Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/l4RF6z_7su_D3UgW7AKVCudgy0w.roa
File: l4RF6z_7su_D3UgW7AKVCudgy0w.roa (raw, json)
Hash identifier: 4pl6cr11J/WLczMQhAX2FfJP1vze1RN5B0smdoUS7iU=
Subject key identifier: 97:84:45:EB:3F:FB:B2:EF:C3:DD:48:16:EC:02:95:0A:E7:60:CB:4C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188334F73310DA7AE43C7D8C2880D162EF8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/l4RF6z_7su_D3UgW7AKVCudgy0w.roa
Signing time: Fri 19 May 2023 09:20:24 +0000
ROA not before: Fri 19 May 2023 09:20:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.128.79.0/24 maxlen: 24
2a0d:1140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:4f:73:31:0d:a7:ae:43:c7:d8:c2:88:0d:16:2e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 09:20:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=978445eb3ffbb2efc3dd4816ec02950ae760cb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:46:c5:b8:0b:91:a9:ec:fe:70:07:e9:e0:
a0:40:eb:d2:2e:08:c6:86:93:66:35:99:bc:c9:6c:
d6:07:a1:25:fd:06:7d:22:df:f0:05:57:28:c7:e2:
f7:e1:af:7c:45:27:1b:75:30:5b:a2:84:80:01:6c:
71:f2:55:9a:95:50:87:79:ef:f7:af:54:6a:1d:74:
e5:b1:42:92:ac:6f:e2:a2:30:26:8e:ba:40:4f:0c:
5c:16:8c:4a:fb:00:d0:51:c7:86:b5:b2:f2:f8:9a:
c0:85:21:ea:4e:be:f4:b8:26:53:b2:2f:0e:a1:04:
88:d5:63:2a:1a:20:83:ff:c8:0c:2b:49:c7:27:9e:
40:03:ed:36:d0:93:8b:6d:c3:73:29:18:16:bb:6e:
46:ab:54:7f:3e:07:30:f6:f3:6c:87:87:64:4a:77:
94:6f:dc:03:54:44:00:b5:10:e7:94:1a:89:73:78:
f8:68:84:25:39:29:ac:67:c7:72:31:56:52:de:4b:
88:78:05:8c:28:a6:d6:70:40:71:cf:63:a8:4d:15:
50:36:b1:16:e1:0c:c2:85:78:1a:49:8e:bb:ad:57:
3f:a4:91:b0:30:cf:89:91:5a:34:1d:3d:4e:16:c2:
a9:6e:12:0e:89:09:0b:ef:ee:88:e5:74:09:2a:5f:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:45:EB:3F:FB:B2:EF:C3:DD:48:16:EC:02:95:0A:E7:60:CB:4C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/l4RF6z_7su_D3UgW7AKVCudgy0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.79.0/24
IPv6:
2a0d:1140::/29
Signature Algorithm: sha256WithRSAEncryption
b3:b6:89:4d:e7:b5:36:a9:41:15:e8:54:93:4e:d0:76:6e:72:
f5:75:f8:08:03:b2:ea:0a:c1:27:70:06:06:ea:ae:96:b2:30:
36:07:75:ea:b4:8e:ed:6a:2b:a7:d9:3b:9e:16:51:bf:f0:27:
df:3c:b6:3d:a8:62:56:bb:10:61:b4:dd:7d:1b:8b:78:fc:2f:
51:45:11:ba:99:47:23:55:fc:59:99:ca:7f:78:a4:17:5d:21:
6a:6f:56:24:28:89:97:f8:0d:57:54:4e:53:ec:15:60:50:07:
a8:9d:04:e0:6e:93:8f:49:88:77:a5:cf:5d:2b:43:48:94:98:
aa:35:00:71:1e:f5:40:9b:9a:f1:b9:1b:26:31:ff:27:b3:70:
53:2e:b5:5c:ec:fd:65:ab:b7:c3:73:56:0a:72:45:c5:ae:bd:
55:6a:7a:d7:4f:40:88:0d:c7:ba:5f:e5:ba:a8:1a:f9:ad:4f:
d1:43:35:e5:6e:91:7f:e3:39:4e:36:f7:9a:13:d9:03:e5:89:
12:6e:20:ac:5c:e2:fa:66:55:9c:66:7c:67:55:59:30:73:57:
1a:11:ac:d1:c0:0e:e5:38:f3:1d:d2:bf:a2:7c:2d:51:ee:7b:
d0:31:01:a1:91:32:2c:10:f0:0a:70:d7:32:c4:eb:88:67:bc:
69:b6:73:f8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYgzT3MxDaeuQ8fYwogNFi74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjMwNTE5MDkyMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzg0NDVlYjNmZmJiMmVmYzNkZDQ4MTZlYzAyOTUwYWU3NjBjYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv5GxbgLkans/nAH6eCgQOvSLgjG
hpNmNZm8yWzWB6El/QZ9It/wBVcox+L34a98RScbdTBbooSAAWxx8lWalVCHee/3
r1RqHXTlsUKSrG/iojAmjrpATwxcFoxK+wDQUceGtbLy+JrAhSHqTr70uCZTsi8O
oQSI1WMqGiCD/8gMK0nHJ55AA+020JOLbcNzKRgWu25Gq1R/Pgcw9vNsh4dkSneU
b9wDVEQAtRDnlBqJc3j4aIQlOSmsZ8dyMVZS3kuIeAWMKKbWcEBxz2OoTRVQNrEW
4QzChXgaSY67rVc/pJGwMM+JkVo0HT1OFsKpbhIOiQkL7+6I5XQJKl8PrwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJeERes/+7Lvw91IFuwClQrnYMtMMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbDRSRjZ6XzdzdV9EM1VnVzdBS1ZDdWRneTB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALYBPMA0E
AgACMAcDBQMqDRFAMA0GCSqGSIb3DQEBCwUAA4IBAQCztolN57U2qUEV6FSTTtB2
bnL1dfgIA7LqCsEncAYG6q6WsjA2B3XqtI7taiun2TueFlG/8CffPLY9qGJWuxBh
tN19G4t4/C9RRRG6mUcjVfxZmcp/eKQXXSFqb1YkKImX+A1XVE5T7BVgUAeonQTg
bpOPSYh3pc9dK0NIlJiqNQBxHvVAm5rxuRsmMf8ns3BTLrVc7P1lq7fDc1YKckXF
rr1VanrXT0CIDce6X+W6qBr5rU/RQzXlbpF/4zlONveaE9kD5YkSbiCsXOL6ZlWc
ZnxnVVkwc1caEazRwA7lOPMd0r+ifC1R7nvQMQGhkTIsEPAKcNcyxOuIZ7xptnP4
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:08:14 2025 by rpki-client