Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-adtPDhlhDhKFqx5vLkl6vS89to.roa
File: 1-adtPDhlhDhKFqx5vLkl6vS89to.roa (raw, json)
Hash identifier: Ss1JAqui/1cqWFHkkfFZFS6Yjp/jmcHRNveG6S5FMfY=
Subject key identifier: F9:A7:6D:3C:38:65:84:38:4A:16:AC:79:BC:B9:25:EA:F4:BC:F6:DA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 020E3952
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-adtPDhlhDhKFqx5vLkl6vS89to.roa
Signing time: Wed 23 Feb 2022 18:06:52 +0000
ROA not before: Wed 23 Feb 2022 18:06:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.95.98.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
194.33.32.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
2a0e:e980::/29 maxlen: 29
2a0f:ac00::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:a02::/32 maxlen: 32
2a0f:e1c0::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0e:f200:2::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34486610 (0x20e3952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 23 18:06:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9a76d3c386584384a16ac79bcb925eaf4bcf6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:dc:92:bb:1c:63:e0:bc:18:37:28:4c:8e:
ef:9f:9d:19:04:de:46:b5:5f:fc:23:cd:71:32:a0:
96:32:6f:bb:26:6f:91:bd:1e:b4:d2:ff:d4:39:43:
35:07:16:af:99:47:d3:21:49:7f:68:78:49:6f:08:
b0:71:2c:a0:69:22:c3:43:ab:74:12:7a:50:7c:66:
14:db:56:01:4f:bc:ee:1e:28:0d:04:58:90:af:a8:
7a:c5:16:f5:df:b0:51:19:f8:5c:1f:78:81:c6:8e:
40:fa:b1:ae:1b:12:36:f4:c4:4e:03:8a:e8:d0:cb:
89:c3:87:19:fd:c4:5e:9c:aa:e0:21:a2:71:b0:81:
d3:be:e1:db:51:a7:ea:df:c9:d2:f3:8b:17:fc:98:
39:9f:0b:17:a9:39:03:0c:6c:1a:52:43:9b:ab:5d:
24:da:eb:a1:10:40:4d:4c:1f:c3:18:78:ab:8b:08:
32:42:57:9b:ba:9c:bf:9d:5d:d2:d3:62:7b:00:f2:
a5:55:5d:0c:68:86:08:b5:98:df:9b:39:d3:47:31:
64:de:d6:d9:dc:b5:b8:66:12:e8:bb:c2:ee:06:79:
00:03:ca:4e:c7:2d:12:66:3c:a8:9c:67:db:27:2b:
f2:ad:f5:53:08:45:45:9e:9f:36:92:41:64:fd:f6:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A7:6D:3C:38:65:84:38:4A:16:AC:79:BC:B9:25:EA:F4:BC:F6:DA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-adtPDhlhDhKFqx5vLkl6vS89to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.95.98.0/24
45.128.77.0/24
45.137.41.0/24
45.137.86.0/24
45.153.218.0/24
45.157.38.0/24
193.39.209.0/24
193.111.4.0/23
193.111.18.0/23
194.33.32.0/24
IPv6:
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:2::/48
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
cb:a8:09:e4:18:b7:e4:40:20:76:ba:91:8f:99:6b:5b:03:d8:
f1:a9:7c:e7:0d:74:16:de:7f:ab:8c:28:c8:82:b8:89:eb:54:
39:25:9d:6a:41:43:83:93:7a:d8:7c:7e:a7:5e:2f:b7:58:57:
67:da:db:41:83:d0:96:a6:86:d4:e0:6f:8f:ae:0e:a3:7e:e1:
f1:ed:ec:c0:cb:21:67:3f:22:3f:9c:bd:94:79:9d:6d:5b:e2:
ba:c4:2e:68:98:9d:e8:67:b9:36:e2:ae:af:db:06:d6:0a:9e:
ab:4c:ae:f6:24:ae:29:ad:99:7d:c1:7c:0e:4d:17:2a:0c:98:
b8:0a:83:81:b4:09:02:d0:c3:75:93:71:f8:28:3c:2e:43:45:
8b:3a:80:f9:a4:72:c0:e8:c3:8e:2b:73:c8:a2:5f:aa:47:01:
d7:37:83:ea:7d:21:b8:52:c3:7c:6d:13:77:d4:f0:5d:5e:fb:
3f:1d:f7:d1:2c:5f:67:2f:32:be:4e:dc:17:e9:3f:41:4a:62:
5c:1e:65:f4:b5:7f:9b:ee:97:d4:aa:6f:f0:01:63:32:80:64:
13:ef:d9:dd:cf:4f:40:e1:5d:6c:29:c2:2c:66:75:99:67:c6:
98:eb:64:dd:47:94:d7:58:7d:d8:c4:62:28:ab:4c:1d:2b:05:
b7:7e:5d:43
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIEAg45UjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDU1OWFhZmJmYzA5MzEyNDJlMWQ2MzcyOThjZjFkZDIyM2U0YzI2MB4XDTIyMDIy
MzE4MDY1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjlhNzZkM2MzODY1
ODQzODRhMTZhYzc5YmNiOTI1ZWFmNGJjZjZkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALut3JK7HGPgvBg3KEyO75+dGQTeRrVf/CPNcTKgljJvuyZv
kb0etNL/1DlDNQcWr5lH0yFJf2h4SW8IsHEsoGkiw0OrdBJ6UHxmFNtWAU+87h4o
DQRYkK+oesUW9d+wURn4XB94gcaOQPqxrhsSNvTETgOK6NDLicOHGf3EXpyq4CGi
cbCB077h21Gn6t/J0vOLF/yYOZ8LF6k5AwxsGlJDm6tdJNrroRBATUwfwxh4q4sI
MkJXm7qcv51d0tNiewDypVVdDGiGCLWY35s500cxZN7W2dy1uGYS6LvC7gZ5AAPK
TsctEmY8qJxn2ycr8q31UwhFRZ6fNpJBZP32n/8CAwEAAaOCArswggK3MB0GA1Ud
DgQWBBT5p208OGWEOEoWrHm8uSXq9Lz22jAfBgNVHSMEGDAWgBR9VZqvv8CTEkLh
1jcpjPHdIj5MJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZWV2FyN19Ba3hKQzRkWTNLWXp4M1NJLVRDWS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzAvNDlhZGM2LWJhODktNDAzZi1hZGE5LThjNTAwN2MyYTRiNi8x
LzEtYWR0UERobGhEaEtGcXg1dkxrbDZ2Uzg5dG8ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Mw
LzQ5YWRjNi1iYTg5LTQwM2YtYWRhOS04YzUwMDdjMmE0YjYvMS9mVldhcjdfQWt4
SkM0ZFkzS1l6eDNTSS1UQ1kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
gc8GCCsGAQUFBwEHAQH/BIG/MIG8MEgEAgABMEIDBAAtDboDBAAtX2IDBAAtgE0D
BAAtiSkDBAAtiVYDBAAtmdoDBAAtnSYDBADBJ9EDBAHBbwQDBAHBbxIDBADCISAw
cAQCAAIwagMHACoOIkAAAgMFAyoOJEADBQMqDumAAwcAKg7yAAACMA4DBQEqDwoC
AwUAKg8KBAMFAyoPH4ADBQMqD6wAAwUDKg/aQAMFACoP4UMDBQAqD+HAAwUAKg/h
xwMHACoP5gAAAQMFAyoP6UAwDQYJKoZIhvcNAQELBQADggEBAMuoCeQYt+RAIHa6
kY+Za1sD2PGpfOcNdBbef6uMKMiCuInrVDklnWpBQ4OTeth8fqdeL7dYV2fa20GD
0JamhtTgb4+uDqN+4fHt7MDLIWc/Ij+cvZR5nW1b4rrELmiYnehnuTbirq/bBtYK
nqtMrvYkrimtmX3BfA5NFyoMmLgKg4G0CQLQw3WTcfgoPC5DRYs6gPmkcsDow44r
c8iiX6pHAdc3g+p9IbhSw3xtE3fU8F1e+z8d99EsX2cvMr5O3BfpP0FKYlweZfS1
f5vul9Sqb/ABYzKAZBPv2d3PT0DhXWwpwixmdZlnxpjrZN1HlNdYfdjEYiirTB0r
Bbd+XUM=
-----END CERTIFICATE-----
Generated at Fri May 9 21:40:50 2025 by rpki-client