Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PIpT5r4ijh_hlzGYsDj2OcUZw8c.roa
File: PIpT5r4ijh_hlzGYsDj2OcUZw8c.roa (raw, json)
Hash identifier: +IYZgkiAKqs8LjHn0Fu9NNwvLpoeA6SuljM42Nhtzjk=
Subject key identifier: 3C:8A:53:E6:BE:22:8E:1F:E1:97:31:98:B0:38:F6:39:C5:19:C3:C7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 024B111A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PIpT5r4ijh_hlzGYsDj2OcUZw8c.roa
Signing time: Fri 11 Mar 2022 13:36:26 +0000
ROA not before: Fri 11 Mar 2022 13:36:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
194.33.32.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
2a0e:e980::/29 maxlen: 29
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:a02::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38474010 (0x24b111a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 11 13:36:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c8a53e6be228e1fe1973198b038f639c519c3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:4d:df:8b:dd:ae:5b:81:da:58:f1:48:12:
69:50:af:49:f0:11:32:f9:94:18:66:29:2b:c9:1a:
88:b9:02:93:c9:b2:57:cb:73:4e:51:2e:55:42:f9:
7e:3a:ae:02:79:29:31:61:a7:37:ab:9e:43:cb:ab:
d6:29:62:ab:c5:6f:84:52:d7:75:d2:1b:cf:e7:04:
a9:9f:1c:11:4c:94:c6:4b:85:13:85:f2:bd:54:99:
fc:fb:7e:d4:6f:c0:85:44:3a:1d:f7:5e:97:e5:34:
b9:3d:2f:15:a5:3a:96:37:2e:06:1e:c5:8c:6c:51:
8e:34:dc:46:bf:70:4f:a6:7c:f1:f7:86:53:c4:4a:
e4:59:54:c0:a7:df:fc:3c:f5:ed:fc:7a:03:0a:01:
2c:3f:55:53:05:a7:93:74:7c:cc:52:b9:e6:95:fc:
87:27:e4:b5:98:e2:62:bd:74:9c:fe:48:e3:d5:c3:
3f:5b:c5:dd:74:d5:b6:6e:14:6d:ce:0a:ff:9f:6d:
a5:d5:da:b3:2f:34:d4:56:b8:4a:fb:1b:28:3e:84:
3b:71:0a:a3:b1:8a:f3:c7:ff:6e:ed:44:01:91:32:
ab:78:33:14:80:a8:68:b7:8c:02:54:f6:89:5d:9f:
5e:dd:18:97:cc:f4:07:17:29:4b:24:20:5e:7d:78:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:53:E6:BE:22:8E:1F:E1:97:31:98:B0:38:F6:39:C5:19:C3:C7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PIpT5r4ijh_hlzGYsDj2OcUZw8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.128.77.0/24
45.137.41.0/24
45.137.86.0/24
45.152.197.0/24
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/24
45.157.38.0/24
45.158.197.0/24
193.39.209.0/24
193.41.39.0/24
193.111.4.0/23
193.111.18.0/23
194.33.32.0/24
IPv6:
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
28:10:e8:53:b6:ce:d4:b4:df:1b:66:78:0f:43:ca:db:e0:04:
bc:a6:2b:eb:55:f1:f2:20:d7:bf:30:8e:6a:b9:60:5d:3e:89:
81:ca:49:e2:6a:3d:65:59:8e:c9:9d:51:b6:7b:d8:6b:65:12:
c7:a7:18:a7:1c:e2:c1:d4:21:10:e8:2c:6e:6c:db:d5:18:58:
04:ca:53:2e:47:88:b4:d9:81:22:2f:cd:f0:b4:d4:06:f3:d0:
79:3c:75:c7:32:be:ed:91:a6:f4:13:d8:12:b4:d6:6b:3a:84:
a6:a4:dc:34:c0:02:ef:f9:c2:8b:67:5c:84:79:ee:f9:f4:1e:
8f:aa:b6:f2:58:ed:7a:df:32:e1:f9:11:9e:02:10:f3:d9:af:
f0:53:a9:e4:ac:13:e3:95:74:96:68:5d:19:c6:10:d3:db:e8:
0f:81:4a:dc:4f:4f:19:6d:08:86:f1:d1:53:fc:77:5c:15:e6:
00:81:c0:b0:51:a6:83:0f:94:5e:49:67:69:9a:21:ff:c2:6e:
89:63:b4:7a:6d:8f:fd:2c:82:44:97:ec:60:83:f9:39:82:9a:
d9:33:43:42:b1:37:76:27:07:fb:fc:39:49:2f:b2:15:7c:9a:
be:98:5f:59:35:e8:8e:44:a3:46:a0:42:39:75:d8:b4:37:0a:
8c:59:dd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:44 2025 by rpki-client