Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/29n2tImtQPXKxR_dYKJQMSP9khg.roa
File: 29n2tImtQPXKxR_dYKJQMSP9khg.roa (raw, json)
Hash identifier: qzv8L3FBOp9Vjr0boOvwWHRbRgSbN+pQgJpmEVNkUak=
Subject key identifier: DB:D9:F6:B4:89:AD:40:F5:CA:C5:1F:DD:60:A2:50:31:23:FD:92:18
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01958F893B55E99EA25D4FF4F6C0F3F3B0EC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/29n2tImtQPXKxR_dYKJQMSP9khg.roa
Signing time: Thu 13 Mar 2025 12:44:50 +0000
ROA not before: Thu 13 Mar 2025 12:44:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.86.247.0/24 maxlen: 24
45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:9380::/29 maxlen: 29
2a13:df00::/29 maxlen: 29
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Mar 2025 15:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:89:3b:55:e9:9e:a2:5d:4f:f4:f6:c0:f3:f3:b0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 13 12:44:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbd9f6b489ad40f5cac51fdd60a2503123fd9218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:9b:ce:15:5e:17:d0:1e:b7:81:38:a0:1a:
15:be:da:aa:d2:2e:7c:05:09:74:75:b3:eb:96:e5:
a5:73:cd:41:69:d3:ad:2f:98:87:18:07:48:90:11:
73:23:08:05:c7:d7:04:2c:1b:b7:dc:99:b5:b5:e1:
20:9a:15:1f:9c:44:2a:5e:7d:3c:e5:e7:90:c7:ce:
5a:6b:f0:2b:fe:01:c4:97:fa:e8:da:0e:14:db:af:
44:ce:28:82:31:3a:7b:30:f0:ab:f7:5a:8f:f6:3d:
87:f7:d9:d6:51:cb:e0:83:48:f5:10:d4:fe:0b:3c:
1d:b7:fd:7d:2c:32:c0:a4:2f:36:3e:70:d6:d1:1b:
d4:8f:90:2a:71:53:30:35:7a:09:ec:dd:35:9f:95:
a0:a2:b6:6a:52:b6:b4:40:bd:10:6f:37:06:36:74:
55:28:44:b9:01:c7:b5:20:c8:00:9e:50:c1:7d:36:
da:3b:bb:2d:11:f4:8b:cd:0e:8c:ac:5c:bc:f0:fd:
bd:1d:eb:3c:58:36:27:51:20:4e:58:1c:69:26:36:
28:d5:15:d5:ed:e4:15:45:d0:f2:57:27:62:36:b9:
d3:41:03:72:75:ee:97:72:cf:5c:21:25:d0:8a:8d:
e9:df:8d:0b:2a:57:12:c4:1e:54:ac:6a:1c:d2:47:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:F6:B4:89:AD:40:F5:CA:C5:1F:DD:60:A2:50:31:23:FD:92:18
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/29n2tImtQPXKxR_dYKJQMSP9khg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.247.0/24
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:9380::/29
2a13:df00::/29
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
b5:65:76:d0:21:60:41:3b:35:98:43:65:b5:b7:c4:46:4e:3f:
a7:f2:6e:d2:40:59:a6:5a:14:81:07:be:ee:b5:41:5c:c5:8e:
c9:b8:72:89:a6:00:b8:6a:26:12:6a:d2:88:87:54:29:9b:e6:
9c:c8:50:d2:9c:70:d9:ab:3a:97:f9:69:c4:4f:42:9e:41:bb:
cc:73:45:8d:29:76:77:0b:40:c3:8e:dc:c8:78:15:c8:0b:0f:
6a:15:6c:15:e6:80:80:ca:3b:20:e9:65:05:5f:4c:aa:0a:ba:
d6:21:b7:62:6e:d7:89:39:e1:0e:74:16:4d:f0:27:d7:fb:64:
cb:40:32:c6:2d:70:7e:13:e2:a6:b7:78:8b:c9:d1:97:da:23:
9e:57:8c:ce:0b:55:9b:f8:16:e0:a5:9a:c9:4d:46:0a:46:c5:
97:7b:22:34:e2:79:76:c4:89:b9:99:bb:13:ee:23:73:94:8d:
00:9f:24:5c:cb:5d:5b:5f:8d:d3:09:11:a4:ba:0a:77:2b:1e:
9b:eb:1f:9e:78:11:86:c6:0b:25:f3:1a:e1:40:ff:8e:2d:ee:
72:7a:6a:3f:14:28:53:b5:fe:8c:1a:66:d9:e8:d5:a2:b8:36:
ae:11:e5:f9:5a:8f:5c:32:47:34:4f:19:34:ee:4d:9f:c2:9b:
9f:1b:56:c6
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAZWPiTtV6Z6iXU/09sDz87DsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzEzMTI0NDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmQ5ZjZiNDg5YWQ0MGY1Y2FjNTFmZGQ2MGEyNTAzMTIzZmQ5MjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MmbzhVeF9Aet4E4oBoVvtqq0i58
BQl0dbPrluWlc81BadOtL5iHGAdIkBFzIwgFx9cELBu33Jm1teEgmhUfnEQqXn08
5eeQx85aa/Ar/gHEl/ro2g4U269EziiCMTp7MPCr91qP9j2H99nWUcvgg0j1ENT+
Czwdt/19LDLApC82PnDW0RvUj5AqcVMwNXoJ7N01n5WgorZqUra0QL0QbzcGNnRV
KES5Ace1IMgAnlDBfTbaO7stEfSLzQ6MrFy88P29Hes8WDYnUSBOWBxpJjYo1RXV
7eQVRdDyVydiNrnTQQNyde6Xcs9cISXQio3p340LKlcSxB5UrGoc0kcaTwIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFNvZ9rSJrUD1ysUf3WCiUDEj/ZIYMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvMjluMnRJbXRRUFhLeFJfZFlLSlFNU1A5a2hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjAqBAIAATAkAwQA
LVb3AwQALYF/AwQALYclAwQAUP36AwQAZ4syAwQAwaTHMIIBEgQCAAIwggEKAwcA
KgYRhAAzAwcAKgotBgAzAwcAKgx4hgAzAwcAKg4agCVBAwUAKg7HgAMHACoO8gEA
AQMHACoPHgABIwMHACoPHgAEVgMHACoPHgAJhwMHACoPHgAKvAMHACoPHgDe+QMH
ACoPHgEAAQMHACoPHoEAAgMHACoPHoESkwMHACoPHoFDGQMHACoPHoGS6AMHACoP
HoGj0AMHACoPHoHNrgMFAyoPLoADBQAqDz2EAwcAKg99AgABAwUAKg/hxgMFAyoQ
bUADBQMqEf2AAwUBKhKsQAMHACoS7MQiEwMFAyoS9UADBwAqExjAAAEDBQAqE5KA
AwUDKhOTgAMFAyoT3wADBwAqE+EBAAIwDQYJKoZIhvcNAQELBQADggEBALVldtAh
YEE7NZhDZbW3xEZOP6fybtJAWaZaFIEHvu61QVzFjsm4commALhqJhJq0oiHVCmb
5pzIUNKccNmrOpf5acRPQp5Bu8xzRY0pdncLQMOO3Mh4FcgLD2oVbBXmgIDKOyDp
ZQVfTKoKutYht2Ju14k54Q50Fk3wJ9f7ZMtAMsYtcH4T4qa3eIvJ0ZfaI55XjM4L
VZv4FuClmslNRgpGxZd7IjTieXbEibmZuxPuI3OUjQCfJFzLXVtfjdMJEaS6Cncr
HpvrH554EYbGCyXzGuFA/44t7nJ6aj8UKFO1/owaZtno1aK4Nq4R5flaj1wyRzRP
GTTuTZ/Cm58bVsY=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:35 2025 by rpki-client