Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jjtif82EOrE_VrDSsQnb0NdlPUg.roa
File: jjtif82EOrE_VrDSsQnb0NdlPUg.roa (raw, json)
Hash identifier: VGShIgsJDI1Rlj+jXirJeCxhy+tqYnFirKttyby/YLA=
Subject key identifier: 8E:3B:62:7F:CD:84:3A:B1:3F:56:B0:D2:B1:09:DB:D0:D7:65:3D:48
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018244E21450C07FF0EE0908F397A27E4265
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jjtif82EOrE_VrDSsQnb0NdlPUg.roa
Signing time: Thu 28 Jul 2022 12:57:23 +0000
ROA not before: Thu 28 Jul 2022 12:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:e2:14:50:c0:7f:f0:ee:09:08:f3:97:a2:7e:42:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 28 12:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e3b627fcd843ab13f56b0d2b109dbd0d7653d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:7f:a8:00:3b:65:61:aa:c2:36:b3:fb:c1:
bb:ca:0e:f6:0f:43:55:15:f4:f9:b2:8e:b2:4c:75:
8f:69:56:43:21:4a:a1:32:28:4c:51:38:af:2b:e6:
08:aa:8d:a5:3d:36:e5:5b:86:99:12:95:46:f3:bb:
08:6e:8a:7c:55:33:2c:72:ca:6d:5b:d5:d8:cc:26:
b1:9c:b8:6f:de:83:42:11:ee:27:e3:ec:7f:61:ce:
4a:e2:75:52:ad:77:79:dd:8c:ad:8e:df:c6:c2:85:
ab:c0:e8:8a:6a:a4:ae:35:14:39:87:b3:0b:21:93:
e0:e8:24:b5:de:84:8c:d6:ae:ae:b2:35:19:6d:1e:
42:d0:cc:e7:8e:6f:bf:11:c8:cb:0e:a5:f9:2d:2a:
0c:e7:d3:c2:e6:09:53:dc:f1:98:8a:fd:06:d5:52:
59:b5:9e:02:90:2f:20:e4:7a:6b:c5:0e:e1:2f:fb:
42:cf:79:99:12:b7:f9:9b:4f:33:02:32:8e:65:3e:
1a:5e:0f:dd:c4:d2:cd:fd:a0:49:b3:8d:50:64:bc:
e6:bb:12:b1:30:6b:a2:58:a4:c7:2f:94:7b:a3:47:
21:49:4b:b2:d6:be:f0:38:26:10:b9:c8:40:ed:a3:
91:72:cf:9e:dc:0d:d4:d5:f2:33:64:c1:51:e1:7d:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3B:62:7F:CD:84:3A:B1:3F:56:B0:D2:B1:09:DB:D0:D7:65:3D:48
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jjtif82EOrE_VrDSsQnb0NdlPUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:c6:ab:3c:12:2f:45:5a:b6:5e:ec:0b:19:1f:5a:a6:61:7a:
6e:08:82:a4:92:7d:f6:23:2e:de:83:09:6e:0f:bb:3c:1c:cb:
74:88:9c:22:59:b5:be:5a:4f:84:f8:58:18:3a:95:ec:38:29:
5e:47:ca:1e:4a:e6:2c:c3:c4:0d:64:d5:3e:19:80:97:19:44:
37:ed:a1:5b:9b:24:03:44:e8:16:99:2c:7b:0a:70:6d:c0:d4:
97:f0:a0:82:22:c2:dd:53:8c:1a:f2:7f:6c:57:d0:14:9f:7e:
02:9a:37:65:5a:e1:d4:ae:00:7f:2a:07:2c:0d:9c:db:aa:f6:
ff:ce:3f:e9:60:b2:2f:e2:cf:80:fb:8b:6f:f0:f0:05:fd:3a:
98:b3:bd:e5:0b:be:ca:ab:29:4e:f5:75:60:85:fa:22:64:18:
0c:cc:10:35:32:80:2a:53:e2:ff:22:51:ce:c8:ea:3e:a8:28:
6c:11:ad:f9:ef:53:3c:f6:0d:7d:b6:04:e9:ac:d6:f3:c9:09:
31:5b:73:82:24:a5:3b:70:fb:73:a6:b9:9f:d0:98:23:ed:12:
5d:4b:66:11:6e:80:23:dc:1b:46:4f:b7:47:43:af:f2:68:93:
8a:08:ea:44:a7:96:75:83:a6:bc:b7:5e:02:c7:8d:15:30:a0:
60:00:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:31:24 2025 by rpki-client