Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/70z_TNBjPVEPn0jQzNN-J6vtqUo.roa
File: 70z_TNBjPVEPn0jQzNN-J6vtqUo.roa (raw, json)
Hash identifier: x82bcPKwoNtqKt7uXYoSbW1X9TNvWQTqaXHy+YNuH+g=
Subject key identifier: EF:4C:FF:4C:D0:63:3D:51:0F:9F:48:D0:CC:D3:7E:27:AB:ED:A9:4A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182D3E418CA593E335462840B1DB5ACF38F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/70z_TNBjPVEPn0jQzNN-J6vtqUo.roa
Signing time: Thu 25 Aug 2022 07:25:17 +0000
ROA not before: Thu 25 Aug 2022 07:25:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
103.227.86.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:e041::/32 maxlen: 32
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0f:e040:2::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d3:e4:18:ca:59:3e:33:54:62:84:0b:1d:b5:ac:f3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 25 07:25:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef4cff4cd0633d510f9f48d0ccd37e27abeda94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:f6:c4:2f:87:6f:15:af:aa:9e:3b:ae:b2:
d6:09:2b:e7:75:68:32:2f:47:8c:35:1e:fc:d5:b6:
2a:2f:6c:bd:4d:73:da:e8:9e:6d:b3:b8:cc:f1:f5:
a5:e0:43:74:23:54:93:ad:25:68:af:69:4d:fd:a3:
35:c6:6d:7a:86:7d:e6:6c:1e:63:29:a5:0a:68:2d:
52:05:82:97:3b:3f:58:00:14:ae:fb:45:d2:6e:93:
c7:c0:4b:71:aa:ac:af:7f:11:c3:0f:ca:a6:66:b3:
df:99:c5:89:09:d2:db:df:00:38:bf:80:24:fe:27:
4b:52:64:29:6f:6e:d7:80:f0:8c:2d:66:62:1c:10:
54:55:64:58:a8:04:5b:d4:97:4f:40:3c:92:12:cd:
25:17:01:2d:fd:f9:83:b0:28:9f:3c:27:f3:ae:ed:
31:a9:9f:59:64:06:f0:16:66:b6:b4:fa:52:7c:8a:
be:4c:ef:55:0b:73:3d:07:57:cf:bd:a2:1a:c3:49:
24:4d:4f:63:e6:a6:a6:a9:ae:7b:9b:51:3d:2a:d8:
9d:93:24:16:af:31:5a:9f:e7:f5:0d:13:31:44:48:
42:83:df:d5:d7:2a:60:8c:61:57:e3:6a:a1:83:14:
2e:20:9d:40:02:ef:f9:9f:5e:76:a2:91:a0:bd:f1:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4C:FF:4C:D0:63:3D:51:0F:9F:48:D0:CC:D3:7E:27:AB:ED:A9:4A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/70z_TNBjPVEPn0jQzNN-J6vtqUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
80.253.248.0/24
91.212.100.0/24
91.212.107.0/24
103.227.86.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e040:2::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
b7:bc:0c:22:74:ac:07:1f:24:b2:5c:c5:0d:d6:22:64:4a:da:
52:85:0a:ee:43:c4:2f:3f:97:6d:e4:67:44:29:c8:30:ce:73:
f0:0f:3c:00:36:1a:cc:ea:df:08:c0:b9:2e:26:df:2d:d1:b6:
80:09:81:fe:33:85:37:61:42:78:6d:3e:13:ca:26:25:f8:b1:
cd:92:24:ad:e4:e1:b7:8c:f3:42:0e:c7:19:40:41:f3:ad:83:
c0:38:ce:78:50:0e:1d:82:55:7b:24:c7:7b:50:cb:ff:79:c8:
37:27:36:ff:0d:3b:37:15:f0:c1:34:ff:a7:7b:1d:96:57:87:
65:29:2e:68:ba:9b:3b:a7:28:62:09:8f:35:92:58:94:bf:7e:
bf:e5:5f:7e:f1:ef:bb:f0:08:a6:c6:a8:45:f1:f5:e4:f6:e2:
30:44:b0:75:ec:21:c3:ec:68:57:b7:dc:93:17:45:87:e3:d9:
2f:1e:c8:97:31:bd:1e:70:d6:ea:ed:56:e1:23:de:ec:c4:3d:
e7:d4:02:1b:1a:ee:5d:33:79:ee:41:f5:4b:95:42:71:f9:e8:
0f:15:9f:63:67:b3:c4:7a:7a:20:85:1f:2a:4e:71:64:bb:8f:
62:b3:d7:b9:8f:ed:da:94:bd:1a:b0:f5:5a:a4:e8:79:06:05:
0f:3c:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:08 2025 by rpki-client