Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9mhJsyPUu95CkB-1rcznGdNClFc.roa
File: 9mhJsyPUu95CkB-1rcznGdNClFc.roa (raw, json)
Hash identifier: VLFZ04mvYoqpzSXaYbdz1TT/Kpi2pTDctCZ5/nTzHAc=
Subject key identifier: F6:68:49:B3:23:D4:BB:DE:42:90:1F:B5:AD:CC:E7:19:D3:42:94:57
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182D4D4B723F1047CBE3938A04B959F6149
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9mhJsyPUu95CkB-1rcznGdNClFc.roa
Signing time: Thu 25 Aug 2022 11:48:06 +0000
ROA not before: Thu 25 Aug 2022 11:48:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
103.227.86.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:e041::/32 maxlen: 32
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0f:e040:2::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:d4:b7:23:f1:04:7c:be:39:38:a0:4b:95:9f:61:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 25 11:48:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f66849b323d4bbde42901fb5adcce719d3429457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:c8:26:58:76:a9:c1:18:9c:ca:93:ee:9c:
5e:69:8b:e7:e2:cd:d3:8d:5d:10:09:7e:62:09:67:
c8:71:b8:2e:66:90:78:d4:4e:93:01:a2:01:b1:0c:
6e:eb:e7:56:08:08:53:4c:3c:8d:25:e0:17:26:42:
c3:c3:b7:db:ec:c0:08:f7:70:44:ab:d6:7a:cb:70:
95:8e:a6:aa:45:98:c1:c2:ba:e0:2a:bc:be:c0:e5:
04:d9:a6:54:97:6b:18:67:7c:42:10:05:12:41:06:
b4:52:a8:11:3b:21:ff:15:04:bd:00:01:78:03:f2:
47:9d:81:d3:47:58:90:0c:dd:6e:8a:0d:3c:f5:cc:
ee:55:36:a7:73:13:ba:98:cd:35:c1:48:17:86:dd:
2d:fb:45:9a:fb:ff:6d:a6:a9:ad:7d:d9:39:b9:66:
c5:fb:b9:26:86:75:0a:9c:d3:e6:ee:06:6d:62:d5:
89:c9:a4:91:90:3b:09:7e:63:be:f0:ec:60:61:5f:
25:23:89:5d:3b:6c:ee:be:b6:d7:f6:32:93:c5:62:
2a:6d:eb:86:7f:7a:d8:8a:7b:e2:2a:e4:3a:41:18:
9c:54:c0:59:d9:db:db:4a:03:f4:15:2f:b3:ae:2c:
f8:4f:57:44:af:94:0e:76:56:48:c2:e8:fd:80:ce:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:49:B3:23:D4:BB:DE:42:90:1F:B5:AD:CC:E7:19:D3:42:94:57
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9mhJsyPUu95CkB-1rcznGdNClFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.128.77.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
80.253.248.0/24
91.212.100.0/24
91.212.107.0/24
103.227.86.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e040:2::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
21:ba:86:91:c7:4d:4a:48:88:be:7f:40:e0:68:9e:bf:10:6d:
9c:ef:b3:09:c0:b2:02:16:06:80:ad:ff:68:cd:c5:5b:54:8a:
4f:0e:17:cf:eb:a7:48:08:94:9b:27:d0:b1:51:e4:e4:c9:d2:
b9:b6:9a:41:3c:6b:23:6c:67:98:bc:6f:5b:47:35:6a:26:75:
55:03:18:f4:24:fa:01:8e:e8:b1:2f:d6:d1:d1:9a:1b:0e:e5:
dd:b3:ae:7d:75:7b:c3:e4:a8:20:11:33:6a:83:c1:e5:21:55:
83:75:10:4a:b3:2d:83:ca:e0:1f:da:57:28:31:a5:9a:b0:52:
43:45:51:08:6a:2b:1a:bc:97:73:df:67:14:4b:b9:61:c9:61:
21:92:80:60:e6:b1:30:70:2e:47:78:f9:a5:4f:4c:e6:07:08:
fb:9c:36:2f:9d:79:15:45:e3:83:93:84:12:23:f2:a3:39:62:
d1:ce:ee:4c:b5:aa:e1:82:61:07:42:a9:fd:26:6e:59:96:b0:
bc:f6:c2:16:a1:e3:9d:d8:27:f8:08:6f:f6:c6:8c:ad:ea:eb:
38:81:df:45:6f:83:83:27:6d:e8:f7:59:96:64:e1:0a:39:ff:
91:66:64:66:28:98:4e:bb:b2:5b:a2:e0:46:e5:71:0c:10:94:
28:57:ed:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:41 2025 by rpki-client