Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A7Ul4oUhoQibYnNJ53hHHAbAYYs.roa
File: A7Ul4oUhoQibYnNJ53hHHAbAYYs.roa (raw, json)
Hash identifier: OWMNNvrTdF+CVd/YLobKdnTVmJRTIPfDLWarlHRec5I=
Subject key identifier: 03:B5:25:E2:85:21:A1:08:9B:62:73:49:E7:78:47:1C:06:C0:61:8B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0360CF4A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A7Ul4oUhoQibYnNJ53hHHAbAYYs.roa
Signing time: Wed 01 Jun 2022 21:08:21 +0000
ROA not before: Wed 01 Jun 2022 21:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:e842::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56676170 (0x360cf4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 1 21:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03b525e28521a1089b627349e778471c06c0618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:15:42:b9:81:f2:b7:93:40:25:a8:34:25:
11:cc:13:78:7a:25:87:e9:15:64:d1:b9:f2:ac:36:
e2:6b:9a:d5:7e:6a:f1:ce:cb:56:39:f5:96:a9:84:
54:16:9f:99:4f:57:26:5b:17:aa:89:99:7b:c8:7b:
0b:09:5f:45:25:08:59:56:be:c1:05:74:5f:9a:b9:
42:fe:68:6d:03:51:60:12:6c:cd:77:70:45:a4:d1:
77:34:b5:54:05:98:d2:1d:36:53:9d:07:f2:58:03:
0f:83:ff:5f:8d:be:31:11:dd:59:04:72:59:cc:1d:
93:94:b6:11:bf:46:04:71:e6:ea:15:49:f6:e6:c7:
17:3e:d2:c4:eb:bb:0b:d9:2f:75:44:6e:55:29:02:
af:d0:03:73:2d:ed:dd:98:7d:2f:e8:f8:f3:55:a8:
c5:d3:ab:bd:aa:99:ce:35:90:2f:1c:0c:2f:02:c3:
ec:61:01:c2:db:9c:e1:da:5a:8f:9b:69:df:79:27:
db:c8:2a:7b:99:67:1a:ea:67:37:b9:0c:5a:b2:7c:
24:99:ca:d4:81:ec:9a:d6:bc:d4:10:20:30:e4:a0:
e1:a2:48:d3:fb:84:98:e9:34:2c:21:7b:9c:71:9d:
8f:c4:df:af:47:84:4c:72:ce:87:c4:20:0b:be:5e:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B5:25:E2:85:21:A1:08:9B:62:73:49:E7:78:47:1C:06:C0:61:8B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/A7Ul4oUhoQibYnNJ53hHHAbAYYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0-45.157.38.255
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7882:1::/48
2a0c:7883::/32
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e842::/32
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
96:42:57:e4:ed:b3:2f:df:ca:51:a3:fb:52:93:40:6d:02:34:
69:c9:b6:c7:74:40:9b:8d:94:d2:07:6f:4a:83:55:de:b0:85:
e5:5f:d6:c7:f6:33:35:91:f7:0e:11:12:78:bc:0f:79:f8:e3:
db:a7:47:5d:b1:a4:a7:ac:15:12:ad:63:fe:df:6c:1a:6a:2c:
24:dd:73:50:00:6e:d6:99:a0:3e:f4:fd:95:2d:c6:e2:c4:2c:
42:f5:74:02:3c:f1:3c:3a:1e:8f:a2:c9:4e:25:b1:86:90:4e:
b7:9d:29:bd:eb:a5:f8:0c:a2:f3:4c:32:42:12:6f:25:45:a8:
cf:21:6c:3a:4e:fd:78:44:ce:cd:31:2a:fd:53:46:f5:3b:62:
e2:cd:1d:43:29:0c:76:02:3b:60:6d:7a:fc:76:71:c8:22:eb:
c0:67:d3:55:f2:77:24:72:10:73:98:f4:f9:61:eb:06:92:85:
df:bb:53:bc:6a:b9:61:c7:7c:ce:58:81:0a:5e:e5:27:c9:1b:
2e:7c:84:b9:d3:16:af:a3:ba:f1:0a:fb:e3:96:97:e1:53:41:
fe:b9:93:3b:b6:27:cc:7b:69:db:4c:8d:61:3f:b2:6b:0f:f1:
91:83:f1:b7:e7:11:1d:66:5b:b8:f2:8b:6e:4c:92:7d:b1:a5:
f3:5f:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:57:35 2025 by rpki-client