Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3h0cg8oKq2opHVI47xmn17RYBRU.roa
File: 3h0cg8oKq2opHVI47xmn17RYBRU.roa (raw, json)
Hash identifier: 6LRL3mS/fBJH26QX7+EBkwdCvrN429fXPdqiywbjCZg=
Subject key identifier: DE:1D:1C:83:CA:0A:AB:6A:29:1D:52:38:EF:19:A7:D7:B4:58:05:15
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01876F0096A245B579261575DDD1CA8E4667
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3h0cg8oKq2opHVI47xmn17RYBRU.roa
Signing time: Tue 11 Apr 2023 06:28:42 +0000
ROA not before: Tue 11 Apr 2023 06:28:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
45.134.186.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
45.92.246.0/24 maxlen: 24
185.214.72.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
91.233.89.0/24 maxlen: 24
64.226.159.0/24 maxlen: 24
64.226.158.0/24 maxlen: 24
64.226.157.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
103.227.85.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
103.227.86.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
91.233.54.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
64.226.55.0/24 maxlen: 24
64.226.54.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
209.35.158.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
93.190.247.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.137.62.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
185.155.202.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
167.94.165.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
45.142.29.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
2a0a:2d00:3::/48 maxlen: 48
2a0f:e540::/32 maxlen: 32
2a0f:1480::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
2a0e:f200:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0e:5800::/29 maxlen: 29
2a12:ecc2::/32 maxlen: 32
2a0f:e740::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a12:ecc3::/32 maxlen: 32
2a0f:1580::/29 maxlen: 29
2a0f:3940::/29 maxlen: 29
2a0f:e6c0::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e7c2::/32 maxlen: 32
2a0f:e9c0::/29 maxlen: 29
2a0e:f200::/48 maxlen: 48
2a0f:1200::/32 maxlen: 32
2a0f:8100::/29 maxlen: 29
2a0c:7882:1::/48 maxlen: 48
2a0f:dd40::/29 maxlen: 29
2a0f:4f80::/48 maxlen: 48
2a0f:e1c2::/32 maxlen: 32
2a11:5200::/29 maxlen: 29
2a0e:15c1::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a06:1180:3::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e1c0::/32 maxlen: 32
2a0e:15c0:2::/48 maxlen: 48
2a0e:1a80:123::/48 maxlen: 48
2a0f:e1c7::/32 maxlen: 32
2a0f:ea42::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a12:ecc5::/32 maxlen: 32
2a0f:ee00::/32 maxlen: 32
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a12:f5c0::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a12:ecc7::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:3d80:2::/48 maxlen: 48
2a10:67c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a12:ecc6::/32 maxlen: 32
2a0f:e640::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:00:96:a2:45:b5:79:26:15:75:dd:d1:ca:8e:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 11 06:28:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de1d1c83ca0aab6a291d5238ef19a7d7b4580515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d5:01:19:ac:d4:4a:35:60:26:f3:c8:5c:96:
0c:5e:bd:cb:af:9b:84:d0:db:12:58:4b:b1:5e:1e:
39:b7:46:56:c5:7d:1f:cd:92:17:c8:dc:05:cf:f5:
9c:e8:1a:2d:dc:e3:51:38:5d:c9:aa:02:e1:7e:47:
9f:56:aa:ca:f4:fe:c8:38:45:12:af:c6:88:9b:78:
1e:41:a7:e5:3e:4f:cd:df:09:46:0c:fb:d2:44:08:
e1:0d:dc:17:ad:19:de:41:f3:b7:9e:1b:8c:0e:e1:
b7:9f:28:51:2d:0b:69:44:04:dd:58:0f:3a:f5:a7:
21:56:6c:c0:64:45:76:f0:7c:c5:cb:23:3e:31:dd:
47:af:d3:f1:fa:65:03:8e:06:b8:3d:55:bd:43:19:
f6:91:40:83:02:93:35:82:58:18:eb:74:f5:f7:be:
7c:7e:f6:58:e1:61:b9:48:7e:fd:90:46:61:06:66:
a1:30:3e:cb:01:9d:d3:32:df:24:41:52:1e:e9:02:
95:e9:79:d6:07:cb:a5:5c:35:23:3b:b8:e2:8f:9d:
64:44:79:67:28:e5:a7:c8:0e:3c:d4:b9:fe:43:c0:
29:6c:aa:66:f5:0f:76:4a:2c:08:cb:e4:ae:ac:70:
3a:14:55:8f:03:2e:8e:16:2f:68:4f:56:69:7c:98:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1D:1C:83:CA:0A:AB:6A:29:1D:52:38:EF:19:A7:D7:B4:58:05:15
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3h0cg8oKq2opHVI47xmn17RYBRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/23
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.92.246.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.129.125.0/24
45.130.254.0/24
45.131.214.0/24
45.134.186.0/24
45.135.38.0/24
45.137.41.0/24
45.137.62.0/24
45.137.82.0/24
45.137.85.0-45.137.86.255
45.142.29.0/24
45.145.59.0/24
45.146.88.0/24
45.146.129.0/24
45.146.181.0/24
45.147.31.0/24
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.229.0-45.154.231.255
45.157.36.0/23
45.157.39.0/24
45.158.197.0-45.158.198.255
64.226.54.0/23
64.226.156.0/22
80.253.248.0/24
85.209.131.0/24
91.212.100.0/24
91.212.107.0/24
91.212.120.0/24
91.232.255.0/24
91.233.20.0/24
91.233.54.0/24
91.233.89.0/24
93.190.247.0/24
103.59.40.0/22
103.74.76.0/23
103.227.84.0-103.227.86.255
103.229.31.0/24
113.30.152.0/22
167.94.165.0/24
185.136.204.0/24
185.155.202.0/24
185.164.59.0/24
185.214.72.0/24
193.5.64.0/24
193.39.143.0/24
193.39.208.0/23
193.41.38.0/24
193.41.68.0/23
193.41.86.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.33.62.0/24
194.41.38.0/24
194.45.34.0/24
209.35.158.0/24
IPv6:
2a06:1180:3::/48
2a0a:2d00:3::/48
2a0c:7882:1::/48
2a0c:7883::/32
2a0e:15c0:2::/48
2a0e:15c0:4::/48
2a0e:15c1::/32
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:5800::/29
2a0e:f200::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1480::/29
2a0f:1580::/29
2a0f:1f80::/29
2a0f:2300::/29
2a0f:2700::/29
2a0f:3940::/29
2a0f:3d80:2::/48
2a0f:3d83::/32
2a0f:3f80::/29
2a0f:4f80::/48
2a0f:8100::/29
2a0f:9600::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/29
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e640::/29
2a0f:e6c0::/29
2a0f:e740::/29
2a0f:e7c2::/32
2a0f:e9c0::/29
2a0f:ea42::/32
2a0f:ee00::/29
2a10:67c0::/29
2a11:4e80::/29
2a11:5200::/29
2a11:8880::/29
2a12:ecc2::/31
2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff
2a12:f5c0::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:39:2a:d1:5d:5e:41:dd:ad:ea:11:ce:3d:88:4f:cf:44:cd:
fc:45:ef:d8:1c:c7:ec:fa:29:97:48:78:d3:2a:cb:7c:72:f1:
fb:13:cb:ae:e9:ae:f8:d0:5d:30:2e:d9:d0:d6:43:bc:ca:f7:
df:0f:df:9a:cc:a6:c6:f6:06:45:d1:01:42:e8:e8:d8:4a:97:
a2:ba:81:05:ed:92:a6:af:dc:79:c7:5e:83:72:f5:56:ce:b4:
4f:73:45:12:51:7e:7e:da:5f:3a:b4:8a:f3:42:7a:9d:65:ce:
75:52:51:1e:a3:54:6c:68:e3:22:62:9e:05:7e:0a:4a:ca:0f:
47:61:a3:b4:59:01:4e:49:39:20:9a:de:eb:13:3a:c1:7f:ea:
ea:47:5a:53:5f:f1:8c:f4:65:ae:96:c5:8b:0c:0a:84:35:71:
4c:7a:d8:b4:44:bf:f3:fb:ad:b6:9d:72:92:15:c4:20:ee:64:
3c:e6:94:44:e5:45:2a:c4:55:39:98:88:74:6a:1c:d6:77:59:
36:e4:ec:4b:ce:c5:48:87:3b:da:20:b7:c6:91:73:73:0a:54:
11:bc:00:0a:a1:7c:95:a7:88:16:a9:db:6f:11:68:f5:de:83:
76:c7:9c:41:d5:cb:35:8f:88:03:99:47:99:33:f2:f4:99:08:
c3:70:e3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:27:56 2025 by rpki-client