Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9i2fBxgYf73IdIR6w_PywSVb_7s.roa
File: 9i2fBxgYf73IdIR6w_PywSVb_7s.roa (raw, json)
Hash identifier: Je1E1x51eztRpFawCqE9vFhWkBRdFPBHzfQ8hg4scEs=
Subject key identifier: F6:2D:9F:07:18:18:7F:BD:C8:74:84:7A:C3:F3:F2:C1:25:5B:FF:BB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018262F95A8AB2B09E6DE5D85C252CE2E5CC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9i2fBxgYf73IdIR6w_PywSVb_7s.roa
Signing time: Wed 03 Aug 2022 09:11:24 +0000
ROA not before: Wed 03 Aug 2022 09:11:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e540::/32 maxlen: 32
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:ee00::/29 maxlen: 29
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0f:e9c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:f9:5a:8a:b2:b0:9e:6d:e5:d8:5c:25:2c:e2:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 3 09:11:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f62d9f0718187fbdc874847ac3f3f2c1255bffbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:11:cf:1b:b5:ae:d4:eb:27:80:77:61:51:
5c:2e:19:7f:a2:c7:a8:b8:18:15:f8:9d:bb:65:15:
2e:52:74:43:32:6e:7b:b1:f4:78:4b:fb:60:2b:d1:
08:0f:68:47:dc:c7:c1:67:c0:6d:93:84:37:f3:5c:
88:f9:a3:eb:21:18:b9:7a:8d:3f:ec:2c:5f:ca:6a:
a1:f0:9d:3e:79:d7:13:dc:57:fe:10:21:20:50:19:
64:55:78:f4:c9:39:41:09:88:ca:ae:8d:53:a0:5e:
75:ed:df:8b:5d:86:23:df:be:56:9e:5a:d9:52:66:
58:b8:2a:a0:b2:0f:3d:3d:30:a5:09:d8:74:f2:eb:
4f:27:a1:a8:a9:ba:4b:b7:df:d2:aa:04:f4:30:9e:
57:67:2b:90:fc:36:a3:be:e4:5d:48:5a:49:80:72:
8e:a7:18:38:bd:f1:c9:b9:94:06:5a:a4:f9:4d:62:
54:2f:92:ed:2e:1f:59:d4:b9:df:82:7d:6c:b5:d9:
31:24:7e:63:c3:96:e0:11:3f:33:98:e8:36:27:4e:
71:68:33:20:c8:1a:0b:fe:28:17:de:48:a7:cb:82:
53:a8:39:cb:b7:17:00:a7:15:66:bd:8c:9d:01:a0:
f4:87:0c:8a:48:1c:9c:fb:20:b6:a1:95:a6:a7:6a:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2D:9F:07:18:18:7F:BD:C8:74:84:7A:C3:F3:F2:C1:25:5B:FF:BB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9i2fBxgYf73IdIR6w_PywSVb_7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:2700::/29
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e9c0::/29
2a0f:ea00::/29
2a0f:ee00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
03:c8:1f:20:59:e5:01:70:b6:1f:c7:d5:51:3a:e4:fb:cc:9e:
2c:80:4c:19:80:82:ff:2e:a8:20:68:8b:23:e7:f8:88:25:e9:
3e:5b:8d:8c:da:fa:f5:99:ab:57:67:de:ae:14:61:91:a2:e3:
68:3a:52:3a:52:af:30:1d:7e:8a:59:20:4f:77:04:0d:0c:69:
ed:a1:97:4f:76:54:35:76:46:16:db:c3:25:7a:98:5e:aa:53:
af:c7:dc:5d:71:f8:79:c0:aa:81:d7:33:73:57:3b:36:9f:35:
6d:7a:94:c8:1e:26:70:2c:65:b8:d5:37:53:bf:2c:06:51:4a:
8c:da:e6:f0:e5:ca:9e:3c:48:a6:6d:24:88:c8:0b:7e:f5:0f:
b2:57:cf:46:67:cb:b8:b6:dd:7e:a5:58:df:0b:e0:b7:96:e7:
33:08:76:5c:55:07:e1:1a:2a:dd:5f:f3:80:6d:85:b7:2c:99:
db:ce:cb:09:05:fa:1d:04:ff:8a:2f:27:ec:46:7e:bd:9c:c7:
10:07:38:4c:9b:da:ac:2c:be:e6:e6:ca:f3:9c:72:06:ee:7d:
83:1a:8a:b4:3d:47:be:d0:e4:cf:d5:58:27:d2:39:c0:4a:02:
7a:1b:52:3c:2b:de:d6:a7:69:71:4d:a0:0e:4c:34:68:fd:4a:
7b:22:16:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:08 2025 by rpki-client