Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EGTp5fMfs6H5g_aKtb2mnb1lQbg.roa
File: EGTp5fMfs6H5g_aKtb2mnb1lQbg.roa (raw, json)
Hash identifier: 82utJ8x6wTdBkvGZXb9f4UyrKgp/ykBQQbBzvFOWWm8=
Subject key identifier: 10:64:E9:E5:F3:1F:B3:A1:F9:83:F6:8A:B5:BD:A6:9D:BD:65:41:B8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182C594221DAB07CB4749FDF405E130AB66
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EGTp5fMfs6H5g_aKtb2mnb1lQbg.roa
Signing time: Mon 22 Aug 2022 12:43:15 +0000
ROA not before: Mon 22 Aug 2022 12:43:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
45.130.253.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
193.41.115.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
103.227.86.0/24 maxlen: 24
80.253.248.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:e540::/32 maxlen: 32
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:e041::/32 maxlen: 32
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0e:1a80:123::/48 maxlen: 48
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a12:4ac0::/29 maxlen: 29
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7880::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a0f:7d00:5::/48 maxlen: 48
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:e040::/48 maxlen: 48
2a0e:15c0:4::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0f:1200::/32 maxlen: 32
2a0f:7d00:3::/48 maxlen: 48
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:94:22:1d:ab:07:cb:47:49:fd:f4:05:e1:30:ab:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 22 12:43:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1064e9e5f31fb3a1f983f68ab5bda69dbd6541b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:bb:34:12:50:51:5c:c1:34:f7:bd:c1:13:
9d:e0:bc:75:b8:f0:dd:9d:46:5c:ec:8d:1a:99:ef:
2e:a3:d0:5a:17:f8:c6:d6:2a:7f:6e:bd:66:c6:16:
4c:91:dd:d2:4b:4e:c0:c1:11:6a:c1:54:14:1f:91:
51:54:18:10:4f:13:38:8c:07:34:f7:e3:02:41:3c:
29:82:2d:ca:e9:9b:57:2a:40:23:0a:33:2b:80:f6:
52:54:a9:cd:01:c0:0a:b9:90:69:3e:85:99:20:fb:
12:0a:4c:c2:94:93:72:29:e0:59:54:95:52:4a:a6:
28:1e:bb:f1:e1:b6:4d:57:88:5d:eb:a0:65:23:94:
98:45:a3:52:54:90:e8:18:10:b7:14:47:9f:08:af:
36:35:65:70:e2:a9:ab:f8:77:1e:17:b6:90:63:6f:
21:fb:ab:be:27:2f:33:ca:bd:5a:1e:a6:1c:7e:b0:
3f:48:f5:96:01:b1:d2:4c:48:77:a4:8d:58:77:8f:
ee:0e:75:1a:04:d8:98:37:a6:96:b5:01:84:b1:d2:
7b:c0:2d:e6:0f:31:ee:75:a1:1e:70:71:d3:74:3f:
b5:e7:4b:28:6e:fa:f7:8c:51:7c:b5:47:30:43:73:
c0:c8:99:80:e9:35:31:47:b3:46:cf:4a:a3:fc:80:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:E9:E5:F3:1F:B3:A1:F9:83:F6:8A:B5:BD:A6:9D:BD:65:41:B8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EGTp5fMfs6H5g_aKtb2mnb1lQbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.128.77.0/24
45.130.253.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0/24
45.157.38.0/24
45.158.197.0-45.158.198.255
80.253.248.0/24
91.212.100.0/24
91.212.107.0/24
103.227.86.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.115.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7880::/32
2a0c:7882:1::/48
2a0c:7883::-2a0c:7884:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:15c0:4::/48
2a0e:1a80:123::/48
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1200::/32
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:7d00:1::/48
2a0f:7d00:3::/48
2a0f:7d00:5::/48
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e040::/48
2a0f:e041::/32
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e540::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:ea00::/29
2a12:4ac0::/29
2a12:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:8b:be:b7:d9:3b:3b:7d:78:44:b8:8a:9f:d9:b1:74:dc:71:
08:14:b5:ec:77:00:6c:b5:b8:db:8c:be:a2:c8:c2:3f:81:6e:
7e:c1:09:a7:50:bd:f2:87:0e:3c:6a:1e:d1:8b:52:b4:c8:71:
bd:d3:bc:01:a8:9f:fb:b4:5f:bc:25:df:ea:51:d5:db:d2:56:
50:37:a3:a3:94:cd:a7:64:38:f0:06:5a:7f:80:cb:8d:75:a9:
fe:bb:b5:82:e3:b8:e4:da:68:ef:42:77:24:71:35:31:a4:50:
cc:05:da:08:58:eb:7c:55:b2:d9:e9:d2:90:c6:1e:c0:83:ff:
a3:dc:45:ef:48:c4:16:a4:c4:3f:9a:b7:b3:6b:46:06:c1:04:
a7:b3:f3:ca:6f:22:11:7e:24:d2:ee:dd:be:ca:aa:91:a6:72:
64:7c:60:db:51:28:a5:ee:1d:1f:af:09:81:fb:00:92:a9:78:
6d:7d:25:e9:35:06:9d:32:44:98:22:5b:0d:64:b0:1e:b9:99:
ee:50:7a:62:29:03:ec:50:a6:42:eb:a2:49:f3:0e:e5:3b:af:
de:41:7c:05:73:28:b5:26:d3:4e:bd:5c:53:9e:da:0c:2b:e6:
95:73:fb:d6:a9:46:8e:36:e6:97:a0:9a:12:30:6f:4c:cb:98:
80:19:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:08:36 2025 by rpki-client