Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGHCtq1olZPqE5G59pIx09eZh98.roa
File: NGHCtq1olZPqE5G59pIx09eZh98.roa (raw, json)
Hash identifier: UvwJZmRlLyL9sGu/uj1cZh7RWNprOphbCnGdvRaC4YM=
Subject key identifier: 34:61:C2:B6:AD:68:95:93:EA:13:91:B9:F6:92:31:D3:D7:99:87:DF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0184850ABDB738B209ED4A042EC9BC7DB71C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGHCtq1olZPqE5G59pIx09eZh98.roa
Signing time: Thu 17 Nov 2022 10:03:04 +0000
ROA not before: Thu 17 Nov 2022 10:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.134.186.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
185.214.72.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
64.226.159.0/24 maxlen: 24
64.226.158.0/24 maxlen: 24
64.226.157.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
103.227.85.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
103.227.86.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
64.226.55.0/24 maxlen: 24
64.226.54.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
209.35.158.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
185.155.202.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
167.94.165.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
2a0f:e540::/32 maxlen: 32
2a0f:1480::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a09:17c0::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a0e:f200:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a12:ecc2::/32 maxlen: 32
2a0f:ea00::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0e:9b00::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a12:ecc3::/32 maxlen: 32
2a0f:1580::/29 maxlen: 29
2a0f:3940::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0f:e9c0::/29 maxlen: 29
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:dd40::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0c:7884::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e041::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a12:eb40::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0b:b740::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0f:e040:2::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a12:ecc5::/32 maxlen: 32
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0f:1380::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:8300::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a12:ecc7::/32 maxlen: 32
2a12:ecc0::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a10:67c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a12:ecc6::/32 maxlen: 32
2a0f:e640::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:0a:bd:b7:38:b2:09:ed:4a:04:2e:c9:bc:7d:b7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 17 10:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3461c2b6ad689593ea1391b9f69231d3d79987df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:2d:50:eb:67:ea:a4:9a:60:80:62:1c:99:
d5:5e:57:5c:43:6f:12:6d:92:04:0a:86:9c:d1:35:
c0:70:35:89:a0:80:df:72:4b:f1:58:7e:94:65:52:
a4:8b:41:9d:95:a2:a1:e8:8e:d6:78:26:43:d2:36:
04:18:d6:65:20:05:75:7d:db:eb:cb:43:bc:a4:81:
52:2a:a7:53:c9:82:0d:e6:7b:e9:57:c6:3b:57:0a:
e8:da:61:5b:91:c3:01:c8:66:b6:ba:7b:82:27:1f:
9e:26:fd:19:4e:35:98:b2:c9:49:95:85:75:ef:52:
d7:c6:db:38:11:4f:d7:7b:a2:ec:4f:03:71:4d:79:
84:6e:d3:27:87:c4:68:8b:ea:4e:7f:99:dd:b7:c6:
13:33:69:dd:cf:07:e9:d0:95:58:82:ff:d0:2e:67:
5c:db:d0:cd:14:7d:62:63:01:3c:8d:27:05:c7:20:
8b:a9:91:24:1e:03:f3:b0:9a:f5:30:25:a8:fe:c3:
3d:79:db:82:1e:0a:68:0b:ca:2a:e8:ef:af:b9:b4:
1a:26:71:16:16:27:5f:7d:f5:2f:0b:41:14:e5:8d:
1d:a2:8c:f7:1f:a3:5f:cd:7a:f5:64:e8:a6:6f:80:
12:af:c0:ec:9b:30:19:47:22:d2:a9:4c:89:74:63:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:61:C2:B6:AD:68:95:93:EA:13:91:B9:F6:92:31:D3:D7:99:87:DF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGHCtq1olZPqE5G59pIx09eZh98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/23
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.128.77.0/24
45.129.125.0/24
45.130.254.0/24
45.131.214.0/24
45.134.186.0/24
45.137.41.0/24
45.137.82.0/24
45.137.85.0-45.137.86.255
45.145.59.0/24
45.146.129.0/24
45.146.181.0/24
45.147.31.0/24
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/23
45.158.197.0-45.158.198.255
64.226.54.0/23
64.226.156.0/22
80.253.248.0/24
85.209.131.0/24
91.212.100.0/24
91.212.107.0/24
91.212.120.0/24
91.232.255.0/24
91.233.20.0/24
103.59.40.0/22
103.74.76.0/23
103.227.84.0-103.227.86.255
103.229.31.0/24
113.30.152.0/22
167.94.165.0/24
185.136.204.0/24
185.155.202.0/24
185.164.59.0/24
185.214.72.0/24
193.5.64.0/24
193.39.143.0/24
193.39.208.0/23
193.41.38.0/23
193.41.68.0/23
193.41.86.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.41.38.0/24
194.45.34.0/24
209.35.158.0/24
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0b:b740::/29
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:9b00::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1380::/29
2a0f:1480::/29
2a0f:1580::/29
2a0f:1f80::/29
2a0f:2300::/29
2a0f:2500::/29
2a0f:2700::/29
2a0f:3940::/29
2a0f:3d83::/32
2a0f:3f80::/29
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:8300::/29
2a0f:9600::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e040:2::/48
2a0f:e041::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e640::/29
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e740::/29
2a0f:e9c0::/29
2a0f:ea00::/29
2a0f:ee00::/29
2a10:67c0::/29
2a12:4ac0::/29
2a12:eb40::/29
2a12:ecc0::/32
2a12:ecc2::/31
2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:48:db:ae:df:b4:15:4d:a7:d6:ea:fa:af:e4:5a:4f:9a:ec:
12:35:af:09:d7:23:c8:24:36:20:21:aa:de:ae:e8:18:e3:99:
a3:a4:7b:52:21:88:88:54:54:fb:26:b3:5f:40:e4:6b:3b:49:
de:78:62:0d:2f:a6:47:f6:23:5a:a8:a1:72:52:ba:6f:a3:f7:
fb:19:f2:9c:1d:b5:b3:63:d5:eb:9a:b8:3b:b0:af:56:ab:4e:
7f:f1:a4:fe:e9:f0:42:f6:69:f6:af:17:da:19:e4:64:c0:5c:
1c:5a:d2:d5:96:9d:28:e0:02:f3:31:a8:bd:50:60:0c:e7:75:
bb:e4:b7:5c:b6:bc:a0:53:95:59:43:9e:6b:f6:c4:fd:50:9b:
a4:a7:17:14:a1:08:a3:58:c8:99:cc:11:5a:e0:77:20:81:76:
7f:ac:99:36:5c:6e:05:d6:6c:b9:6b:84:74:a9:3b:bd:aa:33:
32:d4:37:37:19:d8:88:5d:45:37:e3:8f:86:d6:62:30:00:65:
fa:38:06:02:5d:27:12:67:c9:2d:7f:ea:b0:f1:14:4a:d9:22:
6d:cc:56:71:98:87:dd:99:82:f3:fd:6f:96:b2:3e:2b:5d:b8:
60:2d:12:cd:f4:b7:74:05:17:81:31:72:e9:cf:9b:a2:95:2d:
95:42:cd:dd
-----BEGIN CERTIFICATE-----
MIIIJDCCBwygAwIBAgISAYSFCr23OLIJ7UoELsm8fbccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMTE3MTAwMzA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDYxYzJiNmFkNjg5NTkzZWExMzkxYjlmNjkyMzFkM2Q3OTk4N2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRQtUOtn6qSaYIBiHJnVXldcQ28S
bZIECoac0TXAcDWJoIDfckvxWH6UZVKki0GdlaKh6I7WeCZD0jYEGNZlIAV1fdvr
y0O8pIFSKqdTyYIN5nvpV8Y7Vwro2mFbkcMByGa2unuCJx+eJv0ZTjWYsslJlYV1
71LXxts4EU/Xe6LsTwNxTXmEbtMnh8Roi+pOf5ndt8YTM2ndzwfp0JVYgv/QLmdc
29DNFH1iYwE8jScFxyCLqZEkHgPzsJr1MCWo/sM9eduCHgpoC8oq6O+vubQaJnEW
FidfffUvC0EU5Y0dooz3H6NfzXr1ZOimb4ASr8DsmzAZRyLSqUyJdGPJkQIDAQAB
o4IFMDCCBSwwHQYDVR0OBBYEFDRhwrataJWT6hORufaSMdPXmYffMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTkdIQ3RxMW9sWlBxRTVHNTlwSXgwOWVaaDk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDRAYIKwYBBQUHAQcBAf8EggMzMIIDLzCCAWoEAgABMIIB
YgMEAS0NugMEAC1W9gMEAC1b0AMEAC1b0wMEAC1fYgMEAC2ATQMEAC2BfQMEAC2C
/gMEAC2D1gMEAC2GugMEAC2JKQMEAC2JUjAMAwQALYlVAwQALYlWAwQALZE7AwQA
LZKBAwQALZK1AwQALZMfAwQALZkVAwQALZkXAwQBLZnaAwQBLZrmAwQBLZ0kMAwD
BAAtnsUDBAAtnsYDBAFA4jYDBAJA4pwDBABQ/fgDBABV0YMDBABb1GQDBABb1GsD
BABb1HgDBABb6P8DBABb6RQDBAJnOygDBAFnSkwwDAMEAmfjVAMEAGfjVgMEAGfl
HwMEAnEemAMEAKdepQMEALmIzAMEALmbygMEALmkOwMEALnWSAMEAMEFQAMEAMEn
jwMEAcEn0AMEAcEpJgMEAcEpRAMEAMEpVgMEAMEpcwMEAcEpegMEAcFvBAMEAcFv
EgMEAMIpJgMEAMItIgMEANEjnjCCAb0EAgACMIIBtQMFAyoJF8ADBwAqCi0AAAED
BQMqC7dAAwUAKgx4gAMHACoMeIIAATAOAwUAKgx4gwMFACoMeIQDBwAqDhXAAAQD
BwAqDhqAASMDBwAqDiJAAAIDBQMqDiRAAwUDKg6bADASAwcAKg7yAAABAwcAKg7y
AAACMA4DBQEqDwoCAwUAKg8KBAMFACoPEgADBQMqDxOAAwUDKg8UgAMFAyoPFYAD
BQMqDx+AAwUDKg8jAAMFAyoPJQADBQMqDycAAwUDKg85QAMFACoPPYMDBQMqDz+A
AwcAKg99AAADAwcAKg99AAAFAwUDKg+DAAMFAyoPlgADBQMqD9tAAwUDKg/dQAMF
AyoP30ADBwAqD+BAAAADBwAqD+BAAAIDBQAqD+BBAwUAKg/hwAMFACoP4cIDBQAq
D+HHAwUAKg/lQAMHACoP5gAAAQMFAyoP5kADBwAqD+bAASMDBwAqD+bACZEDBwAq
D+bAD+EDBQMqD+dAAwUDKg/pwAMFAyoP6gADBQMqD+4AAwUDKhBnwAMFAyoSSsAD
BQMqEutAAwUAKhLswAMFASoS7MIwDgMFACoS7MUDBQMqEuzAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpSNuu37QVTafW6vqv5FpPmuwSNa8J1yPIJDYgIarerugY45mjpHtS
IYiIVFT7JrNfQORrO0neeGINL6ZH9iNaqKFyUrpvo/f7GfKcHbWzY9Xrmrg7sK9W
q05/8aT+6fBC9mn2rxfaGeRkwFwcWtLVlp0o4ALzMai9UGAM53W75LdctrygU5VZ
Q55r9sT9UJukpxcUoQijWMiZzBFa4HcggXZ/rJk2XG4F1my5a4R0qTu9qjMy1Dc3
GdiIXUU344+G1mIwAGX6OAYCXScSZ8ktf+qw8RRK2SJtzFZxmIfdmYLz/W+Wsj4r
XbhgLRLN9Ld0BReBMXLpz5uilS2VQs3d
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:57 2025 by rpki-client