Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGbmNq80HSQXiM_NI6Ldm1BR_HE.roa
File: NGbmNq80HSQXiM_NI6Ldm1BR_HE.roa (raw, json)
Hash identifier: 7XUm25EFGBHMqMn1FmtNaAhRFZUjlZqJ/XYyVALfOgg=
Subject key identifier: 34:66:E6:36:AF:34:1D:24:17:88:CF:CD:23:A2:DD:9B:50:51:FC:71
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02C4BC58
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGbmNq80HSQXiM_NI6Ldm1BR_HE.roa
Signing time: Thu 14 Apr 2022 19:31:35 +0000
ROA not before: Thu 14 Apr 2022 19:31:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0f:a03::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:e842::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46447704 (0x2c4bc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 14 19:31:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3466e636af341d241788cfcd23a2dd9b5051fc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:1c:a1:2d:6d:2c:4e:dc:22:42:66:f6:b1:
58:f9:9f:c8:04:9b:1b:25:33:3b:c1:87:da:55:53:
95:36:58:37:d1:d0:9a:55:12:2d:1d:50:cd:dc:1c:
0b:50:27:34:f5:3a:c6:37:09:ef:06:b0:d8:90:2b:
67:be:61:66:40:cb:02:f7:51:30:0c:b5:d5:f4:55:
13:b9:9f:06:e0:52:a0:d0:76:8b:d6:26:08:64:95:
cd:0b:18:6d:44:69:79:3f:9e:33:2a:55:c9:42:70:
80:7b:0a:40:f9:e7:d6:89:cd:32:8d:7f:4d:46:69:
0a:e0:cb:f1:d8:f7:9d:b3:ec:38:58:79:b4:a8:44:
eb:2c:3a:63:fa:fd:fe:35:11:b6:9d:b9:0d:e5:41:
50:ce:9e:fa:53:29:af:b2:72:27:a0:66:47:80:35:
98:8b:d7:51:74:4b:27:8e:6f:1a:5b:93:c8:d1:4b:
7a:d9:ff:c0:f4:cd:f3:e5:36:f7:c1:d2:a7:69:5f:
4c:19:1b:86:da:d8:b3:ed:51:62:a2:4e:e2:46:ba:
d8:57:7a:ce:97:ad:f2:e4:f0:a0:32:d4:59:69:09:
e2:8c:1f:94:63:88:07:c3:09:89:46:ec:87:7a:6f:
fa:8f:de:d3:7e:62:44:5e:e1:7a:91:12:dc:1d:64:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:66:E6:36:AF:34:1D:24:17:88:CF:CD:23:A2:DD:9B:50:51:FC:71
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NGbmNq80HSQXiM_NI6Ldm1BR_HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.86.0/24
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/24
45.157.37.0-45.157.38.255
45.158.197.0-45.158.198.255
91.212.107.0/24
113.30.152.0/22
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e842::/32
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
ce:28:93:82:4c:5c:79:fd:2b:1c:77:cc:6f:82:2d:20:7a:6d:
13:2a:ed:57:a6:89:f3:90:79:9d:cb:30:c6:b7:2b:3e:80:be:
9f:52:63:f0:d2:66:9f:7c:c5:64:7f:ac:51:13:08:32:94:fe:
22:bd:ad:2b:e7:6d:5b:a1:97:bc:3f:f5:6b:e5:f1:ec:5f:2e:
49:46:08:4c:47:5f:60:91:43:3f:37:33:5d:95:8c:40:21:cf:
9a:25:4f:dd:a6:88:99:fc:cd:51:90:66:50:4b:b6:c6:56:65:
d2:64:1c:eb:07:2e:56:65:ca:1a:20:b4:62:20:a5:5f:2e:d3:
32:0c:4f:f4:5e:d4:9f:b9:ce:da:ab:bf:db:08:ab:8e:44:9c:
1b:b4:e7:82:68:a4:90:4b:e7:c2:9b:ed:52:0d:3a:8c:b6:bf:
b0:9d:86:19:97:66:43:1f:17:ae:4e:25:9b:68:2c:d1:1c:b0:
ed:81:61:76:39:f8:02:68:66:9c:ac:f5:dc:9b:98:62:57:7b:
4a:35:08:ef:eb:53:b5:7f:74:37:c0:a4:c7:b7:08:96:70:cc:
23:86:f9:a1:8f:bd:4b:b6:51:db:c1:ac:f0:72:c8:25:cc:4c:
aa:8a:54:16:40:6d:3f:e7:c2:22:62:1e:05:01:87:e6:4f:73:
3a:d8:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:59 2025 by rpki-client