:1a:39:88:11:b4:31:61:1e:
aa:02:1b:6f:51:a6:7f:8a:d9:2a:80:51:3e:70:c0:
2d:70:df:79:de:f8:dd:a7:f0:d4:8f:65:f0:7a:31:
c2:23:d6:cf:20:3e:ff:b8:5d:d1:32:d7:53:e4:5c:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:8D:5C:0D:5A:B9:A6:5A:E1:5A:3B:CC:9E:15:BF:B4:3D:0B:26
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_ACNXA1auaZa4Vo7zJ4Vv7Q9CyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.26.0/24
93.190.246.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ef:5e:7f:95:1e:03:0b:f7:95:26:00:af:fb:38:f3:ae:a4:
f6:42:09:3d:60:d6:04:6d:44:dd:85:6c:97:fb:b4:90:61:99:
23:9f:4e:e3:25:21:d2:20:09:03:57:0a:1c:3d:af:6d:ab:da:
0e:6e:a5:16:04:6f:83:0c:b9:dd:b6:d2:f1:59:36:1e:e5:5d:
2d:e3:40:3e:6f:34:78:14:3a:7b:93:bc:3a:d2:6c:3e:23:10:
cd:98:99:98:f5:4c:ef:ed:b6:7d:d3:5d:4b:ed:7f:3e:85:ad:
e3:b6:c8:88:1c:c1:9b:6b:7c:7c:64:3d:b2:6f:d9:19:b7:a4:
7d:e8:ce:9c:3c:24:4b:c2:7a:d3:8a:bc:55:fb:f5:c1:b3:8e:
47:13:59:dd:af:47:02:46:4f:5a:23:51:76:aa:50:5e:e9:b1:
3d:fe:37:73:b7:81:ba:9e:8f:c8:3e:ef:70:6f:2d:a9:2f:1c:
bc:75:21:c7:b4:1a:1f:c3:28:3f:c7:74:6b:70:2c:f2:9c:19:
3a:fd:7f:17:5e:49:fb:fb:eb:15:de:61:00:3c:1b:69:6e:81:
0c:cc:7c:01:ea:54:b0:d5:0a:10:a4:fe:bf:16:5b:f6:ad:c8:
56:8e:07:fc:3f:f1:ee:b3:bd:69:d7:03:35:46:12:e3:f3:d0:
1f:4e:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:35:48 2025 by rpki-client