Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P8vn0I2-cihRAmMsESaHgLOeDLI.roa
File: P8vn0I2-cihRAmMsESaHgLOeDLI.roa (raw, json)
Hash identifier: hhwhkYnWgf7sHscLkN50c01APTuFN5AcgM7Whp6IHYs=
Subject key identifier: 3F:CB:E7:D0:8D:BE:72:28:51:02:63:2C:11:26:87:80:B3:9E:0C:B2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01828B9656F1E72613C513C4EAA3E4EC9563
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P8vn0I2-cihRAmMsESaHgLOeDLI.roa
Signing time: Thu 11 Aug 2022 06:27:41 +0000
ROA not before: Thu 11 Aug 2022 06:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e540::/32 maxlen: 32
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:ee00::/29 maxlen: 29
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e041::/32 maxlen: 32
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0b:b740::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0f:e9c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:96:56:f1:e7:26:13:c5:13:c4:ea:a3:e4:ec:95:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 11 06:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fcbe7d08dbe72285102632c11268780b39e0cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:36:ce:03:f7:15:90:ab:dc:13:65:45:f5:
d4:de:32:21:8a:5e:a7:20:34:92:8c:d6:a2:4c:60:
40:b6:3f:08:d5:1e:ad:a9:71:a1:64:3d:8b:83:6c:
62:c7:8b:0c:41:c7:74:76:41:db:53:ce:cd:23:3d:
b7:68:3a:d7:fd:aa:63:83:eb:ca:cf:fd:9e:9d:fe:
80:d3:6b:6c:88:3a:56:17:9b:4c:6f:a9:1d:24:42:
23:3b:49:62:5e:0b:4c:67:2f:42:cf:d3:5e:fd:ee:
e1:87:a7:c1:07:f8:2c:0b:75:63:3b:13:11:08:e1:
e6:b7:b1:5a:06:2e:b9:08:30:38:04:8b:47:58:60:
95:ac:64:2e:fe:8c:d6:a8:ac:8c:fb:b3:8e:a6:ef:
d5:f9:c7:48:38:44:17:11:30:bb:92:66:a9:42:d3:
ef:14:41:31:ea:49:d6:99:b2:9f:72:68:3c:70:5c:
07:c3:e2:65:8c:19:85:8c:8f:35:1a:45:0a:b4:aa:
29:ea:84:18:d0:33:f6:c3:14:a7:2b:6a:ec:f1:1a:
a5:07:2a:54:5c:7f:00:cd:ac:36:ae:3c:c9:59:ea:
55:a8:a7:3c:38:a5:70:a0:eb:55:6d:96:65:e6:46:
14:7f:fa:00:e3:53:93:f5:0c:79:e7:2a:ef:ec:58:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:E7:D0:8D:BE:72:28:51:02:63:2C:11:26:87:80:B3:9E:0C:B2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P8vn0I2-cihRAmMsESaHgLOeDLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.118.249.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0b:b740::/29
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:2700::/29
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e9c0::/29
2a0f:ea00::/29
2a0f:ee00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:99:84:5f:19:2e:b6:99:48:cb:64:b2:26:80:51:9e:48:62:
2b:05:d5:6f:8a:98:6f:50:45:d6:74:68:1d:b8:9a:40:4a:72:
b7:78:51:bb:70:41:4e:fe:4a:90:13:45:42:ba:96:e9:6c:4e:
e9:26:4d:07:a5:19:91:55:b2:6c:b3:6a:bc:50:47:2d:4c:25:
e4:ec:71:64:09:0c:f3:d7:7c:6c:13:27:01:35:3e:62:95:ac:
42:a3:f1:45:46:bf:9e:93:24:8a:be:48:42:fc:a3:f6:ef:c1:
cd:60:cb:cf:b0:e9:ed:13:0f:b6:3a:39:60:4b:01:fe:17:5e:
28:08:8f:aa:66:d7:f0:db:69:f7:f5:1e:f2:14:6b:fd:40:5b:
25:4e:85:9a:ad:4d:2e:25:5c:68:d1:48:c6:f1:e7:7b:82:fb:
c8:20:2c:97:58:f8:45:ff:b2:f1:77:bb:2e:d5:fb:cb:95:23:
a0:0c:f9:66:61:5a:5e:47:d8:73:c6:d3:a5:7f:80:f9:51:be:
51:0b:8d:2f:cc:fa:5f:86:6b:d9:c4:01:b1:50:6b:8c:dd:6b:
e9:18:f6:f1:09:b3:77:5c:59:21:89:a0:69:0c:bb:03:9f:89:
9f:48:00:a8:ed:d8:8a:61:0f:c5:bb:61:f5:e0:b5:86:36:79:
14:c8:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:56:00 2025 by rpki-client