Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/txQ0yjXQvz9GSukqTKMC0QlLjbM.roa
File: txQ0yjXQvz9GSukqTKMC0QlLjbM.roa (raw, json)
Hash identifier: nNbkqxt9SqTtHcwh47AXki4WMSDlXxuTlukgAHug7yQ=
Subject key identifier: B7:14:34:CA:35:D0:BF:3F:46:4A:E9:2A:4C:A3:02:D1:09:4B:8D:B3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02D6570B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/txQ0yjXQvz9GSukqTKMC0QlLjbM.roa
Signing time: Tue 19 Apr 2022 19:05:20 +0000
ROA not before: Tue 19 Apr 2022 19:05:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0f:a03::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:e842::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47601419 (0x2d6570b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 19 19:05:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b71434ca35d0bf3f464ae92a4ca302d1094b8db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e1:63:32:92:18:11:02:50:86:5c:cb:f2:61:
e5:e3:76:18:8a:29:e0:05:48:af:8d:81:62:e7:af:
fd:74:49:63:f9:4b:c9:60:8f:6c:0e:37:c0:fa:ba:
db:db:1e:e5:92:ed:1d:93:2b:8b:da:14:a9:e0:fa:
7b:68:dd:86:04:4b:02:77:d7:99:3d:63:e7:dd:41:
7c:8e:9f:41:3d:d6:f3:fb:e4:b4:39:80:46:da:47:
e7:6f:46:12:5f:10:65:8a:46:11:ce:ec:f8:cd:9c:
63:a3:c3:a0:a3:a1:50:3c:d0:21:3b:21:b9:1b:e8:
34:fb:37:e3:f9:d6:58:1a:10:9a:25:6d:c5:a7:6c:
9e:29:ba:e2:36:67:dd:69:8b:16:c3:7a:6e:89:88:
9c:de:e7:4e:4c:62:c6:9b:aa:69:b7:ed:74:9a:14:
9d:fb:5e:47:16:fc:e2:2f:87:97:74:65:d0:da:48:
56:66:3b:0d:e5:9b:ea:7a:5a:ce:91:97:07:d2:48:
e4:80:f7:66:92:b8:5c:6b:03:b4:73:80:f7:4c:4f:
84:4c:26:41:c8:36:d3:58:d8:2f:b7:08:08:ab:9a:
9b:66:f1:dc:95:3d:33:ff:b1:e9:73:1c:1a:71:f5:
dd:71:1d:04:23:60:26:9f:c6:f5:49:e0:ae:02:03:
42:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:14:34:CA:35:D0:BF:3F:46:4A:E9:2A:4C:A3:02:D1:09:4B:8D:B3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/txQ0yjXQvz9GSukqTKMC0QlLjbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.86.0/24
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.37.0-45.157.38.255
45.158.197.0-45.158.198.255
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0c:7882:1::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e842::/32
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
a7:67:7f:89:56:e2:12:79:80:8e:80:46:24:bf:63:5a:75:90:
1d:d0:45:8d:c6:47:01:94:19:66:e1:86:28:64:ee:5f:a7:3b:
8b:a6:b9:02:8f:3d:01:5d:87:93:3d:bc:7b:6f:06:5a:39:f5:
88:0b:9c:f3:dd:b1:90:fb:8e:a0:e6:06:90:6d:6f:f7:a4:b7:
fe:d6:87:d1:66:35:fe:8b:df:32:3c:cc:4e:50:53:1b:3a:76:
f8:7d:c6:65:4b:1d:fe:92:9a:f3:ba:62:05:7f:96:1f:cf:7d:
16:9a:1b:d6:a9:7f:b3:32:43:47:fc:df:03:ad:15:31:b9:1f:
68:5f:71:dc:0c:fe:f5:ea:ed:fc:68:ef:28:d7:a8:99:dc:0f:
78:4e:c4:b4:cd:57:c9:1f:84:96:6f:73:99:6a:28:48:0b:89:
9a:ef:f4:62:64:5a:10:24:6c:de:47:c2:82:1c:43:ec:03:a1:
94:2f:64:cf:b5:c1:c9:6c:e6:36:c5:5f:27:a2:c8:c7:32:01:
99:24:f9:58:03:72:20:4e:e6:3f:44:99:30:d7:3f:30:f9:68:
3f:d4:1c:3a:d9:ab:90:bd:06:50:5e:a3:21:ab:16:1b:ab:c3:
df:b9:b1:0f:5e:45:a3:6d:57:34:6e:47:2f:74:6c:92:cb:53:
80:48:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:07:02 2025 by rpki-client