Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MIR7zinTNIc0nOQ_08RPKAdSLG4.roa
File: MIR7zinTNIc0nOQ_08RPKAdSLG4.roa (raw, json)
Hash identifier: MqdH5BW/8NSpQQY4U3oBBLuOJCx18zeRnT4Jz45y5LQ=
Subject key identifier: 30:84:7B:CE:29:D3:34:87:34:9C:E4:3F:D3:C4:4F:28:07:52:2C:6E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018338E97FC2352F7B31EB5E7F1E2C532C01
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MIR7zinTNIc0nOQ_08RPKAdSLG4.roa
Signing time: Tue 13 Sep 2022 22:12:50 +0000
ROA not before: Tue 13 Sep 2022 22:12:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:e041::/32 maxlen: 32
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0f:e040:2::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:e9:7f:c2:35:2f:7b:31:eb:5e:7f:1e:2c:53:2c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 13 22:12:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30847bce29d33487349ce43fd3c44f2807522c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:95:3b:0c:7c:23:ec:2e:13:1d:b2:6b:37:71:
a3:cc:0d:95:7c:3e:94:32:44:66:d9:56:18:80:02:
b0:9b:b6:b0:45:63:61:58:ea:53:a1:a5:d3:25:48:
53:d3:0e:ee:d5:36:a2:4b:3a:ce:71:74:45:8a:d9:
aa:0f:a6:17:7a:11:7f:b9:48:b7:b9:bf:59:5c:9f:
a6:a5:f5:43:72:70:cc:a7:b3:9d:4b:d2:c7:2b:d8:
09:d6:c2:98:cb:eb:6b:04:67:fa:95:72:ff:47:87:
7b:09:ad:d3:77:35:fd:dc:b8:7e:88:ed:6c:88:9e:
ea:f6:6b:f6:0a:1b:c2:27:97:45:44:fe:86:8f:a3:
69:9d:14:57:f1:40:f4:f7:8e:37:e9:11:0a:d4:27:
bd:05:87:28:78:e5:e7:27:61:83:8b:88:43:aa:da:
6b:85:e9:ae:e3:8d:ce:91:cf:59:b8:3b:35:35:d1:
32:c5:c3:b3:fb:c2:9e:64:a5:3b:27:71:2f:d1:e6:
4e:a5:33:cd:b6:44:0c:8d:3c:c9:d4:07:7e:ce:8e:
5e:a3:77:e4:1e:b2:8b:71:68:95:70:db:25:a0:25:
07:fa:5f:34:42:97:0c:ca:6a:b4:21:54:f8:a2:8b:
ee:be:36:b6:1e:00:08:3f:ea:c0:c8:eb:05:f3:d5:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:84:7B:CE:29:D3:34:87:34:9C:E4:3F:D3:C4:4F:28:07:52:2C:6E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MIR7zinTNIc0nOQ_08RPKAdSLG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.128.77.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
91.232.255.0/24
91.233.20.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.5.64.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.45.34.0/24
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:3d83::/32
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e040:2::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:ee:82:fa:d9:a9:20:d6:63:c6:c8:0f:15:7b:22:0b:9c:a9:
38:44:69:81:90:b5:79:bc:57:42:04:1d:ba:d0:74:be:55:44:
5f:aa:8c:a6:42:7c:12:9c:04:0f:8d:cf:89:34:33:8e:86:9b:
b5:c8:05:6e:b2:41:80:dc:27:66:89:29:ad:c0:55:55:74:99:
3e:7b:5b:67:dc:70:6c:ea:96:bc:b5:be:1b:d7:8c:9e:f4:74:
19:c1:cb:e7:50:c1:1f:86:04:5b:b2:25:cb:34:06:a0:f0:f0:
9d:99:82:99:6a:0b:e0:85:31:4b:de:5a:04:9e:74:e5:a4:6e:
34:f2:30:89:a8:84:20:ce:df:fa:1a:2a:1b:f0:2f:4a:6b:26:
89:ba:13:3f:6d:ec:62:9f:d6:4f:f3:70:69:07:0a:ec:6a:c1:
f4:16:02:88:7e:02:ea:38:b7:f0:34:d2:c4:4e:e0:de:96:45:
85:17:c5:30:f4:92:ec:9d:60:1b:93:62:4a:79:73:ea:0d:4c:
92:f9:03:86:54:34:b7:ce:e8:3f:b8:8a:4a:96:ff:d3:54:3c:
1a:c7:de:71:90:4e:24:78:ff:30:d2:b7:63:45:80:0a:c1:79:
a8:8e:31:aa:6a:31:0a:00:55:c4:34:0a:7f:7d:4e:0d:57:55:
51:f1:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:47 2025 by rpki-client