Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-ZWSflChUnzQdvVVhUbRAn4gchk.roa
File: 1-ZWSflChUnzQdvVVhUbRAn4gchk.roa (raw, json)
Hash identifier: fu3+gdnmlSTRkGPfxeG6qbT14cPckDvmyUI/5QKopDU=
Subject key identifier: F9:95:92:7E:50:A1:52:7C:D0:76:F5:55:85:46:D1:02:7E:20:72:19
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182D8FFA8B734D3DD99BCB979E2CAB0BAEF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-ZWSflChUnzQdvVVhUbRAn4gchk.roa
Signing time: Fri 26 Aug 2022 07:13:29 +0000
ROA not before: Fri 26 Aug 2022 07:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:e041::/32 maxlen: 32
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0f:e040:2::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:ff:a8:b7:34:d3:dd:99:bc:b9:79:e2:ca:b0:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 26 07:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f995927e50a1527cd076f5558546d1027e207219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a4:42:04:3e:fe:e2:b1:53:c6:9b:f7:15:ca:
3c:4c:79:e8:bd:a6:c7:d6:80:24:11:20:5d:d6:56:
cd:85:81:80:fa:73:9c:ca:df:42:a6:2f:5f:a5:d8:
81:82:b6:da:40:88:fa:37:8b:d2:91:b8:e7:c0:a9:
02:ec:6e:73:91:82:c4:d3:ca:ca:ac:44:e9:62:1d:
ea:58:fb:1a:a1:0c:4a:ab:e7:1e:9e:9a:a0:6e:31:
47:de:7a:89:90:5d:c7:8d:8e:bb:05:23:bd:93:25:
0c:d8:55:e0:c8:5f:21:3f:a2:72:5c:ef:8f:97:d4:
ab:1d:85:5c:58:30:8f:97:9c:fb:49:39:8b:63:c9:
2c:81:95:94:4f:b3:3d:91:b9:dc:8a:f0:5e:c6:1b:
90:6c:4f:fd:1b:6f:91:90:e8:50:d5:67:28:db:b1:
71:32:eb:99:5c:6c:7e:9b:da:94:73:9e:ff:c0:89:
24:7d:9c:85:b7:e7:df:87:f8:7c:4d:02:dc:8d:6e:
1a:43:4a:d0:56:a6:73:45:1e:26:2d:f6:67:16:4b:
ff:02:af:95:fd:19:b1:33:d6:69:c4:ff:70:65:59:
74:62:92:d4:5a:8b:89:8e:40:eb:6b:27:f1:27:19:
60:b0:c5:5c:79:f4:ab:cd:14:6e:09:9d:c4:74:ce:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:92:7E:50:A1:52:7C:D0:76:F5:55:85:46:D1:02:7E:20:72:19
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-ZWSflChUnzQdvVVhUbRAn4gchk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.128.77.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
80.253.248.0/24
91.212.100.0/24
91.212.107.0/24
91.232.255.0/24
91.233.20.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.45.34.0/24
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:3d83::/32
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e040:2::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
cf:f7:3a:b3:a5:75:f1:d7:80:fd:1b:e4:02:e7:d6:f5:3f:b8:
51:d3:dc:dc:75:42:d8:f0:13:6d:3c:53:a7:78:23:e9:d9:46:
a4:82:95:30:8f:05:7e:6a:4f:6a:a6:f4:78:4d:be:5f:f7:e9:
53:37:49:d5:00:67:51:ac:46:2e:10:3b:3d:cf:c9:b0:91:23:
1f:3b:a6:7e:30:34:83:4e:38:8b:76:c5:2c:cc:f8:f9:a8:2a:
c8:4d:4b:0b:9e:bf:35:10:fd:c0:9d:16:4c:ad:fb:b4:09:70:
73:e0:a4:8a:3f:f6:00:ca:e0:13:1d:12:65:1f:db:24:40:9f:
d0:4c:23:b0:72:83:d3:56:c3:be:df:30:f0:72:8e:fa:07:90:
4a:93:42:62:6c:a6:81:97:29:86:ac:34:88:99:2b:c6:08:45:
5d:3d:74:77:47:33:62:49:2b:11:56:e2:f7:c1:bd:55:c7:a5:
c9:77:c5:f0:bb:3f:4b:8d:21:c2:35:40:dc:e1:ca:7c:6e:9c:
11:9a:ab:e6:ec:f4:cf:6c:3c:e9:fc:83:20:65:b7:b4:f2:6e:
83:f1:3c:98:de:2d:51:e3:d6:91:e5:ea:4b:68:f1:d0:47:88:
6b:d6:1c:20:7f:5d:e3:ef:29:4a:37:db:28:da:88:b2:6b:f3:
52:03:51:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:18 2025 by rpki-client