Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0COx0h5Fyip_F6X-HOQQrbQ7fOM.roa
File: 0COx0h5Fyip_F6X-HOQQrbQ7fOM.roa (raw, json)
Hash identifier: I1SfEnTLWRxzbs/Xo0XRU/ZAZLeW3eJNTBIrQn7xsvA=
Subject key identifier: D0:23:B1:D2:1E:45:CA:2A:7F:17:A5:FE:1C:E4:10:AD:B4:3B:7C:E3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01826D5C04953747D95318DC7CFC30433347
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0COx0h5Fyip_F6X-HOQQrbQ7fOM.roa
Signing time: Fri 05 Aug 2022 09:35:23 +0000
ROA not before: Fri 05 Aug 2022 09:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.118.249.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e540::/32 maxlen: 32
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:ee00::/29 maxlen: 29
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2700::/29 maxlen: 29
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0b:b740::/29 maxlen: 29
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0f:e9c0::/29 maxlen: 29
2a0e:15c0:4::/48 maxlen: 48
2a0f:db40::/29 maxlen: 29
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
2a0f:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:5c:04:95:37:47:d9:53:18:dc:7c:fc:30:43:33:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 5 09:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d023b1d21e45ca2a7f17a5fe1ce410adb43b7ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:15:49:92:4d:ba:e0:a0:b2:e2:b8:a6:20:
3c:18:4f:73:16:52:f0:d3:e6:69:5b:9a:8c:a7:a5:
35:95:85:2e:df:69:fe:d5:8f:3e:93:4d:5d:e6:8a:
a0:ce:04:b2:86:05:8a:d5:07:9d:d0:33:a9:e2:d9:
e1:08:b7:e6:92:ad:9d:ef:c1:bc:07:1d:2a:eb:33:
66:59:0f:25:18:d9:7a:78:52:e0:19:9f:9e:ca:15:
23:8d:3c:d6:c8:b3:08:14:3d:c7:a0:69:af:1a:f4:
de:2b:9e:77:a4:d3:ea:c5:40:7f:8e:3c:f1:f1:4e:
e6:a6:d2:c2:d9:2f:70:6d:e1:2a:45:ca:3f:b9:ec:
42:d2:00:71:4f:8e:3b:d1:2e:99:a6:d9:4c:bb:87:
d7:0e:27:fc:a0:ea:b0:07:7c:04:dc:3e:33:d3:04:
fc:54:66:f0:d6:1b:eb:65:a7:95:a9:b0:87:24:f9:
ac:03:00:2b:80:8b:ef:f7:b3:f7:10:c4:32:8f:8f:
53:4c:e9:ae:81:c1:f5:88:5c:15:02:cd:dd:91:0e:
5e:c6:50:3e:f0:7f:e9:e0:9c:4c:c2:56:13:8a:8d:
b6:ea:50:84:6c:13:e5:0e:a0:81:72:d5:be:f3:b2:
b9:5d:b5:71:b9:e8:fe:cd:c4:de:67:d7:9b:ad:16:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:23:B1:D2:1E:45:CA:2A:7F:17:A5:FE:1C:E4:10:AD:B4:3B:7C:E3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0COx0h5Fyip_F6X-HOQQrbQ7fOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.118.249.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0b:b740::/29
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:2700::/29
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:db40::/29
2a0f:dd40::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e9c0::/29
2a0f:ea00::/29
2a0f:ee00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
ce:67:4f:9e:bc:f0:d3:67:1c:b0:60:92:c0:03:ef:b7:7f:2d:
e6:18:17:b8:67:5a:f7:d6:13:d4:8c:75:10:7e:f3:db:9e:d0:
5b:f5:0b:82:29:48:26:f0:80:03:10:e8:ef:6d:87:f4:e8:84:
67:5d:0f:63:8d:a2:62:46:59:7f:c9:58:9d:d2:dc:26:e8:13:
a9:f8:d2:1e:5c:45:4c:b1:f9:4b:34:bf:ae:b5:00:c1:51:ed:
e0:e0:e5:4d:59:87:76:49:16:5d:e5:de:a0:c8:fa:95:68:38:
0d:7c:3a:5b:26:b5:9c:55:18:8e:68:e2:61:73:d2:46:92:6f:
68:11:ef:d4:00:12:b8:7a:12:f5:ff:e9:92:33:6c:9f:2f:91:
b0:37:12:6d:58:7e:fb:7b:c3:e6:6f:ab:92:a5:78:70:dd:4f:
93:5c:1a:02:50:f5:24:3a:7a:38:4b:59:47:08:bc:79:57:cf:
4f:cc:0d:af:00:6d:c2:55:3d:e8:6f:c9:10:f9:9f:91:57:65:
3a:14:ab:12:39:f5:c3:9b:a6:d3:8a:18:e9:2e:6c:b9:ca:c2:
66:a8:30:1e:db:6b:eb:74:7e:fb:ca:cd:eb:88:81:4f:1f:90:
59:92:a2:b3:a1:69:bf:8d:ef:29:2e:92:3b:cf:c5:8b:3b:4e:
8d:61:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:04:39 2025 by rpki-client