Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nGmUxyqL4A2butUanDp67A4BxXg.roa
File: nGmUxyqL4A2butUanDp67A4BxXg.roa (raw, json)
Hash identifier: blwVUYDL+Y3fIEE+mROyLJ/AZ0SH+AA1CH7q2mYL4mg=
Subject key identifier: 9C:69:94:C7:2A:8B:E0:0D:9B:BA:D5:1A:9C:3A:7A:EC:0E:01:C5:78
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0188BFA7088D9680A30024DE1D0C24F11BAB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nGmUxyqL4A2butUanDp67A4BxXg.roa
Signing time: Thu 15 Jun 2023 15:22:54 +0000
ROA not before: Thu 15 Jun 2023 15:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
45.134.186.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
45.92.246.0/24 maxlen: 24
185.214.72.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
91.233.89.0/24 maxlen: 24
64.226.159.0/24 maxlen: 24
64.226.158.0/24 maxlen: 24
64.226.157.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
103.227.85.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
103.227.86.0/24 maxlen: 24
103.78.191.0/24 maxlen: 24
103.78.190.0/24 maxlen: 24
103.78.189.0/24 maxlen: 24
103.78.188.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
91.233.54.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
64.226.55.0/24 maxlen: 24
64.226.54.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
209.35.158.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.137.62.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
185.155.202.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
193.41.87.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
84.21.188.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
167.94.165.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
45.142.29.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
2a0a:2d00:3::/48 maxlen: 48
2a0f:e540::/32 maxlen: 32
2a0f:1480::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a0f:7d03:1::/48 maxlen: 48
2a13:cc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a0e:f200:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0c:7886:1::/48 maxlen: 48
2a12:ecc2::/32 maxlen: 32
2a0f:e740::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:2700:2::/48 maxlen: 48
2a12:ecc3::/32 maxlen: 32
2a0f:1580::/29 maxlen: 29
2a0f:7f02::/32 maxlen: 32
2a0f:3940::/29 maxlen: 29
2a0f:e6c0::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e7c2::/32 maxlen: 32
2a0f:e9c0::/29 maxlen: 29
2a0e:f200::/48 maxlen: 48
2a0f:1200::/32 maxlen: 32
2a0f:8100::/29 maxlen: 29
2a0c:7882:1::/48 maxlen: 48
2a0f:dd40::/29 maxlen: 29
2a0f:4f80::/48 maxlen: 48
2a0f:e1c2::/32 maxlen: 32
2a0e:15c1::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a06:1180:3::/48 maxlen: 48
2a0f:2700:1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:e1c0::/32 maxlen: 32
2a12:eb40::/29 maxlen: 29
2a0e:15c0:2::/48 maxlen: 48
2a0e:1a80:123::/48 maxlen: 48
2a0f:e1c7::/32 maxlen: 32
2a0f:ea42::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a12:ecc5::/32 maxlen: 32
2a0f:ee00::/32 maxlen: 32
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a12:f5c0::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a12:ecc7::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:3d80:2::/48 maxlen: 48
2a10:67c0::/29 maxlen: 29
2a0f:7d01::/32 maxlen: 32
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a12:ecc6::/32 maxlen: 32
2a0f:e640::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:a7:08:8d:96:80:a3:00:24:de:1d:0c:24:f1:1b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 15 15:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c6994c72a8be00d9bbad51a9c3a7aec0e01c578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:5b:53:3f:0c:fe:53:e7:f2:b6:31:a9:32:
af:f5:10:1e:ee:2e:48:2d:49:ef:a0:02:c7:88:3b:
0a:18:51:8d:db:d4:78:e3:2c:98:d3:dd:2b:3c:e7:
31:4e:fd:00:8f:24:2d:9d:0c:b9:b4:52:ee:9a:29:
6f:16:7f:4f:64:6a:da:5b:22:fa:30:b2:87:59:86:
95:d7:29:dd:7e:ac:43:94:f0:99:56:74:a1:96:cb:
e1:1d:3e:76:a6:ff:32:df:92:88:b3:01:fd:13:b6:
ec:31:ff:61:e8:2b:2d:62:29:f4:27:53:eb:76:5f:
37:ec:19:cc:9a:dd:a6:d5:46:a8:0d:0b:eb:45:de:
33:19:fe:66:12:83:72:b1:bb:b7:12:49:fb:73:e5:
2c:db:45:d5:eb:25:ff:f7:01:05:ee:ad:07:66:95:
89:b6:c7:f3:09:2b:f0:41:51:46:10:24:d1:9c:c8:
be:96:02:4d:45:1f:47:c6:af:c3:47:2a:b3:cd:f5:
d9:e0:6b:a2:60:25:88:74:f6:65:e3:a5:e0:8b:5a:
68:6d:f3:19:72:a0:07:aa:df:54:dc:85:98:88:0b:
34:de:67:c4:f2:91:60:ac:f8:64:de:24:15:96:93:
c3:35:ce:d4:b1:e6:42:cd:33:91:c5:5f:71:27:8f:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:69:94:C7:2A:8B:E0:0D:9B:BA:D5:1A:9C:3A:7A:EC:0E:01:C5:78
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nGmUxyqL4A2butUanDp67A4BxXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/23
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.92.246.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.129.125.0/24
45.130.254.0/24
45.131.214.0/24
45.134.186.0/24
45.137.41.0/24
45.137.62.0/24
45.137.82.0/24
45.137.85.0-45.137.86.255
45.142.29.0/24
45.145.59.0/24
45.146.88.0/24
45.146.129.0/24
45.146.181.0/24
45.147.31.0/24
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.229.0-45.154.231.255
45.157.36.0/23
45.157.39.0/24
45.158.197.0-45.158.198.255
64.226.54.0/23
64.226.156.0/22
80.253.248.0/24
84.21.188.0/24
85.209.131.0/24
91.212.100.0/24
91.212.107.0/24
91.212.120.0/24
91.232.255.0/24
91.233.20.0/24
91.233.54.0/24
91.233.89.0/24
103.59.40.0/22
103.74.76.0/23
103.78.188.0/22
103.227.84.0-103.227.86.255
103.229.31.0/24
113.30.152.0/22
167.94.165.0/24
185.136.204.0/24
185.155.202.0/24
185.164.59.0/24
185.214.72.0/24
193.5.64.0/24
193.39.143.0/24
193.39.208.0/23
193.41.38.0/24
193.41.68.0/24
193.41.86.0/23
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.33.62.0/24
194.41.38.0/24
194.45.34.0/24
209.35.158.0/24
IPv6:
2a06:1180:3::/48
2a0a:2d00:3::/48
2a0c:7882:1::/48
2a0c:7883::/32
2a0c:7886:1::/48
2a0e:15c0:2::/48
2a0e:15c0:4::/48
2a0e:15c1::/32
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:f200::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1480::/29
2a0f:1580::/29
2a0f:1f80::/29
2a0f:2300::/29
2a0f:2700::/29
2a0f:3940::/29
2a0f:3d80:2::/48
2a0f:3f80::/29
2a0f:4f80::/48
2a0f:7d01::/32
2a0f:7d03:1::/48
2a0f:7f02::/32
2a0f:8100::/29
2a0f:8300::/29
2a0f:9600::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/29
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e640::/29
2a0f:e6c0::/29
2a0f:e740::/29
2a0f:e7c2::/32
2a0f:e9c0::/29
2a0f:ea42::/32
2a0f:ee00::/29
2a10:67c0::/29
2a12:eb40::/29
2a12:ecc2::/31
2a12:ecc5::-2a12:ecc7:ffff:ffff:ffff:ffff:ffff:ffff
2a12:f540::/29
2a12:f5c0::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
b6:31:35:3f:11:19:ed:76:97:ff:0f:b7:d0:af:bb:2a:ac:08:
b8:4e:eb:c6:fa:3f:20:42:5b:81:95:73:51:44:9a:a6:b4:72:
60:7e:5f:db:3c:6e:0e:df:33:d0:31:2c:77:43:83:1a:fe:56:
92:9b:d1:c5:bb:f2:8d:ea:ca:a1:18:e1:c0:c3:b0:91:b6:1f:
bc:05:6a:35:6d:5d:db:c2:84:79:ea:8c:7e:b7:0e:c5:a2:17:
b9:38:58:15:15:a8:d2:a7:69:97:32:e1:61:2d:3c:a2:da:b0:
b1:f9:06:a9:08:f5:50:e9:65:60:e0:7d:9f:25:cb:05:d3:ba:
a8:8c:a1:a6:73:11:ee:e1:e3:b3:20:5a:39:5a:d6:b4:37:c9:
86:67:00:61:e4:e3:83:63:7c:27:35:36:28:75:ea:a6:00:dd:
82:d9:1f:d5:5a:b2:59:ca:94:b8:b7:da:d1:b6:2b:3f:51:a3:
7d:4f:8a:3f:a0:30:20:a8:09:04:a0:ad:40:63:c9:6f:e5:f5:
d0:0c:08:de:87:ad:74:49:61:6d:39:2b:f2:9b:37:b4:2d:f0:
b2:76:67:52:a1:75:83:41:0c:46:d0:ce:dc:4d:01:b6:2a:f1:
81:1e:0b:bf:ea:0c:d2:da:91:f6:1f:37:35:60:e2:ca:93:56:
a2:ad:e8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:08 2025 by rpki-client