Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oLpy1voPnUZTOgdevtpo5BcYYTc.roa
File: oLpy1voPnUZTOgdevtpo5BcYYTc.roa (raw, json)
Hash identifier: xcKcX40h/apllkEizDDraOczfF2fpmo95fr5PPngFHU=
Subject key identifier: A0:BA:72:D6:FA:0F:9D:46:53:3A:07:5E:BE:DA:68:E4:17:18:61:37
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018B7F7463984C7CDF7334BB62DE7F9EEF61
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oLpy1voPnUZTOgdevtpo5BcYYTc.roa
Signing time: Mon 30 Oct 2023 07:20:15 +0000
ROA not before: Mon 30 Oct 2023 07:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
193.39.208.0/24 maxlen: 24
194.33.62.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.154.229.0/24 maxlen: 24
45.134.186.0/24 maxlen: 24
103.59.40.0/24 maxlen: 24
103.59.43.0/24 maxlen: 24
103.59.42.0/24 maxlen: 24
103.59.41.0/24 maxlen: 24
45.92.246.0/24 maxlen: 24
185.214.72.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
45.146.181.0/24 maxlen: 24
193.39.143.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.153.217.0/24 maxlen: 24
45.147.31.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
91.233.89.0/24 maxlen: 24
64.226.159.0/24 maxlen: 24
64.226.158.0/24 maxlen: 24
64.226.157.0/24 maxlen: 24
64.226.156.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
45.146.88.0/24 maxlen: 24
103.227.85.0/24 maxlen: 24
103.227.84.0/24 maxlen: 24
45.146.131.0/24 maxlen: 24
45.146.129.0/24 maxlen: 24
103.227.86.0/24 maxlen: 24
103.78.191.0/24 maxlen: 24
103.78.190.0/24 maxlen: 24
103.78.189.0/24 maxlen: 24
103.78.188.0/24 maxlen: 24
194.45.34.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
91.212.120.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
45.145.59.0/24 maxlen: 24
202.50.166.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
103.91.147.0/24 maxlen: 24
103.91.146.0/24 maxlen: 24
91.233.20.0/24 maxlen: 24
91.233.54.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
45.131.214.0/24 maxlen: 24
64.226.55.0/24 maxlen: 24
64.226.54.0/24 maxlen: 24
91.232.255.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.82.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.130.252.0/24 maxlen: 24
45.130.254.0/24 maxlen: 24
209.35.158.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
93.190.247.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.137.62.0/24 maxlen: 24
194.35.226.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
194.35.225.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.157.39.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
193.41.69.0/24 maxlen: 24
193.41.68.0/24 maxlen: 24
185.155.202.0/24 maxlen: 24
193.41.86.0/24 maxlen: 24
193.41.87.0/24 maxlen: 24
45.129.125.0/24 maxlen: 24
45.129.126.0/24 maxlen: 24
84.21.188.0/24 maxlen: 24
45.141.179.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.13.187.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
167.94.165.0/24 maxlen: 24
167.94.164.0/24 maxlen: 24
45.135.38.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
103.74.77.0/24 maxlen: 24
103.74.76.0/24 maxlen: 24
45.142.29.0/24 maxlen: 24
85.209.131.0/24 maxlen: 24
193.41.38.0/24 maxlen: 24
194.41.38.0/24 maxlen: 24
194.41.8.0/24 maxlen: 24
2a0f:e540::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a13:18c0:2::/48 maxlen: 48
2a0f:7d03:1::/48 maxlen: 48
2a13:cc0::/29 maxlen: 29
2a12:f540::/29 maxlen: 29
2a0e:f200:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a13:3380::/29 maxlen: 29
2a0f:e842::/32 maxlen: 32
2a0f:9600::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:2700:2::/48 maxlen: 48
2a0f:1580::/29 maxlen: 29
2a0f:7f02::/32 maxlen: 32
2a13:d40:2::/48 maxlen: 48
2a0f:a02::/32 maxlen: 32
2a0f:e7c2::/32 maxlen: 32
2a0f:e9c0::/29 maxlen: 29
2a0e:f200::/48 maxlen: 48
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0f:dd40::/29 maxlen: 29
2a0f:4f80::/48 maxlen: 48
2a0e:15c2:19::/48 maxlen: 48
2a0f:e1c2::/32 maxlen: 32
2a0e:15c1::/32 maxlen: 32
2a0e:2240:2::/48 maxlen: 48
2a0f:2700:1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:3d80:3::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a12:eb40::/29 maxlen: 29
2a0e:15c0:2::/48 maxlen: 48
2a0e:1a80:123::/48 maxlen: 48
2a0e:15c2:122::/48 maxlen: 48
2a0f:e1c7::/32 maxlen: 32
2a13:1480::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0e:f200:2::/48 maxlen: 48
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a13:d40:1::/48 maxlen: 48
2a12:f5c0::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a13:8c81::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:3d80:2::/48 maxlen: 48
2a0f:1206:1::/48 maxlen: 48
2a10:67c0::/29 maxlen: 29
2a13:8c80::/32 maxlen: 32
2a0f:7d01::/32 maxlen: 32
2a0e:15c0:4::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a06:4d80::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:74:63:98:4c:7c:df:73:34:bb:62:de:7f:9e:ef:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 30 07:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0ba72d6fa0f9d46533a075ebeda68e417186137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:d8:15:16:a4:13:61:8c:1f:db:f9:e8:4e:
4d:e1:20:77:17:a2:f9:f1:ab:8e:e2:2d:be:37:b0:
60:f1:5a:4b:cf:36:ba:b4:60:55:df:fd:27:8b:dc:
cb:86:d4:fe:b3:85:48:e7:4d:e1:7a:48:56:e5:83:
73:44:37:a3:f5:e2:5e:88:97:03:34:67:0d:94:5c:
70:21:71:9f:ad:a0:d6:f0:1f:22:af:21:53:f5:3c:
c8:88:81:c7:5d:b4:18:8a:57:42:e3:3c:a2:c1:2d:
d9:c6:63:12:ee:0d:29:4f:26:8a:90:0f:c2:bf:72:
f9:37:81:80:99:14:0c:4b:b8:03:74:51:db:89:87:
2a:0f:b8:dc:bc:fd:d2:40:e6:86:67:38:39:2f:60:
d0:0f:64:36:93:90:bf:c1:9e:25:c4:8c:26:cf:48:
a1:e5:8b:50:1b:c2:0e:ec:9c:55:67:27:ac:9b:6a:
c2:f9:29:89:a1:18:50:64:36:8a:b5:16:57:d9:b9:
c0:be:9a:65:a6:75:13:c5:a9:6c:d7:56:72:b6:22:
73:73:26:ac:41:20:7a:7b:59:fb:09:ef:d6:33:eb:
2f:7a:ae:9e:84:82:15:34:69:7b:ed:8c:17:b3:99:
c7:82:58:da:f7:90:ea:e1:33:fe:82:5c:9d:63:5e:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BA:72:D6:FA:0F:9D:46:53:3A:07:5E:BE:DA:68:E4:17:18:61:37
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oLpy1voPnUZTOgdevtpo5BcYYTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/23
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.92.246.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.129.125.0-45.129.126.255
45.130.252.0/24
45.130.254.0/24
45.131.214.0/24
45.134.186.0/24
45.135.38.0/24
45.137.41.0/24
45.137.62.0/24
45.137.82.0/24
45.137.85.0-45.137.86.255
45.141.179.0/24
45.142.29.0/24
45.145.59.0/24
45.146.88.0/24
45.146.129.0/24
45.146.131.0/24
45.146.181.0/24
45.147.31.0/24
45.153.21.0/24
45.153.23.0/24
45.153.217.0-45.153.219.255
45.154.229.0-45.154.231.255
45.157.36.0/22
45.158.197.0-45.158.198.255
64.226.54.0/23
64.226.156.0/22
80.253.248.0/24
84.21.188.0/24
85.209.131.0/24
91.212.100.0/24
91.212.107.0/24
91.212.120.0/24
91.232.255.0/24
91.233.20.0/24
91.233.54.0/24
91.233.89.0/24
93.190.247.0/24
103.59.40.0/22
103.74.76.0/23
103.78.188.0/22
103.91.146.0/23
103.227.84.0-103.227.86.255
103.229.31.0/24
113.30.152.0/22
167.94.164.0/23
185.136.204.0/24
185.155.202.0/24
185.164.59.0/24
185.214.72.0/24
193.5.64.0/24
193.39.143.0/24
193.39.208.0/23
193.41.38.0/24
193.41.68.0/23
193.41.86.0/23
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
194.33.62.0/24
194.35.225.0-194.35.226.255
194.41.8.0/24
194.41.38.0/24
194.45.34.0/24
202.50.166.0/24
209.35.158.0/24
IPv6:
2a06:4d80::/29
2a0c:7883::/32
2a0e:15c0:2::/48
2a0e:15c0:4::/48
2a0e:15c1::/32
2a0e:15c2:19::/48
2a0e:15c2:122::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:f200::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e00::/29
2a0f:1200::/32
2a0f:1206:1::/48
2a0f:1580::/29
2a0f:1f80::/29
2a0f:2300::/29
2a0f:2700::/29
2a0f:3d80:2::/47
2a0f:3f80::/29
2a0f:4f80::/48
2a0f:7d00:3::/48
2a0f:7d01::/32
2a0f:7d03:1::/48
2a0f:7f02::/32
2a0f:9600::/29
2a0f:dd40::/29
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/29
2a0f:e600:1::/48
2a0f:e7c2::/32
2a0f:e842::/32
2a0f:e9c0::/29
2a10:67c0::/29
2a12:d6c0::/29
2a12:eb40::/29
2a12:f540::/29
2a12:f5c0::/29
2a13:cc0::/29
2a13:d40:1::-2a13:d40:2:ffff:ffff:ffff:ffff:ffff
2a13:1480::/29
2a13:18c0:2::/48
2a13:3380::/29
2a13:8c80::/31
Signature Algorithm: sha256WithRSAEncryption
5b:e4:e5:c5:d9:24:03:5a:0d:9f:a9:a9:08:29:9f:3a:78:e1:
cc:ac:88:9b:5a:ad:e4:49:2b:cd:ae:f1:40:27:99:25:d4:12:
f9:30:be:2f:03:14:29:9f:e8:60:55:d1:92:bc:39:da:ae:19:
75:56:3d:75:02:a4:e4:50:67:0a:56:98:21:81:72:ea:33:b9:
45:31:19:23:33:46:3c:95:1e:c0:61:f2:df:73:36:e1:3b:5b:
61:29:1b:ad:77:c1:f6:2a:7e:76:a3:6f:ac:b5:3f:28:63:d8:
62:79:8d:10:b2:51:8e:a6:9d:74:cf:b3:fb:d6:3b:91:1b:5d:
ca:23:3c:57:02:ac:c8:87:b2:68:82:ed:96:30:d6:5c:fe:55:
fa:5f:bd:15:9f:5d:12:aa:3f:14:68:2f:a4:14:27:9b:fa:a4:
9a:81:d6:b9:81:32:71:d1:8d:56:2e:06:c4:19:dc:d2:48:1c:
f2:2e:b9:83:bf:e9:fb:f0:ae:36:10:1b:16:3b:71:e2:c9:a9:
ca:63:3b:97:88:af:59:02:a8:3a:a2:33:76:b2:cb:4a:33:16:
8f:56:db:d7:28:57:ac:8b:91:3c:48:c9:63:b1:fb:67:a8:55:
15:12:0e:bb:db:e0:85:58:d7:5e:1e:51:b7:48:98:cb:14:17:
1e:13:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:22 2025 by rpki-client