Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mbxbSbaF9ObHu2nJec6X_hdiIBk.roa
File: mbxbSbaF9ObHu2nJec6X_hdiIBk.roa (raw, json)
Hash identifier: bo9Q/N8244+WnZku/wLZSLZR8dg/ueTr724irRHB3c8=
Subject key identifier: 99:BC:5B:49:B6:85:F4:E6:C7:BB:69:C9:79:CE:97:FE:17:62:20:19
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0183B2C5AA6470A103A0499FB72E02FB788F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mbxbSbaF9ObHu2nJec6X_hdiIBk.roa
Signing time: Fri 07 Oct 2022 14:07:22 +0000
ROA not before: Fri 07 Oct 2022 14:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
103.227.85.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
2a0f:140::/29 maxlen: 29
2a0f:1480::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0f:ea00::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a0e:9b00::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:1580::/29 maxlen: 29
2a0f:3940::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0f:e9c0::/29 maxlen: 29
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0f:8100::/29 maxlen: 29
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0c:7884::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e041::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0b:b740::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0f:e040:2::/48 maxlen: 48
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0f:1380::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:8300::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a12:ecc1::/32 maxlen: 32
2a12:ecc0::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a10:67c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b2:c5:aa:64:70:a1:03:a0:49:9f:b7:2e:02:fb:78:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 7 14:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99bc5b49b685f4e6c7bb69c979ce97fe17622019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:a5:a1:02:5a:75:b3:ae:df:86:5e:0d:88:
51:27:67:e1:cd:d2:2c:bc:58:e9:a6:9f:a1:f1:a4:
e3:e6:08:86:bf:73:f8:55:dc:2c:16:a2:50:92:e8:
85:41:94:35:94:8d:3b:a6:10:33:da:65:0a:fd:60:
ca:59:63:3f:e6:ef:fa:a5:f2:6f:5b:83:22:02:2b:
1f:97:da:67:4e:85:aa:a3:fd:10:66:17:f6:74:b1:
e8:90:1b:b0:7d:13:c3:7f:09:e3:c3:eb:4a:1a:67:
81:b5:1c:48:74:65:22:eb:cf:46:72:07:ff:e6:ab:
d5:f5:0d:b2:17:cd:a6:be:1b:2e:47:de:ce:d3:b1:
6c:e6:a7:22:fb:73:f7:9d:8a:03:21:b9:cc:d5:97:
97:08:de:8d:a8:3c:72:ac:cd:4d:7a:60:3a:a8:72:
f7:57:2e:d0:b2:66:cc:8e:6e:bd:b3:12:90:96:b3:
e8:bf:28:fa:28:e5:0e:c3:b5:08:70:c6:67:00:87:
c3:e9:df:1c:28:51:7e:86:0d:ea:eb:9f:18:fa:3a:
b2:74:ae:43:81:39:01:6c:6e:03:10:d2:30:67:1f:
e4:cd:5b:e0:e7:b8:d6:ff:7a:36:46:5e:14:ed:fe:
8d:4c:65:20:88:b4:24:bc:42:56:32:06:31:2f:84:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:5B:49:B6:85:F4:E6:C7:BB:69:C9:79:CE:97:FE:17:62:20:19
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mbxbSbaF9ObHu2nJec6X_hdiIBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.128.77.0/24
45.137.41.0/24
45.137.82.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.158.197.0-45.158.198.255
64.226.156.0/24
91.212.100.0/24
91.212.107.0/24
91.232.255.0/24
91.233.20.0/24
103.227.85.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.5.64.0/24
193.39.143.0/24
193.39.208.0/24
193.41.38.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.45.34.0/24
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0b:b740::/29
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:9b00::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:140::/29
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1380::/29
2a0f:1480::/29
2a0f:1580::/29
2a0f:1f80::/29
2a0f:2700::/29
2a0f:3940::/29
2a0f:3d83::/32
2a0f:3f80::/29
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:8100::/29
2a0f:8300::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e040:2::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e640::/29
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e740::/29
2a0f:e9c0::/29
2a0f:ea00::/29
2a0f:ee00::/29
2a10:67c0::/29
2a12:4ac0::/29
2a12:ecc0::/31
Signature Algorithm: sha256WithRSAEncryption
47:72:d7:f4:8f:6f:e8:f3:83:e2:de:c2:fc:f6:a3:d4:54:2a:
f8:0e:38:4a:21:37:ff:82:62:d3:65:9c:78:63:12:a5:9b:e2:
15:b5:33:66:f1:59:e3:48:e0:99:cc:4f:20:74:72:7c:59:27:
7c:d5:01:39:33:00:71:89:a5:9f:c9:bc:e1:85:b4:de:0f:13:
39:0d:71:df:e1:08:97:83:60:cd:da:42:7a:cc:55:1f:76:b1:
35:91:8c:60:be:69:05:0c:bb:68:88:0e:be:b8:b5:11:36:50:
c4:4e:97:97:b3:c6:48:97:1f:63:2e:df:2f:ae:49:ee:53:08:
9c:83:b7:fd:75:ac:c3:be:0e:8b:02:1a:4c:7d:b9:98:11:ee:
74:3f:db:f2:c9:84:91:22:8a:96:03:a6:b3:20:62:fe:e9:39:
4d:c4:a3:96:45:b9:78:62:29:71:24:25:a4:8a:20:d7:d7:5a:
98:cc:9a:50:b8:b6:20:7f:27:d3:24:54:0f:38:f9:57:a8:91:
ab:98:29:d8:34:f8:b6:77:0d:be:88:6f:da:11:17:74:e3:22:
3a:41:19:18:e0:ca:b9:50:8d:50:ec:22:0a:50:a2:2c:36:72:
f7:c2:64:be:2e:7a:e1:e4:04:f4:b6:33:b7:49:8e:2b:67:7a:
66:f8:81:60
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgISAYOyxapkcKEDoEmfty4C+3iPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjIxMDA3MTQwNzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWJjNWI0OWI2ODVmNGU2YzdiYjY5Yzk3OWNlOTdmZTE3NjIyMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlKloQJadbOu34ZeDYhRJ2fhzdIs
vFjppp+h8aTj5giGv3P4VdwsFqJQkuiFQZQ1lI07phAz2mUK/WDKWWM/5u/6pfJv
W4MiAisfl9pnToWqo/0QZhf2dLHokBuwfRPDfwnjw+tKGmeBtRxIdGUi689Gcgf/
5qvV9Q2yF82mvhsuR97O07Fs5qci+3P3nYoDIbnM1ZeXCN6NqDxyrM1NemA6qHL3
Vy7QsmbMjm69sxKQlrPovyj6KOUOw7UIcMZnAIfD6d8cKFF+hg3q658Y+jqydK5D
gTkBbG4DENIwZx/kzVvg57jW/3o2Rl4U7f6NTGUgiLQkvEJWMgYxL4QKNQIDAQAB
o4IEojCCBJ4wHQYDVR0OBBYEFJm8W0m2hfTmx7tpyXnOl/4XYiAZMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbWJ4YlNiYUY5T2JIdTJuSmVjNlhfaGRpSUJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICtgYIKwYBBQUHAQcBAf8EggKlMIICoTCB3QQCAAEwgdYD
BAAtDboDBAAtVvYDBAAtW9ADBAAtW9MDBAAtgE0DBAAtiSkDBAAtiVIwDAMEAC2J
VQMEAC2JVgMEAC2ZFQMEAC2ZFwMEAS2Z2gMEAS2a5gMEAC2dJDAMAwQALZ7FAwQA
LZ7GAwQAQOKcAwQAW9RkAwQAW9RrAwQAW+j/AwQAW+kUAwQAZ+NVAwQAZ+UfAwQC
cR6YAwQAuYjMAwQAuaQ7AwQAwQVAAwQAwSePAwQAwSfQAwQAwSkmAwQAwSlzAwQB
wSl6AwQBwW8EAwQBwW8SAwQAwi0iMIIBvQQCAAIwggG1AwUDKgkXwAMHACoKLQAA
AQMFAyoLt0ADBQAqDHiAAwcAKgx4ggABMA4DBQAqDHiDAwUAKgx4hAMHACoOFcAA
BAMHACoOGoABIwMHACoOIkAAAgMFAyoOJEADBQMqDpsAAwUDKg7pgDASAwcAKg7y
AAABAwcAKg7yAAACAwUDKg8BQDAOAwUBKg8KAgMFACoPCgQDBQAqDxIAAwUDKg8T
gAMFAyoPFIADBQMqDxWAAwUDKg8fgAMFAyoPJwADBQMqDzlAAwUAKg89gwMFAyoP
P4ADBQMqD22AAwcAKg99AAABAwcAKg99AAADAwcAKg99AAAFAwUDKg+BAAMFAyoP
gwADBQMqD9pAAwUDKg/awAMFAyoP20ADBQMqD91AAwUDKg/fQAMHACoP4EAAAAMH
ACoP4EAAAgMFACoP4EEDBQAqD+FDAwUAKg/hwAMFACoP4cIDBQAqD+HHAwcAKg/m
AAABAwUDKg/mQAMHACoP5sABIwMHACoP5sAJkQMHACoP5sAP4QMFAyoP50ADBQMq
D+nAAwUDKg/qAAMFAyoP7gADBQMqEGfAAwUDKhJKwAMFASoS7MAwDQYJKoZIhvcN
AQELBQADggEBAEdy1/SPb+jzg+Lewvz2o9RUKvgOOEohN/+CYtNlnHhjEqWb4hW1
M2bxWeNI4JnMTyB0cnxZJ3zVATkzAHGJpZ/JvOGFtN4PEzkNcd/hCJeDYM3aQnrM
VR92sTWRjGC+aQUMu2iIDr64tRE2UMROl5ezxkiXH2Mu3y+uSe5TCJyDt/11rMO+
DosCGkx9uZgR7nQ/2/LJhJEiipYDprMgYv7pOU3Eo5ZFuXhiKXEkJaSKINfXWpjM
mlC4tiB/J9MkVA84+VeokauYKdg0+LZ3Db6Ib9oRF3TjIjpBGRjgyrlQjVDsIgpQ
oiw2cvfCZL4ueuHkBPS2M7dJjitnemb4gWA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:57 2025 by rpki-client