Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0OdxF_ORf9uGhcruuux6dz7c_wQ.roa
File: 0OdxF_ORf9uGhcruuux6dz7c_wQ.roa (raw, json)
Hash identifier: PFJy7OhRvhcB+pxl+IkCTbwwv5eEMVqF8HGX9ftJXnQ=
Subject key identifier: D0:E7:71:17:F3:91:7F:DB:86:85:CA:EE:BA:EC:7A:77:3E:DC:FF:04
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018799BB3EA0F529C87B43355C84861BDFA0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0OdxF_ORf9uGhcruuux6dz7c_wQ.roa
Signing time: Wed 19 Apr 2023 13:36:37 +0000
ROA not before: Wed 19 Apr 2023 13:36:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
45.134.186.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
45.92.246.0/24 maxlen: 24
185.214.72.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
91.233.89.0/24 maxlen: 24
64.226.159.0/24 maxlen: 24
64.226.158.0/24 maxlen: 24
64.226.157.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
103.227.85.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
103.227.86.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
91.233.54.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
64.226.55.0/24 maxlen: 24
64.226.54.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
209.35.158.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
93.190.247.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.137.62.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
185.155.202.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
193.41.87.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
167.94.165.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
45.142.29.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
2a0a:2d00:3::/48 maxlen: 48
2a0f:e540::/32 maxlen: 32
2a0f:1480::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a0e:f200:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0e:5800::/29 maxlen: 29
2a12:ecc2::/32 maxlen: 32
2a0f:e740::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a12:ecc3::/32 maxlen: 32
2a0f:1580::/29 maxlen: 29
2a0f:3940::/29 maxlen: 29
2a0f:e6c0::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e7c2::/32 maxlen: 32
2a0f:e9c0::/29 maxlen: 29
2a0e:f200::/48 maxlen: 48
2a0f:1200::/32 maxlen: 32
2a0f:8100::/29 maxlen: 29
2a0c:7882:1::/48 maxlen: 48
2a0f:dd40::/29 maxlen: 29
2a0f:4f80::/48 maxlen: 48
2a0f:e1c2::/32 maxlen: 32
2a0e:15c1::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a06:1180:3::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e1c0::/32 maxlen: 32
2a12:eb40::/29 maxlen: 29
2a0e:15c0:2::/48 maxlen: 48
2a0e:1a80:123::/48 maxlen: 48
2a0f:e1c7::/32 maxlen: 32
2a0f:ea42::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a12:ecc5::/32 maxlen: 32
2a0f:ee00::/32 maxlen: 32
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a12:f5c0::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a12:ecc7::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:3d80:2::/48 maxlen: 48
2a10:67c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a12:ecc6::/32 maxlen: 32
2a0f:e640::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:bb:3e:a0:f5:29:c8:7b:43:35:5c:84:86:1b:df:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 19 13:36:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0e77117f3917fdb8685caeebaec7a773edcff04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:21:78:3e:33:bd:4e:f5:cb:e1:de:56:17:
3e:a5:99:92:46:56:0d:9c:8a:b8:a8:a4:82:c8:c0:
f7:7b:9a:28:d6:91:a7:c6:26:84:c5:69:ea:59:b0:
46:99:fb:79:77:b2:98:5b:37:47:bc:97:ac:7a:60:
fa:26:25:b2:dd:b4:d3:99:ef:95:bf:d5:37:09:23:
f4:f2:0c:41:52:03:a9:3e:62:6a:b5:05:a8:d6:e6:
85:b8:f8:9b:40:ba:b6:94:5b:3c:f1:40:0e:17:b3:
89:d6:9f:81:7a:55:7a:a8:e3:7f:2c:f0:e0:5a:7b:
00:01:6c:99:a1:29:44:7b:a0:73:fd:aa:7d:40:d3:
d8:10:c0:20:05:af:31:95:5f:e0:92:74:be:70:92:
2b:94:9f:5a:68:d2:98:4a:0e:28:01:10:7d:a6:95:
cc:73:5b:e3:27:67:a2:42:4e:12:0a:db:3b:fd:35:
ba:4e:a4:0a:53:d3:ca:29:f2:f8:41:09:75:1a:78:
6c:3f:6e:44:f6:2f:55:92:34:80:64:3a:ae:35:6d:
52:3e:dd:ba:be:05:c3:4f:77:89:62:12:6d:10:a2:
7c:d5:1e:05:1a:40:86:48:cd:35:6d:f0:e5:ae:0d:
3c:7e:30:99:e4:c1:f0:7d:57:88:34:e9:cd:1e:dd:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E7:71:17:F3:91:7F:DB:86:85:CA:EE:BA:EC:7A:77:3E:DC:FF:04
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0OdxF_ORf9uGhcruuux6dz7c_wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/23
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.92.246.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.129.125.0/24
45.130.254.0/24
45.131.214.0/24
45.134.186.0/24
45.137.41.0/24
45.137.62.0/24
45.137.82.0/24
45.137.85.0-45.137.86.255
45.142.29.0/24
45.145.59.0/24
45.146.88.0/24
45.146.129.0/24
45.146.181.0/24
45.147.31.0/24
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.229.0-45.154.231.255
45.157.36.0/23
45.157.39.0/24
45.158.197.0-45.158.198.255
64.226.54.0/23
64.226.156.0/22
80.253.248.0/24
85.209.131.0/24
91.212.100.0/24
91.212.107.0/24
91.212.120.0/24
91.232.255.0/24
91.233.20.0/24
91.233.54.0/24
91.233.89.0/24
93.190.247.0/24
103.59.40.0/22
103.74.76.0/23
103.227.84.0-103.227.86.255
103.229.31.0/24
113.30.152.0/22
167.94.165.0/24
185.136.204.0/24
185.155.202.0/24
185.164.59.0/24
185.214.72.0/24
193.5.64.0/24
193.39.143.0/24
193.39.208.0/23
193.41.38.0/24
193.41.68.0/23
193.41.86.0/23
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.33.62.0/24
194.41.38.0/24
194.45.34.0/24
209.35.158.0/24
IPv6:
2a06:1180:3::/48
2a0a:2d00:3::/48
2a0c:7882:1::/48
2a0c:7883::/32
2a0e:15c0:2::/48
2a0e:15c0:4::/48
2a0e:15c1::/32
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:5800::/29
2a0e:f200::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1480::/29
2a0f:1580::/29
2a0f:1f80::/29
2a0f:2300::/29
2a0f:2700::/29
2a0f:3940::/29
2a0f:3d80:2::/48
2a0f:3d83::/32
2a0f:3f80::/29
2a0f:4f80::/48
2a0f:8100::/29
2a0f:8300::/29
2a0f:9600::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/29
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e640::/29
2a0f:e6c0::/29
2a0f:e740::/29
2a0f:e7c2::/32
2a0f:e9c0::/29
2a0f:ea42::/32
2a0f:ee00::/29
2a10:67c0::/29
2a12:eb40::/29
2a12:ecc2::/31
2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff
2a12:f5c0::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:a3:41:48:6b:88:ab:cf:5c:de:e4:ae:ef:79:c0:78:5a:46:
90:57:ac:03:56:2f:63:a6:23:80:b0:df:3f:07:95:83:5f:39:
3a:ac:2a:f9:73:96:90:94:d4:3a:57:e5:75:53:2a:82:ac:a3:
00:c4:4b:ef:b4:fe:1a:08:41:2b:ce:24:42:26:cf:7b:00:72:
61:d3:11:5c:54:6e:be:6c:8d:c4:cb:0c:fb:e1:b4:42:ec:da:
e1:b2:74:98:d0:0d:b0:dc:52:18:2b:68:0a:51:95:60:ee:06:
74:a0:fc:c8:82:52:9c:90:ca:7b:89:5a:f3:58:30:bd:52:fb:
88:bd:df:0b:99:d7:1a:4e:69:9a:fe:85:f2:05:21:43:6a:a2:
85:83:23:a8:36:7b:2b:5e:5c:90:87:c5:89:48:20:5e:9d:97:
3f:80:5b:c5:ad:9d:80:9c:74:86:29:9a:94:a4:55:b7:de:fa:
7c:ac:a6:64:01:b4:bb:c3:60:dc:e7:f6:c2:c2:f5:62:e7:1d:
61:56:50:67:0b:7f:b2:b7:ae:05:18:62:66:e6:12:17:92:5a:
85:5a:d1:8d:a9:70:5c:6e:03:88:d9:73:9e:d0:57:12:11:be:
54:48:2b:b2:63:62:28:7c:e7:26:e1:d6:66:a9:34:e1:8a:da:
7e:ed:c3:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:03 2025 by rpki-client