Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YTyFePVfUAVOVw6vazLjbuKKOpw.roa
File: YTyFePVfUAVOVw6vazLjbuKKOpw.roa (raw, json)
Hash identifier: OVOzAJTDt9ytb7ilhIHrdEc8LaMFWFXMug311ZeMAeM=
Subject key identifier: 61:3C:85:78:F5:5F:50:05:4E:57:0E:AF:6B:32:E3:6E:E2:8A:3A:9C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0270035D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YTyFePVfUAVOVw6vazLjbuKKOpw.roa
Signing time: Mon 21 Mar 2022 08:42:57 +0000
ROA not before: Mon 21 Mar 2022 08:42:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
194.33.32.0/24 maxlen: 24
45.152.197.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.147.30.0/24 maxlen: 24
2a0e:e980::/29 maxlen: 29
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:a02::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40895325 (0x270035d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 21 08:42:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=613c8578f55f50054e570eaf6b32e36ee28a3a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:36:53:ff:77:a9:7c:b4:0f:d2:24:d8:f0:
a7:b8:be:40:d5:11:7c:22:c8:bc:b7:0b:33:13:9c:
52:66:6e:e0:f1:b7:ef:0c:26:f8:c8:7f:b3:b9:2c:
5b:80:ee:a0:a9:72:50:8a:8d:aa:f4:20:2d:27:3e:
da:3a:3e:7b:a0:c3:e5:0f:c0:9d:eb:0b:a3:90:6d:
ed:75:b5:df:67:1f:16:e9:1c:42:05:ba:bb:f6:63:
2c:a4:84:cb:3a:ab:9b:6e:37:87:49:8d:0e:94:0f:
17:57:70:1d:99:c7:55:16:4d:95:07:1e:ba:32:69:
05:c5:c0:cc:14:d3:b9:c2:0a:92:af:f9:dc:b5:7e:
f9:4e:53:7d:2a:cc:fb:ef:98:e5:b9:c6:32:40:c9:
54:c8:62:07:b1:a8:c2:d9:b8:12:5e:e9:ea:70:80:
5e:8b:2c:d6:55:d8:7d:ff:89:d4:6b:8d:9f:8a:59:
7b:cb:6d:8e:26:56:db:06:4a:b2:97:78:23:88:20:
cf:cb:04:ce:21:39:d4:da:8d:cb:b1:e5:0e:84:63:
11:88:ac:29:0b:c0:07:33:db:ac:de:2a:fd:06:67:
5b:75:40:6a:ae:71:d5:e7:63:7b:62:56:6a:2f:1c:
3a:d4:24:da:0f:26:26:9d:a6:82:34:01:32:38:2b:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3C:85:78:F5:5F:50:05:4E:57:0E:AF:6B:32:E3:6E:E2:8A:3A:9C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YTyFePVfUAVOVw6vazLjbuKKOpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.86.0/24
45.147.30.0/23
45.152.197.0/24
45.153.21.0/24
45.153.23.0/24
45.153.219.0/24
45.154.230.0/24
45.157.37.0-45.157.38.255
45.158.197.0/24
113.30.152.0/22
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.111.4.0/23
193.111.18.0/23
194.33.32.0/24
IPv6:
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
08:f1:ea:af:d6:bc:53:14:88:53:f4:09:a7:fd:3c:c5:0a:98:
3c:ec:2b:b2:22:97:55:9d:41:42:97:26:a5:53:e3:8c:3a:08:
82:d7:4a:14:a2:78:32:36:49:39:68:7b:1c:4f:d2:09:c0:ed:
d2:99:bc:63:fc:36:b9:17:29:2e:6c:45:43:7a:06:83:41:e3:
b8:6d:e3:6e:ad:8b:53:79:df:a4:95:af:ab:cd:76:4d:77:67:
27:81:98:ad:7b:e4:6c:a0:4d:07:fa:5f:ea:9d:0b:06:3e:85:
08:ad:87:49:82:36:ca:a8:7a:d7:cf:f3:ad:7a:34:be:8e:3b:
73:f8:79:30:47:9a:e1:ee:38:dc:9f:d6:d5:9d:e1:2e:c4:52:
b3:72:59:06:1d:5c:66:05:ee:e7:d9:96:b5:86:47:f6:20:fe:
19:eb:ac:2b:53:fd:ca:db:36:85:82:1c:86:90:bd:ae:d5:12:
db:f0:b4:8b:36:45:e7:4c:00:a3:4b:de:d8:4e:4f:36:80:31:
cc:d8:71:81:31:a4:bd:5f:33:25:9f:1c:d6:ec:6f:f4:1b:ae:
e8:f8:dd:be:b1:2a:31:9e:85:d4:dd:de:d9:c4:93:ad:1b:34:
4d:7f:e2:53:84:8d:f4:33:a8:85:d8:ce:84:df:49:eb:fa:ef:
75:96:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:58 2025 by rpki-client