Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p9EauiZjLx0K0ddOGDNo05ihcVY.roa
File: p9EauiZjLx0K0ddOGDNo05ihcVY.roa (raw, json)
Hash identifier: byYrcJ782AVzwQe+NF+kge3Ddk4L/6RHvuXvfaTwP98=
Subject key identifier: A7:D1:1A:BA:26:63:2F:1D:0A:D1:D7:4E:18:33:68:D3:98:A1:71:56
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0391E7E3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p9EauiZjLx0K0ddOGDNo05ihcVY.roa
Signing time: Fri 17 Jun 2022 08:43:44 +0000
ROA not before: Fri 17 Jun 2022 08:43:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0f:e842::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59893731 (0x391e7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 17 08:43:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7d11aba26632f1d0ad1d74e183368d398a17156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:7e:50:27:a5:06:73:87:af:a5:6e:78:31:
93:1c:81:b2:84:85:d3:57:4e:ed:e0:64:d5:a1:6a:
9a:b2:e5:88:a6:a3:76:4a:63:11:8c:6b:d0:09:42:
6b:30:f7:b7:ed:82:7f:57:6d:30:cf:df:2c:f1:29:
3b:07:bf:ee:84:42:67:25:58:04:0f:8b:cb:98:a6:
5d:60:fb:ae:59:84:10:53:11:c7:51:73:bb:3b:4b:
ba:41:e3:23:17:cb:2e:67:5d:66:fd:34:6e:92:da:
32:37:c2:71:a1:7b:bc:85:3d:88:12:ef:3e:88:3f:
74:6d:93:dc:ed:25:dc:bd:6f:89:bf:c9:22:0b:ce:
85:b4:aa:10:02:af:4a:91:7e:d9:40:dc:9d:00:09:
d2:71:61:a3:25:57:5f:3e:d6:ac:9e:fb:a3:5e:c0:
9a:03:e7:f2:56:0a:24:6e:9e:ae:a1:89:f6:16:4e:
f5:7f:b8:45:54:14:e1:bc:bf:41:c7:e6:87:02:f8:
12:8d:69:f2:1e:3d:cd:30:03:64:56:03:e9:a0:0d:
eb:cc:57:aa:27:7b:13:e1:e2:fd:14:81:8d:b7:a3:
61:f0:92:15:72:95:d6:9a:6f:6c:f6:0f:59:62:45:
1c:fb:0c:a3:a4:cf:fc:1f:43:e1:5b:e9:7b:5c:c7:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:1A:BA:26:63:2F:1D:0A:D1:D7:4E:18:33:68:D3:98:A1:71:56
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p9EauiZjLx0K0ddOGDNo05ihcVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0-45.157.38.255
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e842::/32
2a0f:e940::/29
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:46:8e:a8:78:b0:03:de:0c:30:02:31:4f:48:49:29:1d:71:
27:ec:2b:1c:31:1a:ca:ad:ac:9c:2a:17:a3:fa:e7:93:e9:bc:
86:3f:bc:8b:9a:c3:fe:b3:59:47:41:fd:6c:5a:51:16:6d:4b:
cc:37:39:4e:57:64:be:d7:bf:1c:ec:08:a4:82:e2:55:e9:5a:
ea:5c:a3:4e:03:12:75:1f:ed:b6:9a:54:93:4f:f8:5f:dc:e8:
05:41:07:e6:a4:e0:df:71:84:94:d8:3b:cd:eb:b9:5f:c5:aa:
07:aa:1f:d0:b2:01:b5:c0:bb:08:cd:98:ba:7c:70:ee:ae:cb:
e8:04:2c:01:fa:eb:2a:9c:4d:e3:f1:1d:09:e3:ab:b6:03:ea:
9d:3e:70:80:ab:c7:6b:94:da:8c:b5:64:17:18:88:da:79:bc:
39:10:50:02:a6:c0:45:ef:89:f2:85:8f:25:42:09:89:75:05:
3c:13:54:17:f0:13:a0:64:a6:fa:19:cb:a5:47:02:c1:f7:b9:
0b:cf:96:9f:db:d1:73:a1:8e:14:98:ff:23:fd:d1:70:bd:c8:
03:63:40:27:c9:f1:bc:43:14:b2:b0:3e:2a:c6:52:46:bd:0c:
c2:7f:2e:c6:2e:85:41:22:a1:3d:5a:0d:58:c8:86:99:1d:1b:
94:6a:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:27:10 2025 by rpki-client