Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/ACmvZEddz705HJnskXb7xDXwnOk.roa
File: ACmvZEddz705HJnskXb7xDXwnOk.roa (raw, json)
Hash identifier: 7YHpP6Fl7br8pHcn4uzrOgpzvCTvvLvW9Jz5RLllXEg=
Subject key identifier: 00:29:AF:64:47:5D:CF:BD:39:1C:99:EC:91:76:FB:C4:35:F0:9C:E9
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 0194CFC07E8C32EBFBB5E2CC3E3C304DFCC5
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/ACmvZEddz705HJnskXb7xDXwnOk.roa
Signing time: Tue 04 Feb 2025 06:58:06 +0000
ROA not before: Tue 04 Feb 2025 06:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48011
IP address blocks: 5.172.177.0/24 maxlen: 24
45.89.236.0/22 maxlen: 24
45.93.168.0/22 maxlen: 24
45.93.168.0/24 maxlen: 24
45.252.180.0/23 maxlen: 23
45.252.180.0/24 maxlen: 24
45.252.181.0/24 maxlen: 24
45.252.182.0/23 maxlen: 23
45.252.182.0/24 maxlen: 24
45.252.183.0/24 maxlen: 24
62.204.58.0/24 maxlen: 24
77.87.122.0/24 maxlen: 24
87.236.161.0/24 maxlen: 24
91.247.188.0/24 maxlen: 24
103.92.118.0/23 maxlen: 24
103.130.145.0/24 maxlen: 24
103.130.147.0/24 maxlen: 24
103.215.238.0/23 maxlen: 24
185.182.105.0/24 maxlen: 24
185.211.79.0/24 maxlen: 24
185.217.143.0/24 maxlen: 24
185.227.136.0/24 maxlen: 24
185.227.137.0/24 maxlen: 24
185.227.138.0/24 maxlen: 24
185.227.139.0/24 maxlen: 24
193.163.72.0/24 maxlen: 24
213.217.31.0/24 maxlen: 24
213.232.203.0/24 maxlen: 24
2a0c:6600::/48 maxlen: 48
2a0c:6600:1::/48 maxlen: 48
2a0c:6600:2::/48 maxlen: 48
2a0c:6600:3::/48 maxlen: 48
2a0c:6600:4::/48 maxlen: 48
2a0c:6600:5::/48 maxlen: 48
2a0c:6600:6::/48 maxlen: 48
2a0c:6600:7::/48 maxlen: 48
2a0c:6600:8::/48 maxlen: 48
2a0c:6600:9::/48 maxlen: 48
2a0c:6600:1000::/48 maxlen: 48
2a0c:6600:2000::/48 maxlen: 48
2a0c:6600:3000::/48 maxlen: 48
2a0c:6600:4000::/48 maxlen: 48
2a0c:6600:6000::/48 maxlen: 48
2a0c:6600:6600::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Feb 2025 05:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:c0:7e:8c:32:eb:fb:b5:e2:cc:3e:3c:30:4d:fc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Feb 4 06:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0029af64475dcfbd391c99ec9176fbc435f09ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:79:12:a7:fd:29:2b:ac:5f:1a:e7:ab:a5:
bd:5a:37:fa:92:f3:70:b0:4c:24:52:55:76:b7:6f:
61:aa:09:7c:8d:34:61:51:f4:85:fa:de:62:28:30:
d4:c7:71:6f:ab:44:e3:46:ba:04:06:14:f0:a7:e1:
84:68:d3:8d:78:02:3f:1c:10:f6:25:ef:97:0c:96:
9d:fd:4f:d0:53:0d:42:56:2c:fb:12:25:03:de:b7:
66:21:40:f0:42:0b:fc:1c:13:fe:4f:ae:49:f1:fe:
50:59:80:19:e2:14:89:4a:68:ab:96:2d:2f:07:b0:
ee:c7:9c:62:40:d0:4b:60:38:ab:34:ad:f3:fd:42:
36:39:82:c6:15:ed:42:bd:3f:1d:d4:81:ed:97:46:
95:85:d2:3d:9e:dd:e8:d2:2f:10:9e:15:86:4f:0c:
fe:7b:4a:ce:c2:ca:5a:53:03:4f:1c:1c:d8:48:ce:
c3:aa:00:c5:c5:79:7f:36:43:84:4c:98:fc:14:ac:
57:73:70:09:a5:ee:dc:3e:d5:a5:02:22:a6:9a:47:
24:ae:1f:4a:2a:12:5c:8f:ce:a0:69:d5:8b:31:d2:
7f:3d:09:90:e8:8d:cd:2c:6c:0e:ae:5f:e7:07:27:
bf:93:44:e9:3a:0d:62:af:45:9f:2e:b2:0e:f9:c1:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:29:AF:64:47:5D:CF:BD:39:1C:99:EC:91:76:FB:C4:35:F0:9C:E9
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/ACmvZEddz705HJnskXb7xDXwnOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.177.0/24
45.89.236.0/22
45.93.168.0/22
45.252.180.0/22
62.204.58.0/24
77.87.122.0/24
87.236.161.0/24
91.247.188.0/24
103.92.118.0/23
103.130.145.0/24
103.130.147.0/24
103.215.238.0/23
185.182.105.0/24
185.211.79.0/24
185.217.143.0/24
185.227.136.0/22
193.163.72.0/24
213.217.31.0/24
213.232.203.0/24
IPv6:
2a0c:6600::-2a0c:6600:9:ffff:ffff:ffff:ffff:ffff
2a0c:6600:1000::/48
2a0c:6600:2000::/48
2a0c:6600:3000::/48
2a0c:6600:4000::/48
2a0c:6600:6000::/48
2a0c:6600:6600::/48
Signature Algorithm: sha256WithRSAEncryption
28:98:c6:0f:c6:4f:12:ec:18:b3:37:74:b9:6f:8b:71:ad:71:
5a:0a:57:5f:bf:3f:e2:31:ee:21:60:6f:d0:03:c2:3a:5e:4d:
77:54:8f:45:be:90:c3:a4:be:53:eb:fb:b3:2f:cf:dd:01:ee:
f5:87:14:2b:89:da:f7:99:e9:c9:a3:98:7f:8b:c2:6f:5a:39:
fc:a1:9f:36:8e:5c:81:98:63:45:8e:9f:a4:1a:68:2c:bd:4d:
08:90:7d:d6:3c:b8:72:3b:2c:8f:19:03:b0:62:30:01:f0:a8:
76:57:a3:d2:ee:0f:a0:73:f0:66:7a:42:63:4f:83:72:27:00:
7d:8e:ce:25:ff:68:bc:0f:75:39:c4:83:51:15:49:15:8a:d3:
25:f7:8d:0d:f9:f8:e5:c3:ab:c7:d7:d9:7a:7f:18:71:35:b4:
c0:72:bc:3d:e3:53:ed:0b:50:ec:49:d4:12:60:51:94:df:18:
c9:4c:d5:60:51:7f:94:49:c1:7a:ed:e8:19:a8:27:0d:e9:7f:
37:ad:8d:5f:0f:b9:35:89:8c:eb:68:00:27:54:c7:77:cb:91:
d8:54:a3:84:df:8e:a3:1f:aa:be:f5:f6:77:1f:56:41:f2:b4:
67:31:b4:2f:71:f4:06:4d:6d:5c:38:12:b5:f0:a8:8c:71:dd:
16:d6:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:30 2025 by rpki-client