Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N2OLBzxiTq7fKFeP0hItfVj5_88.roa
File: N2OLBzxiTq7fKFeP0hItfVj5_88.roa (raw, json)
Hash identifier: LMwppkHQ2+Xgz3YnnBllmlOHsMM2X0CJHf7J0M58tgk=
Subject key identifier: 37:63:8B:07:3C:62:4E:AE:DF:28:57:8F:D2:12:2D:7D:58:F9:FF:CF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018258E9087907561C8D3424E10AABE1E24F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N2OLBzxiTq7fKFeP0hItfVj5_88.roa
Signing time: Mon 01 Aug 2022 10:17:23 +0000
ROA not before: Mon 01 Aug 2022 10:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:e9:08:79:07:56:1c:8d:34:24:e1:0a:ab:e1:e2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 1 10:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37638b073c624eaedf28578fd2122d7d58f9ffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:b2:35:e6:3e:32:34:05:74:7a:ff:fc:50:
59:4a:72:59:05:85:9b:16:df:8f:a6:ef:1b:f2:ae:
34:b7:0c:47:6d:e2:17:d9:95:98:75:ab:47:26:75:
a0:28:84:bf:b5:c4:c5:51:ee:02:95:e9:d9:5f:f1:
86:47:7d:1b:4e:26:72:78:85:f9:48:7b:81:5d:70:
9c:f7:d0:a6:ee:2a:64:00:de:51:5b:97:5f:c3:49:
59:ae:11:94:25:cb:a4:72:ca:13:89:85:8d:6f:03:
dc:28:02:38:15:d0:d1:13:70:ba:ab:19:af:39:34:
20:6b:52:a2:09:a8:72:82:3c:b1:b9:4b:35:1b:7a:
21:35:0a:d5:99:fc:34:02:40:62:cc:28:69:61:ed:
a3:eb:a7:a6:d0:38:22:82:a9:92:91:02:c1:3a:af:
19:f7:ff:5f:2d:b9:70:aa:1d:4f:33:19:25:14:1d:
00:fd:ba:cc:b8:6e:ac:57:5b:99:e7:d2:ef:0f:e0:
13:4d:67:d4:63:91:ea:da:29:0d:06:71:e0:98:f0:
ee:8b:7e:d1:c1:65:f6:24:e3:a0:98:a8:ed:82:af:
f8:79:84:fd:94:71:f4:1f:dc:9f:40:97:22:84:89:
13:a0:84:73:69:1b:20:23:ee:44:e2:c1:fb:4f:a9:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:8B:07:3C:62:4E:AE:DF:28:57:8F:D2:12:2D:7D:58:F9:FF:CF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N2OLBzxiTq7fKFeP0hItfVj5_88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.143.0/24
193.39.208.0/23
193.41.38.0/23
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
03:21:4f:2b:39:7c:97:49:43:0a:67:35:80:e1:d8:01:e8:09:
0f:92:3d:ca:79:fa:d5:86:7f:f7:59:46:f0:69:73:5d:a6:98:
ef:4a:f3:f5:26:0d:db:a0:d8:ae:2a:5e:e1:60:e0:ea:a9:3a:
88:5f:e9:94:5b:53:37:3a:2b:44:fa:6b:3a:9b:ba:a4:88:5e:
e6:c2:04:a7:44:b0:2d:b9:24:b2:6d:fa:0d:a0:4c:c2:30:82:
41:51:8d:ce:db:3b:96:ea:f2:c9:18:09:71:a6:a1:1d:58:48:
1e:fa:0f:cf:00:14:57:ae:5a:00:99:fa:5a:b2:e2:bc:15:75:
45:d0:d3:49:f4:46:bf:dc:a1:5f:08:25:73:d3:09:69:95:74:
93:e5:c5:30:09:a5:28:71:fa:7d:b6:8b:0e:83:6c:c4:80:22:
0c:cb:71:d4:e2:c4:ad:87:8b:2c:c0:38:6e:75:6a:6b:0b:f7:
ca:27:b2:0b:d1:c4:4b:e9:f1:a3:9a:a3:f6:9c:4a:c2:82:c9:
40:b6:36:d0:06:4e:c2:51:01:07:d7:93:83:03:38:97:a6:d0:
ce:57:64:ac:80:ce:29:d7:86:1f:0b:6c:c8:99:ad:45:70:ca:
f9:0b:9e:99:c9:6b:45:5b:f2:6a:44:4c:c2:99:6e:47:dc:fa:
3c:75:a8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:46 2025 by rpki-client