Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QCjjONnEWR9ansI6xCAPD1-7pvQ.roa
File: QCjjONnEWR9ansI6xCAPD1-7pvQ.roa (raw, json)
Hash identifier: NjGAo8ITWckQMFpE8PoIj1LnMRubGxgPtbaDni2mbMk=
Subject key identifier: 40:28:E3:38:D9:C4:59:1F:5A:9E:C2:3A:C4:20:0F:0F:5F:BB:A6:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01880A3F2153A518C60B814F9B01C059685F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QCjjONnEWR9ansI6xCAPD1-7pvQ.roa
Signing time: Thu 11 May 2023 09:58:09 +0000
ROA not before: Thu 11 May 2023 09:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
45.134.186.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
45.92.246.0/24 maxlen: 24
185.214.72.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
91.233.89.0/24 maxlen: 24
64.226.159.0/24 maxlen: 24
64.226.158.0/24 maxlen: 24
64.226.157.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
103.227.85.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
103.227.86.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
91.233.54.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
64.226.55.0/24 maxlen: 24
64.226.54.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
209.35.158.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.137.62.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
185.155.202.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
193.41.87.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
167.94.165.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
45.142.29.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
2a0a:2d00:3::/48 maxlen: 48
2a0f:e540::/32 maxlen: 32
2a0f:1480::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a0e:f200:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0e:5800::/29 maxlen: 29
2a12:ecc2::/32 maxlen: 32
2a0f:e740::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a12:ecc3::/32 maxlen: 32
2a0f:1580::/29 maxlen: 29
2a0f:3940::/29 maxlen: 29
2a0f:e6c0::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e7c2::/32 maxlen: 32
2a0f:e9c0::/29 maxlen: 29
2a0e:f200::/48 maxlen: 48
2a0f:1200::/32 maxlen: 32
2a0f:8100::/29 maxlen: 29
2a0c:7882:1::/48 maxlen: 48
2a0f:dd40::/29 maxlen: 29
2a0f:4f80::/48 maxlen: 48
2a0f:e1c2::/32 maxlen: 32
2a0e:15c1::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a06:1180:3::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e1c0::/32 maxlen: 32
2a12:eb40::/29 maxlen: 29
2a0e:15c0:2::/48 maxlen: 48
2a0e:1a80:123::/48 maxlen: 48
2a0f:e1c7::/32 maxlen: 32
2a0f:ea42::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a12:ecc5::/32 maxlen: 32
2a0f:ee00::/32 maxlen: 32
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a12:f5c0::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a12:ecc7::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:3d80:2::/48 maxlen: 48
2a06:a5c0::/29 maxlen: 29
2a10:67c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a12:ecc6::/32 maxlen: 32
2a0f:e640::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:3f:21:53:a5:18:c6:0b:81:4f:9b:01:c0:59:68:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 11 09:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4028e338d9c4591f5a9ec23ac4200f0f5fbba6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:86:21:f0:7d:98:96:2b:6d:cb:cc:fd:70:
a7:27:88:0e:00:59:d0:b3:3b:1b:47:8a:a7:bb:8b:
2c:ea:07:34:58:0c:65:ce:7a:66:aa:4a:f6:4f:4c:
da:f6:30:80:75:0e:68:31:30:02:49:06:00:af:9a:
06:4a:83:64:70:49:92:45:fa:3b:92:32:47:bb:3e:
8f:2e:4f:1e:a9:11:f5:d5:99:8b:7f:e3:0c:5e:2b:
0b:04:9a:64:3c:30:74:26:58:39:01:7d:75:b0:0f:
80:dd:0c:93:df:9d:1c:d9:d9:52:e4:a3:80:57:4a:
44:ed:d1:bf:1b:ed:1f:44:a8:b8:21:65:1e:6f:82:
64:d2:0a:44:53:15:de:2a:41:6b:7e:4f:82:fa:04:
87:87:cf:14:76:41:43:25:b4:88:be:09:9f:01:b3:
93:40:97:0a:68:3f:69:c3:97:f0:37:7d:29:fb:37:
45:99:8a:24:a7:ef:bf:ed:de:c5:83:af:42:02:68:
15:c4:49:8d:75:e8:08:67:a6:cd:56:89:67:ac:b3:
f3:52:79:16:b2:61:91:dd:35:c3:da:54:ff:e2:e6:
e5:d6:ce:3d:06:00:9f:75:ad:67:33:5f:31:4a:21:
e7:90:4c:72:ab:21:72:75:f3:f0:93:51:1e:f9:28:
79:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:E3:38:D9:C4:59:1F:5A:9E:C2:3A:C4:20:0F:0F:5F:BB:A6:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QCjjONnEWR9ansI6xCAPD1-7pvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/23
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.92.246.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.129.125.0/24
45.130.254.0/24
45.131.214.0/24
45.134.186.0/24
45.137.41.0/24
45.137.62.0/24
45.137.82.0/24
45.137.85.0-45.137.86.255
45.142.29.0/24
45.145.59.0/24
45.146.88.0/24
45.146.129.0/24
45.146.181.0/24
45.147.31.0/24
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.229.0-45.154.231.255
45.157.36.0/23
45.157.39.0/24
45.158.197.0-45.158.198.255
64.226.54.0/23
64.226.156.0/22
80.253.248.0/24
85.209.131.0/24
91.212.100.0/24
91.212.107.0/24
91.212.120.0/24
91.232.255.0/24
91.233.20.0/24
91.233.54.0/24
91.233.89.0/24
103.59.40.0/22
103.74.76.0/23
103.227.84.0-103.227.86.255
103.229.31.0/24
113.30.152.0/22
167.94.165.0/24
185.136.204.0/24
185.155.202.0/24
185.164.59.0/24
185.214.72.0/24
193.5.64.0/24
193.39.143.0/24
193.39.208.0/23
193.41.38.0/24
193.41.68.0/23
193.41.86.0/23
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.33.62.0/24
194.41.38.0/24
194.45.34.0/24
209.35.158.0/24
IPv6:
2a06:1180:3::/48
2a06:a5c0::/29
2a0a:2d00:3::/48
2a0c:7882:1::/48
2a0c:7883::/32
2a0e:15c0:2::/48
2a0e:15c0:4::/48
2a0e:15c1::/32
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:5800::/29
2a0e:f200::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1480::/29
2a0f:1580::/29
2a0f:1f80::/29
2a0f:2300::/29
2a0f:2700::/29
2a0f:3940::/29
2a0f:3d80:2::/48
2a0f:3f80::/29
2a0f:4f80::/48
2a0f:8100::/29
2a0f:8300::/29
2a0f:9600::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/29
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e640::/29
2a0f:e6c0::/29
2a0f:e740::/29
2a0f:e7c2::/32
2a0f:e9c0::/29
2a0f:ea42::/32
2a0f:ee00::/29
2a10:67c0::/29
2a12:eb40::/29
2a12:ecc2::/31
2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff
2a12:f540::/29
2a12:f5c0::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
bb:9d:ea:ae:82:a6:38:5e:cf:8d:70:b4:c8:e5:05:26:7b:06:
d3:52:1d:80:de:80:58:99:0e:a5:da:5b:87:ee:8d:4e:54:db:
5d:8b:be:5f:f5:8f:9d:ba:e7:89:a5:6a:dc:e1:64:35:f5:ef:
0e:2d:63:5f:23:d2:a3:3c:ef:dd:5d:57:33:a9:3b:da:19:04:
6c:d7:83:fc:f3:d6:5b:97:93:4f:6a:97:3d:5d:f2:70:c3:d9:
3b:c2:c5:9a:3d:c9:78:d8:ae:24:6f:84:90:9a:c5:35:1d:2e:
ce:ae:11:12:5d:e1:db:01:1f:90:c2:ec:f4:a8:bf:3b:6a:12:
db:93:3c:3b:bd:c3:99:76:01:3a:c2:29:14:26:0b:a8:a7:14:
95:e3:ab:d3:af:32:42:ea:fd:0b:35:c2:73:e9:50:46:f5:64:
40:77:d1:16:75:6f:54:32:ca:f3:55:d9:80:ba:d5:4b:ac:b6:
a1:d2:88:e7:f7:f1:64:52:76:9b:8a:42:5a:db:43:49:d1:be:
c8:dc:6a:d6:a8:52:87:5f:1e:ca:e0:d1:d9:ec:bc:79:ee:01:
a1:6c:bb:ec:dc:f3:c7:48:f5:fa:fd:3d:e6:22:3b:0e:8c:1f:
e7:3b:62:d1:68:7c:b7:aa:74:21:22:7e:4b:0b:fb:3b:f6:1e:
db:2a:76:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:38 2025 by rpki-client