Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XzTEQ7oDiS_Lkk2crV9Io649hWg.roa
File: XzTEQ7oDiS_Lkk2crV9Io649hWg.roa (raw, json)
Hash identifier: p5SAx68auZtp2cxCmamX6gcwE45Yz+5km1MHy2zgVjk=
Subject key identifier: 5F:34:C4:43:BA:03:89:2F:CB:92:4D:9C:AD:5F:48:A3:AE:3D:85:68
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 035590D6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XzTEQ7oDiS_Lkk2crV9Io649hWg.roa
Signing time: Mon 30 May 2022 13:48:14 +0000
ROA not before: Mon 30 May 2022 13:48:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.86.246.0/24 maxlen: 24
193.39.209.0/24 maxlen: 24
185.164.59.0/24 maxlen: 24
45.137.85.0/24 maxlen: 24
45.137.86.0/24 maxlen: 24
193.111.4.0/24 maxlen: 24
193.111.5.0/24 maxlen: 24
193.111.19.0/24 maxlen: 24
193.111.18.0/24 maxlen: 24
45.154.231.0/24 maxlen: 24
45.154.230.0/24 maxlen: 24
185.136.204.0/24 maxlen: 24
45.137.41.0/24 maxlen: 24
45.157.38.0/24 maxlen: 24
45.157.37.0/24 maxlen: 24
45.157.36.0/24 maxlen: 24
45.153.219.0/24 maxlen: 24
45.153.218.0/24 maxlen: 24
45.95.98.0/24 maxlen: 24
193.41.123.0/24 maxlen: 24
193.41.122.0/24 maxlen: 24
45.91.211.0/24 maxlen: 24
45.91.208.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
45.153.21.0/24 maxlen: 24
91.212.107.0/24 maxlen: 24
45.13.186.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
45.128.77.0/24 maxlen: 24
113.30.155.0/24 maxlen: 24
113.30.154.0/24 maxlen: 24
113.30.153.0/24 maxlen: 24
103.229.31.0/24 maxlen: 24
91.212.100.0/24 maxlen: 24
193.41.39.0/24 maxlen: 24
45.158.198.0/24 maxlen: 24
45.158.197.0/24 maxlen: 24
2a0f:ac00::/29 maxlen: 29
2a0f:e1c2::/32 maxlen: 32
2a0f:1f80::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a09:17c0::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0e:2240:2::/48 maxlen: 48
2a0f:e6c0:fe1::/48 maxlen: 48
2a0f:2100:171::/48 maxlen: 48
2a0f:e1c0::/32 maxlen: 32
2a0e:f200:1::/48 maxlen: 48
2a0f:a03::/32 maxlen: 32
2a0f:6d80::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:e1c7::/32 maxlen: 32
2a0a:2d00:1::/48 maxlen: 48
2a0e:f200:2::/48 maxlen: 48
2a0f:e6c0:991::/48 maxlen: 48
2a0f:e842::/32 maxlen: 32
2a0e:2440::/29 maxlen: 29
2a0c:7883::/32 maxlen: 32
2a0e:e980::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:a02::/32 maxlen: 32
2a0f:e600:1::/48 maxlen: 48
2a0f:e6c0:123::/48 maxlen: 48
2a0f:a04::/32 maxlen: 32
2a0c:7882:1::/48 maxlen: 48
2a0f:e143::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55939286 (0x35590d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 30 13:48:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f34c443ba03892fcb924d9cad5f48a3ae3d8568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:fb:cc:31:70:26:6a:8a:61:c2:13:d2:d0:
ca:47:86:9e:b6:9b:c9:56:6e:db:70:c0:67:ec:8b:
9b:10:28:9c:bd:e9:72:0c:b0:93:b1:54:4a:5f:9a:
fc:aa:1d:5d:7a:5e:b5:b3:3f:6f:39:4c:11:2c:68:
c3:f3:67:52:a4:af:96:70:20:a8:6c:57:2f:28:05:
74:f6:81:dd:8e:7c:60:f1:83:7a:94:0e:cc:b8:9b:
7a:ae:a8:fe:ce:60:fc:c7:86:83:6b:ac:09:30:4c:
12:33:db:86:0a:8c:6d:d6:9d:e3:82:53:37:53:9e:
b6:c9:5c:42:b2:92:6e:47:fe:29:85:59:84:bc:f3:
ed:91:31:32:8c:34:a3:1c:30:4d:bd:6d:72:b3:08:
54:ab:fa:a8:5a:5e:b1:fa:61:6b:0b:f5:40:79:2c:
c2:e1:74:a8:c7:ac:64:61:80:84:ef:a9:2b:5f:10:
a9:b3:41:44:b2:cc:88:95:01:80:7b:6e:e7:b1:f4:
df:78:9c:c5:97:41:f7:0d:31:ee:61:c5:e1:6c:7b:
8f:ad:52:72:ea:5c:ae:29:05:70:bc:fe:78:1f:29:
d6:81:53:46:df:f4:6a:4b:49:42:60:a5:96:d2:93:
4d:18:f8:a4:ff:2e:de:b7:6e:79:a7:42:56:f8:40:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:34:C4:43:BA:03:89:2F:CB:92:4D:9C:AD:5F:48:A3:AE:3D:85:68
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XzTEQ7oDiS_Lkk2crV9Io649hWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.186.0/24
45.86.246.0/24
45.91.208.0/24
45.91.211.0/24
45.95.98.0/24
45.128.77.0/24
45.137.41.0/24
45.137.85.0-45.137.86.255
45.153.21.0/24
45.153.23.0/24
45.153.218.0/23
45.154.230.0/23
45.157.36.0-45.157.38.255
45.158.197.0-45.158.198.255
91.212.100.0/24
91.212.107.0/24
103.229.31.0/24
113.30.152.0/22
185.136.204.0/24
185.164.59.0/24
193.39.209.0/24
193.41.39.0/24
193.41.122.0/23
193.111.4.0/23
193.111.18.0/23
IPv6:
2a09:17c0::/29
2a0a:2d00:1::/48
2a0c:7882:1::/48
2a0c:7883::/32
2a0e:2240:2::/48
2a0e:2440::/29
2a0e:e980::/29
2a0e:f200:1::-2a0e:f200:2:ffff:ffff:ffff:ffff:ffff
2a0f:a02::-2a0f:a04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:1f80::/29
2a0f:2100:171::/48
2a0f:6d80::/29
2a0f:a200::/29
2a0f:ac00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:df40::/29
2a0f:e143::/32
2a0f:e1c0::/32
2a0f:e1c2::/32
2a0f:e1c7::/32
2a0f:e600:1::/48
2a0f:e6c0:123::/48
2a0f:e6c0:991::/48
2a0f:e6c0:fe1::/48
2a0f:e842::/32
2a0f:e940::/29
Signature Algorithm: sha256WithRSAEncryption
9a:66:2d:d6:3e:8c:21:90:a8:2c:14:15:80:5a:b0:57:2c:08:
45:82:a9:0d:1b:c3:18:65:95:4b:2c:27:1e:31:25:ae:d8:a0:
81:b4:3a:3c:e0:96:90:55:5e:67:18:0f:81:91:16:1d:f8:c5:
0b:ee:42:af:2c:1b:98:95:44:81:75:5a:3a:e0:3d:fc:34:d6:
77:67:f7:1f:62:9e:dc:ef:53:a2:02:00:23:8f:80:e0:fe:24:
5e:b4:f6:13:1a:33:23:b4:07:28:04:ff:6c:96:fb:85:60:55:
7e:4b:03:36:b1:e0:ca:8e:f2:49:1a:90:33:c1:83:87:2a:8f:
76:26:f1:82:42:44:06:e0:65:ea:43:36:5e:bd:f6:26:bd:88:
30:59:d4:4e:66:fc:a3:61:20:cf:7a:e6:81:6c:f2:cb:44:cb:
82:77:e0:ab:16:f4:4f:08:05:ec:04:f9:62:b2:5f:3e:c7:9a:
67:c5:1d:30:de:a0:8e:8b:d8:18:ad:06:e7:96:23:78:46:46:
e5:88:3f:e0:d9:99:a1:5b:46:c3:0b:f1:94:f4:64:f0:55:c9:
06:7a:48:6c:12:da:ed:bc:40:43:ff:f8:53:85:61:3b:bc:bb:
86:de:4a:43:9c:1d:1d:e5:83:b4:39:fd:0d:a1:49:e3:e3:18:
5c:0e:ef:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:43:00 2025 by rpki-client