Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4ESxNeMmB6EVTI30KbDyNDW_btA.roa
File: 4ESxNeMmB6EVTI30KbDyNDW_btA.roa (raw, json)
Hash identifier: QkCmggH8cKXkZ8OUgc1j52LRhvIuFGPip+IdlM5Opes=
Subject key identifier: E0:44:B1:35:E3:26:07:A1:15:4C:8D:F4:29:B0:F2:34:35:BF:6E:D0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195484E36EC25CBA272BA69ABE05E338BE0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4ESxNeMmB6EVTI30KbDyNDW_btA.roa
Signing time: Thu 27 Feb 2025 16:47:20 +0000
ROA not before: Thu 27 Feb 2025 16:47:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 2.59.21.0/24 maxlen: 24
45.9.116.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.94.46.0/24 maxlen: 24
45.128.76.0/24 maxlen: 24
45.128.246.0/24 maxlen: 24
45.130.128.0/24 maxlen: 24
45.146.130.0/24 maxlen: 24
45.154.58.0/24 maxlen: 24
93.190.244.0/24 maxlen: 24
185.9.52.0/24 maxlen: 24
193.8.215.0/24 maxlen: 24
2a04:9f40::/29 maxlen: 29
2a06:1184:101::/48 maxlen: 48
2a06:3bc0::/29 maxlen: 29
2a07:8a40::/29 maxlen: 29
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:140::/29 maxlen: 29
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:2500::/29 maxlen: 29
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:cc00::/29 maxlen: 29
2a0f:d200::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:db40::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a0f:e040::/29 maxlen: 29
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e202:100::/48 maxlen: 48
2a0f:e4c0::/29 maxlen: 29
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e7c6:88::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:e844:33::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a0f:fc00::/29 maxlen: 29
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:7d80::/29 maxlen: 29
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Mar 2025 18:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:4e:36:ec:25:cb:a2:72:ba:69:ab:e0:5e:33:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 27 16:47:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e044b135e32607a1154c8df429b0f23435bf6ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:dd:c2:de:86:9c:9e:ff:5a:78:32:81:7f:
74:d8:86:e2:f6:56:c7:e7:c2:61:e9:50:79:93:b2:
e6:1c:9b:0a:c6:8a:b8:e0:69:1f:06:98:5b:19:2a:
11:e7:bb:ed:79:3a:a3:99:06:ba:ff:35:a2:71:22:
88:b4:66:79:74:b4:44:4d:f7:16:b4:ea:e0:86:bf:
c5:90:f4:51:f8:be:8b:01:d1:01:f7:e8:25:ca:f5:
12:48:dd:26:7c:8b:2e:7d:91:d5:a8:ea:9b:27:5f:
9f:91:d3:69:fa:3b:ad:3d:ca:6c:52:9f:42:3f:93:
4f:8d:96:75:85:ac:18:ec:37:e0:a7:cd:82:a2:af:
80:2e:4b:78:c8:7e:b9:2b:ee:66:32:2c:2a:45:39:
84:46:f8:d1:c5:7f:9d:01:3c:f1:ca:0f:c3:4b:5c:
f6:ac:fb:28:4e:8f:36:15:ac:01:bf:67:e1:04:17:
7a:62:a8:ac:42:70:7d:35:34:88:be:d5:3c:70:b8:
e4:68:53:18:4c:f8:b1:53:ba:6b:5e:37:47:cb:7e:
bd:ad:1e:98:a3:91:4b:02:8e:11:a3:95:af:76:04:
9b:57:8b:ba:1d:96:f1:6c:e8:fd:44:f1:0f:2e:73:
ce:10:32:87:e2:bc:2e:c0:39:01:26:9e:c6:a6:1f:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:44:B1:35:E3:26:07:A1:15:4C:8D:F4:29:B0:F2:34:35:BF:6E:D0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4ESxNeMmB6EVTI30KbDyNDW_btA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.21.0/24
45.9.116.0/24
45.9.122.0/24
45.94.46.0/24
45.128.76.0/24
45.128.246.0/24
45.130.128.0/24
45.146.130.0/24
45.154.58.0/24
93.190.244.0/24
185.9.52.0/24
193.8.215.0/24
IPv6:
2a04:9f40::/29
2a06:1184:101::/48
2a06:3bc0::/29
2a07:8a40::/29
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:88::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:140::/29
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:2500::/29
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:cc00::/29
2a0f:d200::/29
2a0f:da40::/29
2a0f:db40::/29
2a0f:dfc0::/29
2a0f:e040::/29
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e202:100::/48
2a0f:e4c0::/29
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e7c6:88::/48
2a0f:e844:22::/48
2a0f:e844:33::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a0f:fc00::/29
2a12:ac46:77::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:55::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:7d80::/29
2a13:8c86:10a::/48
2a13:8c86:120::/48
2a13:8c86:130::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
5c:1b:a0:f5:5f:98:22:20:56:09:b1:32:bd:2a:1a:b2:28:9d:
b3:39:f8:67:f1:bc:aa:56:af:97:f4:1b:0b:9a:f5:a4:8f:f4:
5e:7b:fd:81:14:1a:13:ed:1b:1e:82:58:69:3a:3d:9c:7a:7c:
78:0e:ae:ce:7c:b5:bc:1f:89:16:13:42:d2:9c:46:5c:92:5c:
21:f5:cf:52:92:66:e5:ff:72:8b:6e:90:73:54:66:30:a7:fb:
3e:03:a7:46:b4:de:bb:f5:50:ac:33:6a:26:2a:b6:1f:81:e8:
a6:c1:a9:fe:e3:9a:bd:9a:5e:5a:be:3b:50:10:c4:27:32:26:
25:6c:6b:ec:aa:f6:08:04:a5:28:3a:42:5a:64:8a:89:48:2f:
fe:f2:d8:a5:7c:1b:47:47:7e:70:25:ee:2d:19:f3:de:52:e5:
cc:87:f9:21:26:7d:f3:b1:c7:1c:1c:00:28:34:9d:8f:84:4e:
77:01:f5:f0:16:97:81:a9:16:ee:99:3d:bb:ee:8f:e2:bb:29:
26:26:28:b7:9f:7f:d1:c5:91:2a:7b:92:66:af:f0:ea:0e:fc:
44:ce:14:fd:7e:4d:f2:b0:59:c5:67:66:2e:65:0d:29:6a:1e:
63:e6:77:d2:6e:b0:b6:88:01:5b:77:a5:7a:16:5a:19:76:23:
0e:4e:65:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:17 2025 by rpki-client