Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Xk7da6VUHoh6D7wuhsgPOp45MhA.roa
File: Xk7da6VUHoh6D7wuhsgPOp45MhA.roa (raw, json)
Hash identifier: rz5s4+jxYpa/xhAlUcbV1Wuc+6NCdUSh5BVUcEMxFZM=
Subject key identifier: 5E:4E:DD:6B:A5:54:1E:88:7A:0F:BC:2E:86:C8:0F:3A:9E:39:32:10
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182FD85D4E3C12448AB4B0E3017C98B20ED
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Xk7da6VUHoh6D7wuhsgPOp45MhA.roa
Signing time: Fri 02 Sep 2022 09:26:22 +0000
ROA not before: Fri 02 Sep 2022 09:26:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:e041::/32 maxlen: 32
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0f:e040:2::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:85:d4:e3:c1:24:48:ab:4b:0e:30:17:c9:8b:20:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 2 09:26:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e4edd6ba5541e887a0fbc2e86c80f3a9e393210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4a:7e:a6:1e:09:95:96:9c:fd:14:d3:d7:8a:
a2:61:e6:69:9b:a3:3d:1f:a0:5b:61:4d:a9:e5:26:
2d:fc:35:d4:9d:03:cd:e7:dd:c4:8f:2c:90:1f:e1:
bc:da:e5:d1:a1:dd:a2:2d:e1:eb:23:3e:96:ac:ad:
e7:01:54:fa:6b:8d:15:0b:ce:dd:9c:9c:0b:6a:5f:
85:a8:69:53:f0:59:ce:a1:da:b4:1b:f9:76:57:a2:
64:44:be:06:fb:74:84:f6:cd:3d:47:5e:cb:5b:5b:
1d:bc:e6:6d:2f:83:6d:38:39:e2:a2:50:36:dd:c7:
83:c2:42:58:aa:0c:2d:3c:6c:29:ac:3e:96:72:11:
ef:39:5f:f0:30:6c:ae:22:3e:9d:bd:f7:64:df:32:
60:45:e6:96:fe:4a:f6:fe:92:33:64:e7:1c:54:14:
3f:26:d9:8c:f0:71:7f:d0:43:bb:f2:3d:1a:61:ad:
b7:9d:12:b1:d0:ac:2d:86:f8:ef:d5:61:a0:c4:b8:
02:52:fc:24:41:4a:ce:62:bc:a3:5e:fe:ea:bd:d4:
aa:b1:c5:db:fb:3e:17:59:ec:1a:c3:f0:93:16:4e:
b2:4d:e7:d1:bf:08:27:83:3d:cf:d6:c9:d4:cc:7d:
4e:72:d4:05:11:04:2f:4a:d7:a6:1a:9c:be:04:e8:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4E:DD:6B:A5:54:1E:88:7A:0F:BC:2E:86:C8:0F:3A:9E:39:32:10
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Xk7da6VUHoh6D7wuhsgPOp45MhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.128.77.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
80.253.248.0/24
91.212.100.0/24
91.212.107.0/24
91.232.255.0/24
91.233.20.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.5.64.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.45.34.0/24
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:3d83::/32
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e040:2::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:9c:cc:5c:fd:84:75:d7:73:a9:98:39:7d:46:21:83:86:62:
29:96:21:b2:2a:b4:01:41:fe:01:c8:ab:39:d5:69:1f:0a:84:
14:a3:f1:c2:b3:eb:39:d7:13:f9:83:a7:0c:35:0b:e9:0a:0e:
60:f9:35:ce:56:2e:cc:8b:67:64:1e:38:3c:31:1b:d5:ce:b5:
18:9f:bb:19:0d:8e:dc:24:0e:61:b3:13:d8:01:0f:05:7a:af:
e4:f2:10:58:20:4b:9d:ba:c3:cc:cd:4c:20:70:d6:ed:84:e6:
d0:9a:e2:06:69:00:ed:6e:bb:0a:fc:ed:07:42:a3:74:93:c8:
0c:b3:e0:de:fe:72:fe:15:45:53:8a:60:41:ea:39:d2:b6:07:
6a:0e:41:88:24:a0:b9:40:12:3c:73:bc:86:48:ae:12:fd:b8:
7e:d9:2c:ba:73:d0:d1:90:c3:63:9d:0e:67:54:c8:b0:48:ff:
0f:4c:22:84:89:9d:fe:cb:a8:e0:0e:f2:07:fc:32:3a:f5:bf:
68:9e:03:97:6d:54:9c:55:9a:e5:55:dd:18:1a:6f:c6:23:18:
b5:34:2a:a9:8d:be:07:11:eb:08:d7:35:ec:7d:92:3a:70:b2:
5f:86:23:a1:3e:9a:28:95:15:02:d3:75:22:29:5e:fe:7c:73:
d6:8b:ed:31
-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgISAYL9hdTjwSRIq0sOMBfJiyDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIwOTAyMDkyNjIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTRlZGQ2YmE1NTQxZTg4N2EwZmJjMmU4NmM4MGYzYTllMzkzMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUp+ph4JlZac/RTT14qiYeZpm6M9
H6BbYU2p5SYt/DXUnQPN593EjyyQH+G82uXRod2iLeHrIz6WrK3nAVT6a40VC87d
nJwLal+FqGlT8FnOodq0G/l2V6JkRL4G+3SE9s09R17LW1sdvOZtL4NtODniolA2
3ceDwkJYqgwtPGwprD6WchHvOV/wMGyuIj6dvfdk3zJgReaW/kr2/pIzZOccVBQ/
JtmM8HF/0EO78j0aYa23nRKx0Kwthvjv1WGgxLgCUvwkQUrOYryjXv7qvdSqscXb
+z4XWewaw/CTFk6yTefRvwgngz3P1snUzH1OctQFEQQvStemGpy+BOh2GwIDAQAB
o4IEGzCCBBcwHQYDVR0OBBYEFF5O3WulVB6Ieg+8LobIDzqeOTIQMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWGs3ZGE2VlVIb2g2RDd3dWhzZ1BPcDQ1TWhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICLwYIKwYBBQUHAQcBAf8EggIeMIICGjCBywQCAAEwgcQD
BAAtDboDBAAtVvYDBAAtW9ADBAAtW9MDBAAtgE0DBAAtiSkwDAMEAC2JVQMEAC2J
VgMEAC2ZFQMEAC2ZFwMEAS2Z2gMEAS2a5gMEAC2dJAMEAC2dJjAMAwQALZ7FAwQA
LZ7GAwQAUP34AwQAW9RkAwQAW9RrAwQAW+j/AwQAW+kUAwQCcR6YAwQAuYjMAwQA
uaQ7AwQAwQVAAwQAwSfRAwQAwSknAwQAwSlzAwQBwSl6AwQBwW8EAwQBwW8SAwQA
wi0iMIIBSAQCAAIwggFAAwUDKgkXwAMHACoKLQAAAQMFACoMeIADBwAqDHiCAAEw
DgMFACoMeIMDBQAqDHiEAwcAKg4VwAAEAwcAKg4agAEjAwcAKg4iQAACAwUDKg4k
QAMFAyoO6YAwEgMHACoO8gAAAQMHACoO8gAAAjAOAwUBKg8KAgMFACoPCgQDBQAq
DxIAAwUDKg8fgAMHACoPIQABcQMFACoPPYMDBQMqD22AAwcAKg99AAABAwcAKg99
AAADAwcAKg99AAAFAwUDKg/aQAMFAyoP2sADBQMqD99AAwcAKg/gQAAAAwcAKg/g
QAACAwUAKg/gQQMFACoP4UMDBQAqD+HAAwUAKg/hwgMFACoP4ccDBwAqD+YAAAED
BwAqD+bAASMDBwAqD+bACZEDBwAqD+bAD+EDBQMqD+oAAwUDKhJKwAMFAyoS1sAw
DQYJKoZIhvcNAQELBQADggEBAGiczFz9hHXXc6mYOX1GIYOGYimWIbIqtAFB/gHI
qznVaR8KhBSj8cKz6znXE/mDpww1C+kKDmD5Nc5WLsyLZ2QeODwxG9XOtRifuxkN
jtwkDmGzE9gBDwV6r+TyEFggS526w8zNTCBw1u2E5tCa4gZpAO1uuwr87QdCo3ST
yAyz4N7+cv4VRVOKYEHqOdK2B2oOQYgkoLlAEjxzvIZIrhL9uH7ZLLpz0NGQw2Od
DmdUyLBI/w9MIoSJnf7LqOAO8gf8Mjr1v2ieA5dtVJxVmuVV3Rgab8YjGLU0KqmN
vgcR6wjXNex9kjpwsl+GI6E+miiVFQLTdSIpXv58c9aL7TE=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:39 2025 by rpki-client