Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-v3uBg04my9haAn6vN1RbHonKdc.roa
File: 1-v3uBg04my9haAn6vN1RbHonKdc.roa (raw, json)
Hash identifier: P3B9OD2/BIO6TRxkK9/hA0cGNLjQKnZxw0peyvPXgK0=
Subject key identifier: FA:FD:EE:06:0D:38:9B:2F:61:68:09:FA:BC:DD:51:6C:7A:27:29:D7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192CDF6812D7E15A58B4FA294338D7F0C95
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-v3uBg04my9haAn6vN1RbHonKdc.roa
Signing time: Sun 27 Oct 2024 12:32:17 +0000
ROA not before: Sun 27 Oct 2024 12:32:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a07:f300::/29 maxlen: 29
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 31 Oct 2024 18:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:f6:81:2d:7e:15:a5:8b:4f:a2:94:33:8d:7f:0c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 27 12:32:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fafdee060d389b2f616809fabcdd516c7a2729d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:ae:dd:ae:99:a7:1e:32:6b:1f:98:31:a9:
27:87:fd:2d:63:75:2f:58:3f:b7:fa:1b:c7:8c:63:
3d:ce:46:0a:27:53:33:e3:1f:9d:27:e1:5e:92:ba:
91:48:3a:c5:75:08:ef:ee:b8:33:bb:a6:34:08:53:
89:60:8d:50:b1:d9:b9:df:5c:f6:79:b0:e6:4b:cf:
b1:36:df:ff:45:5c:6d:c3:d5:24:b2:89:fa:cc:82:
73:6b:ea:76:cd:67:a3:f6:07:36:8c:ae:7d:38:c1:
ed:3b:e8:03:12:1c:31:55:76:01:4a:17:ad:a7:fb:
fc:19:7e:58:4a:9c:f8:1b:35:3b:e1:84:56:eb:55:
f5:e7:55:1c:75:a9:44:df:a2:f0:12:71:68:7f:ae:
0e:ae:10:71:be:e9:01:68:73:54:e6:60:08:42:6d:
81:9b:3d:bb:af:9c:f3:26:60:f0:78:3e:37:a9:79:
c1:83:77:be:a1:db:e1:02:21:99:54:5a:94:20:5c:
ed:fd:51:ea:69:f6:68:0b:5e:38:95:98:d5:05:3c:
04:13:a4:80:37:a0:b6:c0:ec:71:e7:9a:da:ef:ac:
52:a5:e1:6f:51:48:5e:ab:14:ab:11:8a:bb:e5:39:
27:a1:df:61:d2:9f:97:ad:62:b9:80:29:09:72:75:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FD:EE:06:0D:38:9B:2F:61:68:09:FA:BC:DD:51:6C:7A:27:29:D7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-v3uBg04my9haAn6vN1RbHonKdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a07:f300::/29
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:1a83:66::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
07:0a:94:88:bd:07:88:de:0b:bd:7b:08:71:4a:b7:96:d0:a6:
64:f9:bd:e3:b6:89:4b:5c:36:cc:02:13:b2:9d:3b:34:ca:aa:
7e:1e:3b:4a:bb:78:31:c9:94:f5:65:bc:53:3f:e4:99:4a:f4:
9a:b1:7b:32:95:a2:c6:16:24:e6:24:5b:37:16:55:d6:82:b3:
7e:95:24:64:5f:26:e8:b3:6b:0a:13:88:76:83:f3:c6:5d:d8:
c7:a1:7b:70:08:11:e6:c7:d6:da:1a:39:73:d9:66:7a:de:cc:
94:bb:39:7e:c0:c0:11:07:39:f7:5c:25:f2:11:fd:30:f3:64:
85:8b:0b:11:84:55:19:d9:5a:aa:ef:cc:5d:6b:ae:fa:1d:e9:
23:12:19:15:54:39:6b:72:72:04:51:bc:26:96:63:47:c5:21:
39:60:b5:a9:33:97:d2:9d:ea:4e:ef:30:8d:89:42:e2:25:40:
75:55:d9:ff:03:7e:64:98:38:99:1d:f5:50:74:cd:32:c9:1f:
fd:46:ab:b6:95:1d:14:15:31:30:5b:a5:8d:c5:a8:a3:cc:bf:
d7:cc:82:86:4a:47:fd:45:32:e5:0a:b7:09:6a:d8:e7:76:08:
55:3f:76:47:20:6f:b9:58:f3:b7:77:d7:2c:39:ad:43:4c:d7:
7b:0a:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:12 2025 by rpki-client