Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uXYIYmVtXaSSqHLXv-qST76aDqs.roa
File: uXYIYmVtXaSSqHLXv-qST76aDqs.roa (raw, json)
Hash identifier: ns7TLHUa6Acvy/sg92DsnyMyj5xkUjSeMhsgmzbQUuc=
Subject key identifier: B9:76:08:62:65:6D:5D:A4:92:A8:72:D7:BF:EA:92:4F:BE:9A:0E:AB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182271BBC1A213D7AC9BA79981CA8DE1170
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uXYIYmVtXaSSqHLXv-qST76aDqs.roa
Signing time: Fri 22 Jul 2022 18:11:45 +0000
ROA not before: Fri 22 Jul 2022 18:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:27:1b:bc:1a:21:3d:7a:c9:ba:79:98:1c:a8:de:11:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 22 18:11:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9760862656d5da492a872d7bfea924fbe9a0eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:d5:ab:24:e1:47:94:40:78:e6:8e:b2:03:
08:a0:4c:c4:76:0a:f5:e2:31:c1:77:ad:2b:ee:8f:
9e:74:bd:e3:da:15:01:20:14:59:98:7b:ee:5c:ed:
53:b8:f5:0b:86:88:3d:71:1d:ae:9f:4a:24:10:91:
63:80:dc:5c:3d:31:db:27:2a:3e:ac:a8:7e:d4:e0:
27:96:3e:bd:30:13:8c:89:f5:3e:4b:66:b8:3d:89:
8c:65:23:6a:d2:fa:bc:6a:cb:23:e9:e9:d3:52:50:
c2:9e:45:d1:78:f0:4e:d2:d2:67:3d:04:7b:4e:04:
50:78:1e:8f:1d:6c:09:a0:d5:47:fb:53:50:17:64:
b3:bb:af:86:92:cb:68:09:03:f0:63:4f:63:ee:d6:
5c:83:49:49:02:75:84:6b:ba:cd:d7:4d:55:1b:35:
9e:ef:83:a1:18:9c:ec:a0:c2:d5:41:cd:0f:35:3e:
ff:b3:41:cb:76:d7:6f:61:8b:72:d8:43:b1:7b:9d:
24:15:b7:05:c4:e8:ac:3b:e5:f8:4b:c1:c1:62:71:
6d:a8:ba:3f:d0:d3:5c:48:4b:80:6b:49:bc:29:3f:
c6:e4:86:72:93:5c:05:58:f3:1f:21:83:7b:6e:0d:
1c:70:7a:8a:c7:58:fd:ce:4d:43:d6:0e:1c:88:50:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:76:08:62:65:6D:5D:A4:92:A8:72:D7:BF:EA:92:4F:BE:9A:0E:AB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/uXYIYmVtXaSSqHLXv-qST76aDqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e940::/29
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:e5:16:86:ab:19:03:e8:14:4e:96:c7:e1:4c:90:4b:33:ec:
22:5f:58:fb:3d:b4:45:12:fb:a2:62:1e:69:3d:af:24:f6:61:
f1:c0:1c:43:d2:f2:a3:fc:4e:b4:1a:f9:74:45:ed:89:52:5b:
4c:fe:cf:3b:a4:0f:68:88:61:fb:10:1f:31:ec:5f:6b:12:29:
dc:16:5d:35:f7:8f:fc:83:ad:fb:11:ce:ef:18:36:c9:9f:39:
3e:b6:75:2a:e3:08:a9:65:b4:ae:10:a6:81:b8:29:35:82:1e:
44:de:e0:e6:71:83:ae:62:df:f2:83:df:8e:32:46:ab:f5:6d:
5e:23:5d:89:06:b4:51:56:23:17:e8:ab:01:91:c9:e6:82:39:
7f:cf:01:4e:87:08:61:94:4d:f0:c6:79:61:db:e6:9f:a0:f9:
9b:04:e8:78:70:2c:5c:02:7c:e2:30:9e:83:e5:b0:bb:ef:11:
d6:7f:12:ec:a7:28:98:87:11:4b:d5:b0:47:20:35:69:d2:3d:
a3:7d:30:b2:d6:fb:9c:42:fd:48:02:68:bb:52:1b:7a:ba:cd:
97:a7:c1:37:82:b2:a2:b5:5c:a8:77:5b:6f:40:a4:39:7b:df:
c9:bc:b6:24:14:14:db:a6:92:ea:19:07:67:20:bf:ca:c1:7d:
35:52:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:15:01 2025 by rpki-client