Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8BALcXUo-SDq41sRvwHrOWm4A0I.roa
File: 8BALcXUo-SDq41sRvwHrOWm4A0I.roa (raw, json)
Hash identifier: 4caP+3wbw5Ne7gp8OPjdKMVkx76n+ErSQgkv7TfGl5E=
Subject key identifier: F0:10:0B:71:75:28:F9:20:EA:E3:5B:11:BF:01:EB:39:69:B8:03:42
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182497335497BEAE20FF3D5F2B3FCB60A8D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8BALcXUo-SDq41sRvwHrOWm4A0I.roa
Signing time: Fri 29 Jul 2022 10:14:23 +0000
ROA not before: Fri 29 Jul 2022 10:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:73:35:49:7b:ea:e2:0f:f3:d5:f2:b3:fc:b6:0a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 29 10:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0100b717528f920eae35b11bf01eb3969b80342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:fb:cb:60:b5:1c:8e:20:a5:5e:27:27:90:
e6:f0:8d:ee:cc:51:77:ad:34:d4:66:c9:eb:80:9e:
76:98:68:a0:f3:ec:49:25:f6:e8:54:99:14:d3:eb:
c4:f3:60:eb:bf:ae:0d:85:52:05:fd:e7:c2:16:ae:
c7:fe:dc:21:56:26:53:14:02:2f:91:ca:85:8d:55:
48:8e:1d:da:d9:76:75:6b:f0:18:9d:c0:8d:4b:8c:
e7:34:64:cb:8f:60:c1:da:5e:5d:6f:52:f4:96:1f:
f8:52:54:d5:7b:5c:ab:7f:6c:dd:c2:5a:78:10:27:
a4:2f:f0:d2:aa:86:fd:64:63:43:9e:18:33:96:b0:
40:15:03:86:6f:aa:fe:c8:e5:df:5a:1a:62:61:31:
9b:3d:81:7c:a8:64:aa:c2:38:d8:4d:33:4c:09:64:
94:35:89:a7:bb:16:09:4f:05:a9:7f:89:42:c9:97:
05:fd:fd:90:00:8e:9f:7f:b4:77:dc:90:fd:c8:3f:
2f:5a:b6:6f:c7:ab:1f:06:2e:a0:64:3e:55:96:1a:
e3:0d:95:a1:0d:6b:56:cf:5f:cc:ec:fa:40:2b:53:
b3:42:94:27:9b:2d:51:ab:89:1e:f4:37:37:dd:5b:
db:96:66:f0:ea:dc:fd:59:40:71:b6:37:21:29:6c:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:10:0B:71:75:28:F9:20:EA:E3:5B:11:BF:01:EB:39:69:B8:03:42
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8BALcXUo-SDq41sRvwHrOWm4A0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:1e:26:f7:6f:5c:9e:55:2f:f7:71:3d:bb:95:f9:f1:f4:d7:
11:df:05:8b:b8:b7:f8:f2:89:10:05:6c:3f:b0:6b:fb:ea:67:
a9:d4:f6:a3:b5:ff:e9:3a:11:d0:1d:e5:9c:41:a3:77:3a:3e:
7e:97:af:63:66:95:a6:01:d4:96:43:c4:45:c4:87:6b:b3:57:
45:f7:8c:8c:dc:5f:5e:46:94:bc:60:00:92:72:67:cb:02:a8:
02:a8:88:9e:54:a7:9c:99:f7:32:e7:49:e7:7e:7f:2b:a6:c7:
02:26:fb:a6:8e:39:6e:22:23:c5:1a:18:7b:bc:6d:92:b5:dc:
82:9c:d4:c4:45:2c:fe:3b:a4:82:25:6e:d6:9a:f8:2c:3a:a3:
fd:0a:b0:09:0f:5f:cb:3a:a5:dd:c2:d8:41:fb:87:01:01:45:
23:24:23:78:e8:44:e8:34:23:bc:5d:10:be:70:c4:d4:14:e0:
9b:86:c5:fe:33:58:6d:c9:d7:ab:a6:26:e1:6b:be:99:cb:b0:
07:6a:5c:a5:a5:3d:68:32:04:5e:f7:e7:1d:fd:e7:1e:9b:8b:
88:23:8f:91:79:6b:f3:a7:e2:f5:be:bb:83:7c:89:75:e5:30:
44:e8:34:3d:0a:61:b0:11:66:55:bf:3c:42:88:e1:af:d3:eb:
9f:76:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:11 2025 by rpki-client