Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/G5BeABhdCrrdGEpB-JDg3hOxLjo.roa
File: G5BeABhdCrrdGEpB-JDg3hOxLjo.roa (raw, json)
Hash identifier: QvO3E/D83lMfSA5ewe94wnd6O5F2I3sM11bOzNLnIl8=
Subject key identifier: 1B:90:5E:00:18:5D:0A:BA:DD:18:4A:41:F8:90:E0:DE:13:B1:2E:3A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01827CCC96BB15BF3531C201BE79877C1DE9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/G5BeABhdCrrdGEpB-JDg3hOxLjo.roa
Signing time: Mon 08 Aug 2022 09:32:38 +0000
ROA not before: Mon 08 Aug 2022 09:32:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e540::/32 maxlen: 32
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:ee00::/29 maxlen: 29
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e041::/32 maxlen: 32
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0b:b740::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0f:e9c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:cc:96:bb:15:bf:35:31:c2:01:be:79:87:7c:1d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 8 09:32:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b905e00185d0abadd184a41f890e0de13b12e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:75:53:98:a5:c1:ee:f1:10:e4:0a:02:aa:
4a:dd:fe:24:76:0a:b8:2e:5e:e2:41:1d:a7:76:aa:
14:b1:58:b5:9b:17:cd:42:b9:3c:8a:ea:d9:49:41:
46:45:43:c0:b9:95:49:c8:95:b0:3f:32:45:46:da:
39:b8:19:05:63:6b:58:f2:52:15:f5:c8:5a:c4:0a:
0a:e6:39:74:b1:ce:40:bc:d3:ed:78:4f:41:c0:cb:
c5:7e:53:06:cb:a2:05:18:cf:dd:9a:51:6b:25:89:
bd:78:5f:a1:2a:0a:78:53:98:65:f2:7b:c2:23:3c:
a6:f6:bf:be:20:60:59:6b:db:3b:db:8d:cf:77:95:
89:61:17:7d:4d:2a:d5:69:7a:91:95:13:27:95:e3:
bd:57:30:8d:5c:14:c3:7e:bd:ec:eb:72:67:d4:8d:
38:88:4f:44:dd:0c:66:f2:61:8b:72:1c:70:4e:df:
12:9b:f8:d3:70:e4:25:23:e4:2e:6c:6e:b5:af:64:
41:f2:9b:8e:60:e7:d6:24:9e:75:e0:99:49:4b:ff:
73:1c:d4:e1:97:e8:dc:d0:b2:12:a7:56:08:ea:0f:
23:d6:56:af:69:03:1b:15:33:34:c2:3a:34:63:bf:
de:cd:df:c2:84:e7:fc:da:6b:e4:f5:98:7a:19:15:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:5E:00:18:5D:0A:BA:DD:18:4A:41:F8:90:E0:DE:13:B1:2E:3A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/G5BeABhdCrrdGEpB-JDg3hOxLjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0b:b740::/29
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:2700::/29
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e9c0::/29
2a0f:ea00::/29
2a0f:ee00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
90:bd:f6:b1:c9:4e:29:98:9b:bc:a2:21:c1:7d:90:79:ee:aa:
da:98:26:0d:e9:f1:66:a1:bf:6e:d5:2b:f3:be:33:ec:99:f6:
47:40:1d:38:b9:c5:f1:41:f8:be:b0:bc:f2:44:41:53:40:d3:
a6:b8:8d:13:57:7c:11:da:4f:ae:a6:da:d0:bc:4f:96:55:e0:
dd:50:ff:c0:b3:bf:54:e7:ba:46:f3:0e:68:9f:37:09:e5:e6:
10:c5:54:0c:c6:73:35:bf:3f:1d:49:d8:6f:ec:78:9a:1d:f2:
ab:ec:3f:7b:29:fc:9f:77:d9:78:43:6e:81:d5:4d:9e:fe:65:
87:9c:f7:33:5c:8f:76:13:37:1d:bd:66:dc:47:e2:55:5d:4e:
07:51:9c:4f:d3:18:80:65:d7:85:61:7f:46:e1:af:18:d1:6c:
d9:4b:ee:ab:7a:90:d5:71:21:02:a3:92:77:c4:64:4d:39:d2:
5d:a8:4c:66:d6:71:29:8a:66:1d:89:b0:d9:80:d5:70:a0:da:
48:4e:8f:a7:89:f2:1f:98:87:be:79:74:18:26:51:9d:4e:9b:
66:11:92:29:0d:73:86:28:89:9f:b0:fb:85:35:fb:48:e8:6f:
bb:07:50:1a:d8:31:32:51:e5:d6:9c:9f:49:fa:aa:ac:38:54:
dd:2a:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:49 2025 by rpki-client