Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1czzGCc-moErSYONrHMTNNUKEKI.roa
File: 1czzGCc-moErSYONrHMTNNUKEKI.roa (raw, json)
Hash identifier: o1EODaNvyjCHPsy5YSzA3AxjqfEfvrsQwPbXMejO3Fk=
Subject key identifier: D5:CC:F3:18:27:3E:9A:81:2B:49:83:8D:AC:73:13:34:D5:0A:10:A2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01956CD1BEA5F9385CA447023E251BD83C9C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1czzGCc-moErSYONrHMTNNUKEKI.roa
Signing time: Thu 06 Mar 2025 18:57:19 +0000
ROA not before: Thu 06 Mar 2025 18:57:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 2.59.21.0/24 maxlen: 24
45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
45.128.246.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
45.146.130.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
93.190.244.0/24 maxlen: 24
185.9.52.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:2500::/29 maxlen: 29
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e202:100::/48 maxlen: 48
2a0f:e4c0::/29 maxlen: 29
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e7c6:88::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:e844:33::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a0f:fc00::/29 maxlen: 29
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Apr 2025 07:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:d1:be:a5:f9:38:5c:a4:47:02:3e:25:1b:d8:3c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 6 18:57:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5ccf318273e9a812b49838dac731334d50a10a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0d:d1:7e:7b:2e:92:ba:16:02:f0:6e:ed:c7:
44:02:f5:7d:e7:52:66:46:68:6e:8d:d1:f9:22:ad:
6b:3a:f1:42:e3:98:c5:8c:5a:a7:10:06:9b:2d:07:
d6:2c:83:8f:9e:69:41:71:f6:8c:41:8c:e4:92:88:
19:2f:56:d6:18:49:94:a1:9f:67:9f:33:78:0b:26:
40:af:30:32:13:56:ea:2b:77:27:cc:65:02:92:d4:
bf:ef:fc:6c:f8:17:4b:0a:22:67:a9:cd:2f:be:a9:
5b:12:60:dd:4d:96:cb:dc:5d:8a:7a:e5:64:0d:db:
0e:1a:a9:69:a5:ce:82:b1:82:46:02:9b:22:90:5a:
67:92:fe:92:71:dd:8f:58:d1:bb:90:85:9f:29:e7:
f7:98:a5:8b:93:37:bb:aa:62:64:e1:86:ba:c9:bb:
c4:12:52:c4:00:b3:50:6e:d8:43:c3:48:9d:16:74:
fc:95:4f:71:5d:2f:86:3b:56:48:c5:1c:3c:43:9c:
2b:df:13:0f:ae:e8:6a:fd:9e:9c:92:5a:29:9d:4c:
9f:af:8d:be:29:34:2b:84:54:1c:b7:c9:11:ce:eb:
f5:bd:df:ac:d7:16:58:c4:75:4f:95:8c:73:fd:06:
fc:32:de:29:7e:dd:d5:ad:db:fe:ca:2c:f0:fb:ca:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CC:F3:18:27:3E:9A:81:2B:49:83:8D:AC:73:13:34:D5:0A:10:A2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1czzGCc-moErSYONrHMTNNUKEKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.21.0/24
45.9.116.0/24
45.9.122.0/24
45.94.46.0/24
45.128.76.0/24
45.128.246.0/24
45.130.128.0/24
45.146.130.0/24
45.154.58.0/24
93.190.244.0/24
185.9.52.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:88::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:140::/29
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:2500::/29
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e202:100::/48
2a0f:e4c0::/29
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e7c6:88::/48
2a0f:e844:22::/48
2a0f:e844:33::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a0f:fc00::/29
2a12:ac46:77::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:55::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:7d80::/29
2a13:8c86:10a::/48
2a13:8c86:120::/48
2a13:8c86:130::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
4a:54:b3:d7:c8:de:0d:6a:a6:1f:10:a8:57:bf:40:bf:45:05:
8a:82:db:58:38:16:16:f4:5e:3f:e7:e4:77:8e:c6:24:61:51:
07:e0:ea:2b:41:fe:f2:ab:4e:6c:6e:26:25:59:9b:d2:80:f0:
d9:35:30:39:9b:42:c7:09:e9:71:f4:d0:31:bc:42:f1:06:ff:
78:73:6a:41:88:cc:35:6c:b1:a8:f8:30:1b:ee:de:de:a2:4b:
2e:63:00:0c:a8:f0:28:34:0d:85:9a:01:7a:9f:b2:ca:c5:58:
8d:fd:f0:ad:7a:0b:fd:df:fe:31:6a:c5:ba:23:b4:bc:4c:e9:
bb:6e:48:05:e8:c9:1b:f2:dd:fe:a7:4b:9a:1b:15:0b:83:7c:
ad:da:b4:16:cd:67:05:b2:66:a4:a9:35:91:b7:43:e9:aa:89:
98:02:ea:a6:86:a2:d6:a6:f9:59:c5:4f:18:a6:8a:ca:a9:be:
36:97:23:f4:e7:65:1b:cd:29:06:97:77:85:76:97:a8:79:8f:
1b:14:d9:8c:d2:3b:6d:fd:1e:43:c0:88:41:da:a4:02:77:47:
3e:9b:6c:c6:12:39:10:78:de:0d:c1:ad:53:f0:aa:d7:f6:3f:
f5:82:ef:5a:2f:4b:76:7a:fb:c4:88:9b:67:2f:74:c5:07:bd:
74:c1:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:36:44 2025 by rpki-client