Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NAcJXMysIIG804Mv3cX_m-cMcDw.roa
File: NAcJXMysIIG804Mv3cX_m-cMcDw.roa (raw, json)
Hash identifier: 1UGa732P5ORyQuOKiDOv1emVk7bUWkjUW1vK5hwuavs=
Subject key identifier: 34:07:09:5C:CC:AC:20:81:BC:D3:83:2F:DD:C5:FF:9B:E7:0C:70:3C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183B76A0444F93D3AED81F6EDA68150B9F6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NAcJXMysIIG804Mv3cX_m-cMcDw.roa
Signing time: Sat 08 Oct 2022 11:45:21 +0000
ROA not before: Sat 08 Oct 2022 11:45:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
185.214.72.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
64.226.159.0/24 maxlen: 24
64.226.158.0/24 maxlen: 24
64.226.157.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
103.227.85.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
209.35.158.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
2a0f:140::/29 maxlen: 29
2a0f:1480::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0f:ea00::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a0e:9b00::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:1580::/29 maxlen: 29
2a0f:3940::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0f:e9c0::/29 maxlen: 29
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0f:8100::/29 maxlen: 29
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0c:7884::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e041::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0b:b740::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0f:e040:2::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0f:1380::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:8300::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a12:ecc1::/32 maxlen: 32
2a12:ecc0::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a10:67c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b7:6a:04:44:f9:3d:3a:ed:81:f6:ed:a6:81:50:b9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 8 11:45:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3407095cccac2081bcd3832fddc5ff9be70c703c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:12:b4:fa:35:d7:47:08:97:83:af:4c:23:
b7:c4:ca:d9:af:01:fa:3b:ca:cd:88:4b:54:2a:55:
44:98:f4:b9:02:91:8b:77:b9:8e:d4:1f:62:9d:f3:
cc:6a:fd:f7:e6:d0:eb:62:37:49:84:2a:fa:0b:b8:
de:77:b0:aa:be:d1:98:21:9f:33:3d:d7:14:c0:9e:
5f:9c:35:29:03:f4:42:98:b5:cf:4b:b8:7e:4a:8e:
18:3e:c4:0f:a9:1d:48:14:8c:ee:c1:e2:92:1c:df:
c6:b3:9b:0b:ea:95:b4:a7:68:fc:05:4e:12:4a:2d:
86:d8:3b:0d:fa:c5:04:da:43:33:04:a1:89:c5:4f:
02:c4:d6:cd:72:00:55:48:2c:bb:ef:89:38:38:b7:
c9:d7:a2:30:43:bf:01:28:eb:c7:a8:42:16:e5:40:
00:ea:43:38:de:7c:c2:52:12:a3:73:0a:0f:4f:ef:
80:4b:43:51:ca:bc:f3:5e:e9:b4:ed:6e:23:76:4e:
97:62:74:6d:01:36:82:60:8d:58:d2:7c:52:5b:8b:
76:a8:33:bf:dc:e7:b4:ac:2b:f3:ba:37:6f:27:f9:
dd:f5:72:97:13:1f:b5:f3:ad:f7:94:fe:2b:3d:ce:
90:30:cb:35:f2:e4:6b:55:2b:76:1f:41:2d:04:bf:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:07:09:5C:CC:AC:20:81:BC:D3:83:2F:DD:C5:FF:9B:E7:0C:70:3C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NAcJXMysIIG804Mv3cX_m-cMcDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.128.77.0/24
45.131.214.0/24
45.137.41.0/24
45.137.82.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.158.197.0-45.158.198.255
64.226.156.0/22
91.212.100.0/24
91.212.107.0/24
91.232.255.0/24
91.233.20.0/24
103.227.84.0/23
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
185.214.72.0/24
193.5.64.0/24
193.39.143.0/24
193.39.208.0/24
193.41.38.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.45.34.0/24
209.35.158.0/24
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0b:b740::/29
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:9b00::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:140::/29
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1380::/29
2a0f:1480::/29
2a0f:1580::/29
2a0f:1f80::/29
2a0f:2700::/29
2a0f:3940::/29
2a0f:3d83::/32
2a0f:3f80::/29
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:8100::/29
2a0f:8300::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e040:2::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e640::/29
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e740::/29
2a0f:e9c0::/29
2a0f:ea00::/29
2a0f:ee00::/29
2a10:67c0::/29
2a12:4ac0::/29
2a12:ecc0::/31
Signature Algorithm: sha256WithRSAEncryption
c1:50:eb:5e:d1:c6:4f:10:6f:22:34:9c:b8:c8:3a:be:ae:d1:
1b:f6:14:84:fc:e3:17:30:70:a9:71:8b:af:60:00:00:55:f0:
bd:c6:1c:0a:1b:21:de:f5:87:f3:7d:06:b3:d2:9a:12:1d:c0:
b1:2b:bb:18:b8:ed:f7:e9:98:8c:84:b3:15:7f:25:94:9a:96:
a9:0c:ad:c5:63:f2:6b:20:70:c4:7d:18:15:3a:ad:c0:ea:d1:
47:38:e3:40:5d:7f:2b:21:71:e9:87:d9:8d:bf:b6:a4:5d:97:
1d:b7:82:ad:9b:51:c2:81:d1:1a:19:43:a2:74:0f:2f:42:b5:
1b:15:f6:ce:8c:a1:e6:31:b3:57:88:44:ad:23:6c:df:e8:1d:
a4:2b:93:d9:cb:59:84:95:4f:ae:d9:2a:a6:36:04:34:8e:53:
dc:66:be:59:96:ca:d5:78:78:4b:a8:78:6b:84:0a:09:67:4c:
0d:53:c4:1f:02:29:8c:0f:4f:1a:1d:47:c3:ee:bd:af:78:d0:
7c:c9:c6:16:ff:b0:1b:6c:19:07:44:a8:33:a5:00:a3:61:6c:
31:4e:ed:6f:ef:c2:a2:f2:e4:13:45:ff:fb:f1:61:fa:5b:5f:
05:fa:3e:a9:a8:a3:3b:a0:f2:6e:ff:0d:e4:31:41:73:50:c4:
1a:26:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:50 2025 by rpki-client