Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3giIWaoiAGgXW8e54sc-WpGdYW8.roa
File: 3giIWaoiAGgXW8e54sc-WpGdYW8.roa (raw, json)
Hash identifier: kwx4AwQhO4PZSF2nZR/2u50pp92XtX6f5Wb4tyO85Ac=
Subject key identifier: DE:08:88:59:AA:22:00:68:17:5B:C7:B9:E2:C7:3E:5A:91:9D:61:6F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0273E688
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3giIWaoiAGgXW8e54sc-WpGdYW8.roa
Signing time: Mon 21 Mar 2022 12:36:19 +0000
ROA not before: Mon 21 Mar 2022 12:36:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
194.33.32.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.147.30.0/24 maxlen: 24
2a0e:e980::/29 maxlen: 29
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:a02::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41150088 (0x273e688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 21 12:36:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de088859aa220068175bc7b9e2c73e5a919d616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:0b:62:77:a7:48:99:8d:87:0f:61:8c:6a:
b9:1c:da:2c:69:ac:7a:5f:d6:8f:22:7b:dd:9f:06:
d8:18:40:64:79:e9:fd:d8:71:79:e4:ef:d1:a3:22:
95:ed:e9:95:81:17:7e:74:1a:6b:d1:68:d1:cf:ad:
e0:0b:d5:d9:d4:44:b4:60:1a:dd:69:98:28:80:15:
6d:80:f0:67:51:1a:72:8c:de:a5:e7:e4:b9:3e:6b:
0d:a9:c0:59:0e:03:79:3d:c0:1a:94:c1:bd:64:54:
54:59:1d:6a:e1:18:8c:3d:d4:22:10:df:1b:b4:22:
a2:76:48:fa:5a:c7:a5:fe:bb:3d:8d:53:10:c3:48:
6c:e6:c8:3e:d7:1d:0d:1d:e9:8c:ed:78:84:aa:b0:
7b:c9:7c:a8:6a:58:51:76:f7:c7:4d:70:b0:5d:72:
88:87:b8:fa:ee:4a:66:94:67:0e:10:08:dd:07:db:
80:7f:3e:81:11:b6:e3:21:f9:c2:6b:45:aa:c2:88:
04:77:7a:b6:d8:e1:74:28:cf:9f:7c:03:81:f1:d2:
9d:fa:49:cc:78:60:0f:cf:a2:54:97:8d:f5:e0:9b:
f9:d1:53:2f:a2:cf:66:56:2c:6d:b6:08:51:45:49:
7b:48:6e:7f:f7:ab:4f:ec:63:81:12:34:64:4b:32:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:08:88:59:AA:22:00:68:17:5B:C7:B9:E2:C7:3E:5A:91:9D:61:6F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3giIWaoiAGgXW8e54sc-WpGdYW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.86.0/24
45.147.30.0/23
45.152.197.0/24
45.153.21.0/24
45.153.23.0/24
45.153.219.0/24
45.154.230.0/24
45.157.37.0-45.157.38.255
45.158.197.0/24
113.30.152.0/22
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.111.4.0/23
193.111.18.0/23
194.33.32.0/24
IPv6:
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
93:0b:ea:f7:61:5e:1c:5b:8a:37:1b:f4:c2:0d:28:d7:63:fd:
b6:22:45:bf:b6:41:f2:14:b3:39:78:43:03:90:ac:0b:de:20:
ca:02:ca:ff:a0:e8:51:a6:74:19:68:09:f3:7b:83:69:b0:8a:
99:82:1d:90:d2:79:70:56:f1:95:41:a5:5c:31:b0:06:e6:a4:
7c:bd:42:b2:7c:1d:f8:ff:d9:dc:be:b9:3d:5d:cc:34:a3:b6:
36:0a:15:ea:f3:d6:e8:c2:22:07:cc:08:20:69:26:b1:36:3b:
1b:f9:85:4b:dd:d5:5d:db:3b:8f:51:16:23:16:42:07:6c:78:
0f:1a:14:51:66:3a:7c:0a:c1:23:ce:00:bd:c6:6a:72:ba:37:
73:17:af:21:be:92:27:24:16:4e:d7:f7:80:23:1a:64:c5:6d:
1a:10:9d:12:a6:4e:80:bb:bc:31:07:bb:2c:cd:0d:dd:09:a2:
aa:a1:74:a5:74:31:e4:86:07:e8:75:a2:8a:b7:54:b0:28:cd:
8f:b5:22:06:44:92:fe:85:a3:6c:c2:56:ab:66:49:7a:e5:2f:
32:1a:12:b4:05:9c:bd:ec:b4:b9:ea:a6:2f:34:43:51:c5:8b:
c6:2e:93:1c:f7:47:d1:ee:45:53:c1:ca:a8:75:3a:5e:22:79:
05:80:d6:e2
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIEAnPmiDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDMy
MTEyMzYxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGUwODg4NTlhYTIy
MDA2ODE3NWJjN2I5ZTJjNzNlNWE5MTlkNjE2ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvKC2J3p0iZjYcPYYxquRzaLGmsel/WjyJ73Z8G2BhAZHnp
/dhxeeTv0aMile3plYEXfnQaa9Fo0c+t4AvV2dREtGAa3WmYKIAVbYDwZ1Eacoze
pefkuT5rDanAWQ4DeT3AGpTBvWRUVFkdauEYjD3UIhDfG7QionZI+lrHpf67PY1T
EMNIbObIPtcdDR3pjO14hKqwe8l8qGpYUXb3x01wsF1yiIe4+u5KZpRnDhAI3Qfb
gH8+gRG24yH5wmtFqsKIBHd6ttjhdCjPn3wDgfHSnfpJzHhgD8+iVJeN9eCb+dFT
L6LPZlYsbbYIUUVJe0huf/erT+xjgRI0ZEsyShkCAwEAAaOCAygwggMkMB0GA1Ud
DgQWBBTeCIhZqiIAaBdbx7nixz5akZ1hbzAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
LzNnaUlXYW9pQUdnWFc4ZTU0c2MtV3BHZFlXOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAv
NDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8xL2ZWV2FyN19Ba3hK
QzRkWTNLWXp4M1NJLVRDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ATwGCCsGAQUFBwEHAQH/BIIBKzCCAScwgZkEAgABMIGSAwQALQ26AwQALVvQAwQA
LVvTAwQALV9iAwQALYBNAwQALYL9AwQALYkpAwQALYlWAwQBLZMeAwQALZjFAwQA
LZkVAwQALZkXAwQALZnbAwQALZrmMAwDBAAtnSUDBAAtnSYDBAAtnsUDBAJxHpgD
BAC5pDsDBADBJ9EDBADBKScDBAHBbwQDBAHBbxIDBADCISAwgYgEAgACMIGBAwcA
Kg4iQAACAwUDKg4kQAMFAyoO6YADBwAqDvIAAAIwDgMFASoPCgIDBQAqDwoEAwUD
Kg8fgAMFAyoPrAADBQMqD9pAAwUDKg/awAMFACoP4UMDBQAqD+HAAwUAKg/hwgMF
ACoP4ccDBwAqD+YAAAEDBwAqD+bAASMDBQMqD+lAMA0GCSqGSIb3DQEBCwUAA4IB
AQCTC+r3YV4cW4o3G/TCDSjXY/22IkW/tkHyFLM5eEMDkKwL3iDKAsr/oOhRpnQZ
aAnze4NpsIqZgh2Q0nlwVvGVQaVcMbAG5qR8vUKyfB34/9ncvrk9Xcw0o7Y2ChXq
89bowiIHzAggaSaxNjsb+YVL3dVd2zuPURYjFkIHbHgPGhRRZjp8CsEjzgC9xmpy
ujdzF68hvpInJBZO1/eAIxpkxW0aEJ0Spk6Au7wxB7sszQ3dCaKqoXSldDHkhgfo
daKKt1SwKM2PtSIGRJL+haNswlarZkl65S8yGhK0BZy97LS56qYvNENRxYvGLpMc
90fR7kVTwcqodTpeInkFgNbi
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:18 2025 by rpki-client