Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UP_Pd53NdLxlGAiIMucqE4EvCaI.roa
File: UP_Pd53NdLxlGAiIMucqE4EvCaI.roa (raw, json)
Hash identifier: DoKQ1sel7ONk015gJ3v9eHfyu2vn98/NZa9DWKsCeJo=
Subject key identifier: 50:FF:CF:77:9D:CD:74:BC:65:18:08:88:32:E7:2A:13:81:2F:09:A2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02DA27D6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UP_Pd53NdLxlGAiIMucqE4EvCaI.roa
Signing time: Wed 20 Apr 2022 10:31:12 +0000
ROA not before: Wed 20 Apr 2022 10:31:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0f:a03::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:e842::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47851478 (0x2da27d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 20 10:31:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50ffcf779dcd74bc6518088832e72a13812f09a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:50:6b:ba:22:92:62:21:c6:a2:93:f1:ae:
3e:75:82:28:94:25:e7:af:cd:5a:a9:49:38:2b:a3:
f9:b7:00:64:39:4f:ab:4c:c5:e0:b1:02:c0:d7:df:
3a:92:94:52:90:fe:ef:0f:dd:cb:52:02:9a:1f:58:
ad:df:2a:2c:a3:36:13:b7:a2:dd:e5:aa:9f:ea:0e:
da:c7:dc:be:67:05:82:34:ef:64:98:0f:da:de:e1:
35:8c:41:31:63:c9:95:0a:6e:13:28:45:71:f3:1e:
2f:24:5b:c2:23:f6:7a:c6:9a:fe:a3:3e:0f:2e:bb:
d9:7d:8b:56:84:0a:66:54:13:ef:f4:40:d6:01:97:
e4:61:69:29:e7:35:c0:69:05:c7:bc:38:b1:37:29:
30:b0:22:83:5b:f9:8e:07:cc:0e:5a:3f:4e:f6:ca:
fe:12:23:a6:d9:7d:a4:47:4a:7d:29:8f:40:6b:f4:
ae:f0:ac:c2:34:77:1a:2e:e3:8d:53:1a:15:e7:18:
61:0a:b9:9a:4f:42:b7:6d:b9:f9:f1:9f:de:40:e1:
2d:da:48:43:47:09:44:86:59:d9:d7:64:bd:0a:23:
ba:67:21:3d:24:a5:7b:61:66:9c:45:47:1d:d7:7e:
ea:45:ee:e9:21:6e:ef:a1:b0:70:9c:a8:37:6a:91:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FF:CF:77:9D:CD:74:BC:65:18:08:88:32:E7:2A:13:81:2F:09:A2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UP_Pd53NdLxlGAiIMucqE4EvCaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.86.0/24
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.37.0-45.157.38.255
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0c:7882:1::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e842::/32
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
b4:5c:b9:57:df:ba:04:2b:cc:0d:ed:b4:ec:45:b3:de:c7:6e:
d7:e0:dd:8e:33:73:62:79:23:2e:f8:ee:0e:0e:74:27:25:da:
0a:2a:05:bb:2e:ed:06:a4:02:f3:de:55:ca:43:18:1a:dc:46:
44:ec:a1:e3:69:f9:5e:eb:61:a3:69:40:b7:c4:cf:a9:12:8e:
8b:04:1f:7d:d8:2e:28:19:fa:0c:46:c7:db:6b:f5:10:32:df:
fe:75:33:ec:1d:a8:12:db:65:c7:a7:40:ea:55:33:62:e9:13:
d5:13:50:63:6a:27:82:ab:cd:12:7e:78:17:a1:8f:63:fe:d1:
d9:95:5a:d1:f9:ce:84:e3:67:65:0b:2b:d0:b2:b6:91:0a:44:
96:0c:27:48:bf:79:ba:85:03:63:87:11:ea:4b:ca:34:ec:39:
ff:0c:15:f3:7d:a6:91:11:80:b3:e9:39:05:d1:09:6b:3a:a9:
59:26:73:1f:6d:65:2b:60:6b:81:33:00:de:04:d7:01:34:96:
10:53:9c:90:e5:4c:4e:20:73:27:75:e9:00:17:4a:4a:dd:7a:
6c:9a:74:bf:39:ab:1d:19:bb:b4:cd:cf:71:68:12:92:0a:fe:
cb:85:4e:ae:a7:d7:0c:07:ea:47:b5:03:b5:54:06:38:bd:16:
64:75:7a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:20 2025 by rpki-client