Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2gVUCh5uhJ7GLbcI8pN9zoHYl_s.roa
File: 2gVUCh5uhJ7GLbcI8pN9zoHYl_s.roa (raw, json)
Hash identifier: BKBAD5XSx51Xx5ot2F7II2KMD4LpHwRcrVHyC9lgwHQ=
Subject key identifier: DA:05:54:0A:1E:6E:84:9E:C6:2D:B7:08:F2:93:7D:CE:81:D8:97:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F38F33FC99C4CEC1F1347AE50433A6B2E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2gVUCh5uhJ7GLbcI8pN9zoHYl_s.roa
Signing time: Thu 02 May 2024 10:56:56 +0000
ROA not before: Thu 02 May 2024 10:56:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d07::/32 maxlen: 32
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:18c6::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 May 2024 18:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:f3:3f:c9:9c:4c:ec:1f:13:47:ae:50:43:3a:6b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 2 10:56:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da05540a1e6e849ec62db708f2937dce81d897fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:05:e7:e5:5d:38:3f:ec:dd:b8:2d:0f:0f:
c9:33:f2:f2:a3:93:a4:42:5d:f1:1a:52:32:0e:1c:
46:4d:58:66:b0:01:e6:96:73:fd:93:4f:8a:70:81:
06:01:4b:9b:73:85:09:7a:61:10:30:e8:50:3e:73:
fd:5c:e2:2d:f3:4a:bc:75:99:7b:af:6f:5c:2d:5c:
29:1b:98:11:9f:f7:cf:4c:6b:98:fb:e8:36:c5:19:
61:ed:4b:e5:22:cf:eb:bf:c1:47:6b:55:a5:e0:bb:
25:e6:ac:7e:67:c4:14:13:dc:ed:72:6c:30:d7:2e:
24:32:2d:48:d2:b6:4b:bc:3d:df:d7:9a:06:6c:f9:
4b:e5:85:e3:8d:47:b1:58:e4:ea:85:9a:72:ce:49:
91:d3:2b:00:12:b4:ad:65:9b:e4:de:4c:1c:cf:7b:
19:d8:cc:e0:f4:ac:d7:80:1f:ac:86:d3:7f:12:cf:
72:55:64:a0:8a:3a:a8:5b:24:4d:77:74:e2:fd:2e:
d7:89:7d:70:fa:ca:f4:02:79:bb:95:cd:e3:39:fa:
d0:b9:f2:48:3d:f7:4d:a5:3f:cb:a1:3e:b8:46:90:
4b:eb:78:61:a1:f5:87:c8:0b:b7:fe:1b:07:fa:c1:
a3:4b:7a:26:9b:22:8a:6d:1b:3b:7f:d9:87:ed:74:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:05:54:0A:1E:6E:84:9E:C6:2D:B7:08:F2:93:7D:CE:81:D8:97:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2gVUCh5uhJ7GLbcI8pN9zoHYl_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d84::/32
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:7d07::/32
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
2a13:18c6::/32
Signature Algorithm: sha256WithRSAEncryption
58:66:75:4c:96:49:e6:79:00:3a:93:1c:97:43:20:cf:35:83:
17:1f:c3:db:02:f8:c5:54:c1:a3:78:92:ce:23:af:b4:34:c2:
46:4c:d0:84:3f:e5:eb:cc:26:aa:a9:a5:4c:41:f0:3b:8b:30:
9a:ca:29:63:39:74:c8:fa:86:c4:95:27:7e:01:a5:86:3c:b8:
f7:88:d7:30:ec:ba:0a:64:9a:bc:1c:dd:cd:9a:12:63:ed:60:
bf:0d:1e:68:92:de:66:e0:8c:55:4b:b1:b6:83:27:81:96:c3:
63:b3:be:94:32:25:86:e2:74:52:e9:7e:40:fb:cf:b6:3b:50:
de:0a:91:ea:49:96:91:2b:27:07:e8:bd:7e:aa:2e:23:47:ea:
f7:4c:30:2b:e3:a3:6f:42:0a:ee:0b:d7:f4:a0:b5:fc:c5:fc:
5e:36:24:6b:5a:da:38:a0:69:db:37:95:0e:9d:da:72:84:27:
11:ea:bb:ad:0c:2e:96:1f:f2:e4:3b:69:36:6d:77:4e:2a:5e:
a7:ad:23:09:ef:15:1a:14:6a:98:33:f8:80:04:50:eb:ab:96:
0a:f3:e0:44:01:1d:25:8e:ec:a5:b6:b1:d6:d4:ca:0e:be:d3:
3d:ec:84:d7:1e:5f:ab:0b:ab:45:20:08:7a:2e:c5:b7:3f:64:
a1:c6:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:54 2025 by rpki-client