Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fTaOy43IgjOt5HlclelowCDPTCQ.roa
File: fTaOy43IgjOt5HlclelowCDPTCQ.roa (raw, json)
Hash identifier: eq4gShDuncPbzm6qLw9RuApvBlhVIbylM1+Ihhyp4aM=
Subject key identifier: 7D:36:8E:CB:8D:C8:82:33:AD:E4:79:5C:95:E9:68:C0:20:CF:4C:24
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018367064862CDE04CF1B811F1F13489C738
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fTaOy43IgjOt5HlclelowCDPTCQ.roa
Signing time: Thu 22 Sep 2022 21:06:48 +0000
ROA not before: Thu 22 Sep 2022 21:06:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
2a0f:1480::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0f:ea00::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a0e:9b00::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:1580::/29 maxlen: 29
2a0f:3940::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0f:e9c0::/29 maxlen: 29
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0f:8100::/29 maxlen: 29
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0c:7884::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e041::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0b:b740::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0f:e040:2::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0f:1380::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:8300::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a12:ecc0::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:7f00::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:67:06:48:62:cd:e0:4c:f1:b8:11:f1:f1:34:89:c7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 22 21:06:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d368ecb8dc88233ade4795c95e968c020cf4c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:7b:46:cc:93:9e:b2:c0:08:ba:1c:1a:30:
46:b2:fd:ac:a6:95:0b:d9:b4:b9:6d:49:2e:6d:c3:
5b:5a:da:6b:b2:0a:79:96:21:6b:41:12:8a:46:6f:
de:83:39:35:10:da:86:e5:c0:ab:02:39:1d:ba:f8:
41:54:ae:aa:cb:e1:55:f9:76:47:b3:c8:8d:1a:9e:
1c:4f:8e:3f:1e:83:16:cd:f0:e3:fe:16:63:d7:97:
10:96:f8:a1:32:24:5e:07:2b:7d:4e:bf:17:dd:1e:
7e:80:99:36:08:48:ac:66:1d:e8:f6:b9:e3:e0:29:
ac:7a:01:7b:7a:1b:2e:77:ee:20:a4:3e:d9:2c:74:
23:02:89:8d:63:cb:b8:a0:8c:2e:5b:a6:06:62:fc:
3b:ee:41:30:72:9b:a6:92:8b:ff:1f:b5:b3:e4:e8:
fa:4e:5d:b9:90:ca:65:01:b1:d0:68:ac:03:8d:4f:
50:17:6b:b3:d0:43:64:b2:9d:0c:2f:6d:ea:b0:70:
a2:8e:b3:eb:11:61:c2:09:3f:d0:65:4b:db:c8:b5:
49:27:dd:b6:f9:ca:bd:35:e0:6e:83:f9:34:66:2d:
8d:0a:ab:b7:9c:e0:5f:4f:ac:9f:24:15:9a:7c:6e:
b1:7d:d0:07:e4:82:de:52:6f:9a:f2:fc:59:25:3a:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:8E:CB:8D:C8:82:33:AD:E4:79:5C:95:E9:68:C0:20:CF:4C:24
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fTaOy43IgjOt5HlclelowCDPTCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.128.77.0/24
45.137.41.0/24
45.137.82.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
91.232.255.0/24
91.233.20.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.5.64.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.45.34.0/24
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0b:b740::/29
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:9b00::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1380::/29
2a0f:1480::/29
2a0f:1580::/29
2a0f:1f80::/29
2a0f:2700::/29
2a0f:3940::/29
2a0f:3d83::/32
2a0f:3f80::/29
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:7f00::/29
2a0f:8100::/29
2a0f:8300::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e040:2::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e640::/29
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e740::/29
2a0f:e9c0::/29
2a0f:ea00::/29
2a0f:ee00::/29
2a12:4ac0::/29
2a12:d6c0::/29
2a12:ecc0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:8f:4e:6e:3b:7e:c9:be:25:a2:71:a5:d2:fa:47:d7:45:4d:
d6:48:20:f7:07:15:7d:be:23:f3:9a:35:8a:42:d2:33:e5:5b:
5d:6d:1e:b2:51:0c:64:75:8b:ed:3c:e1:1e:67:be:5e:92:06:
e2:88:0f:ae:e7:0c:00:24:65:c7:29:af:76:aa:8c:7d:7d:d8:
e2:87:5d:ef:de:2c:73:36:32:b3:cf:29:46:7f:fd:ab:9a:9e:
dc:2f:83:be:d5:4b:fc:94:8b:63:1e:2f:0d:27:33:f7:bd:9b:
b9:e4:f1:df:fc:8f:9e:82:49:65:7f:1f:89:bd:05:59:86:0c:
3d:04:41:e4:24:5d:e0:3e:4f:7f:87:92:d0:e9:ce:8a:0f:94:
a6:fb:a0:47:98:9d:bf:67:2f:bd:85:0e:16:eb:ec:72:5a:e0:
0d:81:33:f4:79:c4:69:1a:a4:78:72:a1:95:6d:77:b1:79:58:
e2:dc:cc:00:fd:08:06:84:25:78:75:b9:66:2d:3d:3d:ec:de:
40:89:61:63:9e:e4:b6:1e:5b:c9:a6:b4:b4:db:f4:49:63:8d:
ee:cd:f8:b0:ca:c0:f4:92:24:79:44:a6:de:97:74:83:86:70:
dd:44:eb:f3:fd:3c:8d:1d:46:9e:2f:94:33:d1:fd:99:6d:e0:
10:a1:8b:f9
-----BEGIN CERTIFICATE-----
MIIHfjCCBmagAwIBAgISAYNnBkhizeBM8bgR8fE0icc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIwOTIyMjEwNjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDM2OGVjYjhkYzg4MjMzYWRlNDc5NWM5NWU5NjhjMDIwY2Y0YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDh7RsyTnrLACLocGjBGsv2sppUL
2bS5bUkubcNbWtprsgp5liFrQRKKRm/egzk1ENqG5cCrAjkduvhBVK6qy+FV+XZH
s8iNGp4cT44/HoMWzfDj/hZj15cQlvihMiReByt9Tr8X3R5+gJk2CEisZh3o9rnj
4CmsegF7ehsud+4gpD7ZLHQjAomNY8u4oIwuW6YGYvw77kEwcpumkov/H7Wz5Oj6
Tl25kMplAbHQaKwDjU9QF2uz0ENksp0ML23qsHCijrPrEWHCCT/QZUvbyLVJJ922
+cq9NeBug/k0Zi2NCqu3nOBfT6yfJBWafG6xfdAH5ILeUm+a8vxZJTqV8QIDAQAB
o4IEijCCBIYwHQYDVR0OBBYEFH02jsuNyIIzreR5XJXpaMAgz0wkMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZlRhT3k0M0lnak90NUhsY2xlbG93Q0RQVENRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICngYIKwYBBQUHAQcBAf8EggKNMIICiTCBxQQCAAEwgb4D
BAAtDboDBAAtVvYDBAAtW9ADBAAtW9MDBAAtgE0DBAAtiSkDBAAtiVIwDAMEAC2J
VQMEAC2JVgMEAC2ZFQMEAC2ZFwMEAS2Z2gMEAS2a5gMEAC2dJAMEAC2dJjAMAwQA
LZ7FAwQALZ7GAwQAW9RkAwQAW9RrAwQAW+j/AwQAW+kUAwQAZ+UfAwQCcR6YAwQA
uYjMAwQAuaQ7AwQAwQVAAwQAwSlzAwQBwSl6AwQBwW8EAwQBwW8SAwQAwi0iMIIB
vQQCAAIwggG1AwUDKgkXwAMHACoKLQAAAQMFAyoLt0ADBQAqDHiAAwcAKgx4ggAB
MA4DBQAqDHiDAwUAKgx4hAMHACoOFcAABAMHACoOGoABIwMHACoOIkAAAgMFAyoO
JEADBQMqDpsAAwUDKg7pgDASAwcAKg7yAAABAwcAKg7yAAACMA4DBQEqDwoCAwUA
Kg8KBAMFACoPEgADBQMqDxOAAwUDKg8UgAMFAyoPFYADBQMqDx+AAwUDKg8nAAMF
AyoPOUADBQAqDz2DAwUDKg8/gAMFAyoPbYADBwAqD30AAAEDBwAqD30AAAMDBwAq
D30AAAUDBQMqD38AAwUDKg+BAAMFAyoPgwADBQMqD9pAAwUDKg/awAMFAyoP20AD
BQMqD91AAwUDKg/fQAMHACoP4EAAAAMHACoP4EAAAgMFACoP4EEDBQAqD+FDAwUA
Kg/hwAMFACoP4cIDBQAqD+HHAwcAKg/mAAABAwUDKg/mQAMHACoP5sABIwMHACoP
5sAJkQMHACoP5sAP4QMFAyoP50ADBQMqD+nAAwUDKg/qAAMFAyoP7gADBQMqEkrA
AwUDKhLWwAMFACoS7MAwDQYJKoZIhvcNAQELBQADggEBAD+PTm47fsm+JaJxpdL6
R9dFTdZIIPcHFX2+I/OaNYpC0jPlW11tHrJRDGR1i+084R5nvl6SBuKID67nDAAk
Zccpr3aqjH192OKHXe/eLHM2MrPPKUZ//auantwvg77VS/yUi2MeLw0nM/e9m7nk
8d/8j56CSWV/H4m9BVmGDD0EQeQkXeA+T3+HktDpzooPlKb7oEeYnb9nL72FDhbr
7HJa4A2BM/R5xGkapHhyoZVtd7F5WOLczAD9CAaEJXh1uWYtPT3s3kCJYWOe5LYe
W8mmtLTb9Eljje7N+LDKwPSSJHlEpt6XdIOGcN1E6/P9PI0dRp4vlDPR/Zlt4BCh
i/k=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:56:20 2025 by rpki-client