Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/D4W-RHLtaOmYNya8bYa-n5WNOtE.roa
File: D4W-RHLtaOmYNya8bYa-n5WNOtE.roa (raw, json)
Hash identifier: xMbeKBQG3ma2uOGa9BU2ormRL7Iv5LgwPs9Ij+Y1OPA=
Subject key identifier: 0F:85:BE:44:72:ED:68:E9:98:37:26:BC:6D:86:BE:9F:95:8D:3A:D1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01825DFEE9E5FB49E1EEC376D768AD74A6A9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/D4W-RHLtaOmYNya8bYa-n5WNOtE.roa
Signing time: Tue 02 Aug 2022 09:59:23 +0000
ROA not before: Tue 02 Aug 2022 09:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e540::/32 maxlen: 32
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:fe:e9:e5:fb:49:e1:ee:c3:76:d7:68:ad:74:a6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 2 09:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f85be4472ed68e9983726bc6d86be9f958d3ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:21:8b:f4:81:4d:56:68:1a:5c:2b:98:11:
9b:4b:43:72:12:91:ec:42:16:40:98:0b:af:b1:f7:
3d:4f:d9:09:68:92:60:59:97:85:ed:58:74:55:c1:
d9:2f:08:4d:ff:e1:c4:f9:30:fc:5f:16:2c:9a:25:
d5:9b:98:ad:6d:14:8a:73:de:09:55:6f:48:e1:ac:
ab:8f:8e:aa:ae:1a:84:51:35:00:ca:6c:d2:f4:3d:
4a:4d:2d:7c:77:8f:d9:77:db:ab:9a:49:3b:65:18:
05:41:84:1b:03:35:31:8a:20:1d:14:14:33:1f:6a:
93:a8:d0:53:ce:3a:fe:31:67:46:70:bd:b5:98:ba:
80:d4:0b:4f:a4:37:bb:8c:fd:9e:30:0f:27:21:88:
da:15:f5:2c:92:0e:ff:51:1b:24:c5:b0:e9:b1:d1:
f3:d2:b5:5e:54:be:30:01:2b:bb:d3:bd:e3:6d:69:
5d:2e:d9:b3:5b:c4:9e:01:18:39:e6:2b:f2:61:97:
08:58:5d:cb:fb:93:1e:6b:46:a5:82:53:95:62:0d:
63:3c:e6:f2:66:a7:cc:1b:e6:37:d3:79:e8:df:8c:
f0:8e:4c:be:6d:d7:c8:8d:50:7b:7d:36:84:e3:4b:
28:bb:69:3e:59:f7:62:3a:60:52:19:1e:db:01:02:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:BE:44:72:ED:68:E9:98:37:26:BC:6D:86:BE:9F:95:8D:3A:D1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/D4W-RHLtaOmYNya8bYa-n5WNOtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:2700::/29
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
bd:14:88:9c:16:0e:3c:e8:05:26:06:39:8b:ec:c6:ae:78:c4:
c7:28:95:51:3c:91:12:c7:fe:13:02:8b:18:ac:08:86:c5:06:
b8:44:b5:0d:52:76:7d:4b:13:c8:7e:53:13:85:b4:ca:bc:f0:
06:10:af:00:36:d0:5c:fc:03:c5:e7:28:52:b3:24:66:0f:f3:
b3:ce:67:f9:fa:db:45:20:4a:0c:fd:a0:50:d6:f2:ce:af:10:
0b:f8:5d:49:62:00:56:d9:2b:55:9e:75:9c:a3:28:e5:b2:7d:
ba:34:35:5a:3f:6c:26:d9:02:fe:5e:30:7a:75:d5:15:f4:28:
13:70:8d:6f:72:27:49:43:98:ee:65:94:c9:dd:e5:8a:3e:6b:
67:0e:59:2c:5e:93:f0:01:7b:18:85:d0:22:3d:8c:e4:53:75:
f6:4f:db:1c:50:fe:58:7d:3b:01:81:f0:f9:7f:36:7a:c5:c1:
54:12:e3:9d:07:0f:de:92:da:d2:ae:45:e0:49:f5:31:a1:36:
84:ee:de:db:9b:61:3f:90:94:67:33:55:c7:36:b6:1f:6f:13:
57:a0:de:df:4e:cf:05:31:4f:aa:29:20:cf:a9:b4:04:17:c4:
4d:08:08:6a:8c:ff:55:43:e9:7d:9f:32:d8:7b:bc:e5:b3:d4:
22:de:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:18 2025 by rpki-client