Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4ixHYUk3WnH3rPEDOn55Ae9WdOc.roa
File: 4ixHYUk3WnH3rPEDOn55Ae9WdOc.roa (raw, json)
Hash identifier: Wp7iIZOYXaIfiY78PwQsl7OWsJhj65LaqvP+bv1y35c=
Subject key identifier: E2:2C:47:61:49:37:5A:71:F7:AC:F1:03:3A:7E:79:01:EF:56:74:E7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019007ACF932C77747703EB92B9C02EF47BA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4ixHYUk3WnH3rPEDOn55Ae9WdOc.roa
Signing time: Tue 11 Jun 2024 14:21:34 +0000
ROA not before: Tue 11 Jun 2024 14:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a0e:1a80::/32 maxlen: 32
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:3d83::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a0f:e1c7:1::/48 maxlen: 48
2a0f:e847:2::/48 maxlen: 48
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Jun 2024 06:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:ac:f9:32:c7:77:47:70:3e:b9:2b:9c:02:ef:47:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 11 14:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e22c476149375a71f7acf1033a7e7901ef5674e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:47:95:c3:79:c5:0d:41:fe:99:c3:45:29:
1f:be:4b:5f:3b:f4:99:e5:9d:09:62:9d:92:19:36:
20:9a:75:1d:4e:99:33:58:b6:c4:5d:38:91:ce:12:
3f:72:27:c5:89:85:82:84:94:cf:05:38:3a:f7:59:
3c:d2:9e:75:5f:46:3e:e2:8e:3d:1e:e6:a8:c4:20:
b5:dd:79:a6:8e:1a:f6:d1:a7:8b:87:f5:1e:96:88:
90:57:10:fe:f5:3e:ec:14:a3:7b:b6:39:f3:69:c5:
59:17:26:58:d3:f5:78:0a:75:90:c7:04:62:4d:a2:
1a:8e:6a:a0:a5:a5:1e:29:32:ee:38:a5:e9:5f:4f:
18:b8:ca:2f:8f:a7:0d:b0:e9:31:d3:29:26:bf:ee:
ed:2a:57:ff:e1:c6:37:22:48:68:57:99:9e:82:91:
9f:2e:5f:7b:ba:86:9b:b1:8d:89:4a:98:9c:e1:5a:
48:e7:8b:20:b7:63:4b:37:5a:c3:d1:10:97:11:82:
0f:9b:70:6a:85:08:72:59:9d:d2:48:39:b5:71:65:
99:ef:11:64:91:0d:27:6f:af:7f:05:77:d8:4f:a0:
0a:50:a7:c3:b0:cf:7c:d7:6c:5a:cb:ea:01:e8:4a:
6c:b3:ef:a4:67:6a:e1:04:4f:12:3e:65:9f:53:52:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:47:61:49:37:5A:71:F7:AC:F1:03:3A:7E:79:01:EF:56:74:E7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4ixHYUk3WnH3rPEDOn55Ae9WdOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:2f80::/29
2a0f:3d83::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a0f:e1c7:1::/48
2a0f:e847:2::/48
2a0f:e940::/29
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:f540::/29
2a13:18c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
86:e7:85:79:9e:ae:0b:be:f5:a9:e8:70:03:69:1b:54:11:1d:
39:ce:38:39:38:b7:94:f0:93:87:c1:dd:0e:6b:cb:88:c4:a6:
3d:d6:94:29:66:38:f9:d9:01:b7:46:04:e2:3b:90:05:e0:3c:
b1:f0:a7:a6:27:28:02:af:69:88:c5:89:fd:a0:6a:12:be:ce:
cd:9e:58:68:4f:b2:60:19:4a:35:97:05:1d:da:dc:6d:7f:0c:
2e:02:2a:b5:25:2f:e2:45:32:ec:5f:72:e0:3c:38:5e:16:81:
18:15:bf:eb:54:6e:31:5a:ea:aa:f1:62:08:66:35:8c:79:f4:
85:e6:34:f4:36:43:15:30:47:e8:b0:6d:a8:36:5e:ef:2c:3b:
22:96:41:d8:3e:0b:90:26:54:68:f6:b9:c2:c2:4f:cc:dc:47:
d9:3b:79:b7:57:12:f0:5f:05:e7:37:75:84:ed:3b:f3:2a:f5:
2b:5f:54:da:79:f1:04:58:b9:77:89:bd:12:4a:fa:12:38:18:
f4:5c:f1:41:9c:14:03:8d:18:de:ac:e5:fa:e8:61:8b:a1:a9:
cb:68:cb:1c:7e:81:f6:94:85:26:58:30:6e:a4:ed:06:b3:7b:
0c:28:4f:14:ac:4d:f5:5a:74:49:4e:a8:5d:35:28:1e:a2:b2:
1a:00:a1:ce
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgISAZAHrPkyx3dHcD65K5wC70e6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNjExMTQyMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjJjNDc2MTQ5Mzc1YTcxZjdhY2YxMDMzYTdlNzkwMWVmNTY3NGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnFHlcN5xQ1B/pnDRSkfvktfO/SZ
5Z0JYp2SGTYgmnUdTpkzWLbEXTiRzhI/cifFiYWChJTPBTg691k80p51X0Y+4o49
HuaoxCC13Xmmjhr20aeLh/UeloiQVxD+9T7sFKN7tjnzacVZFyZY0/V4CnWQxwRi
TaIajmqgpaUeKTLuOKXpX08YuMovj6cNsOkx0ykmv+7tKlf/4cY3IkhoV5megpGf
Ll97uoabsY2JSpic4VpI54sgt2NLN1rD0RCXEYIPm3BqhQhyWZ3SSDm1cWWZ7xFk
kQ0nb69/BXfYT6AKUKfDsM9812xay+oB6Epss++kZ2rhBE8SPmWfU1Jl2QIDAQAB
o4IDGzCCAxcwHQYDVR0OBBYEFOIsR2FJN1px96zxAzp+eQHvVnTnMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvNGl4SFlVazNXbkgzclBFRE9uNTVBZTlXZE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjAYBAIAATASAwQA
LYF/AwQALYclAwQAwaTHMIH9BAIAAjCB9gMFACoOGoADBQAqDseAAwcAKg7yAQAB
AwcAKg8eAAEjAwcAKg8eAARWAwcAKg8eAAmHAwcAKg8eAAq8AwcAKg8eAN75AwcA
Kg8eAQABAwcAKg8egQACAwcAKg8egRKTAwcAKg8egUMZAwcAKg8egZLoAwcAKg8e
gaPQAwcAKg8egc2uAwUDKg8ugAMFAyoPL4AwDgMFACoPPYMDBQAqDz2EAwUAKg89
hwMHACoPfQIAAQMFACoP4cYDBwAqD+HHAAEDBwAqD+hHAAIDBQMqD+lAAwUDKhBt
QAMFAyoR/YADBQEqEqxAAwUDKhL1QAMHACoTGMAAATANBgkqhkiG9w0BAQsFAAOC
AQEAhueFeZ6uC771qehwA2kbVBEdOc44OTi3lPCTh8HdDmvLiMSmPdaUKWY4+dkB
t0YE4juQBeA8sfCnpicoAq9piMWJ/aBqEr7OzZ5YaE+yYBlKNZcFHdrcbX8MLgIq
tSUv4kUy7F9y4Dw4XhaBGBW/61RuMVrqqvFiCGY1jHn0heY09DZDFTBH6LBtqDZe
7yw7IpZB2D4LkCZUaPa5wsJPzNxH2Tt5t1cS8F8F5zd1hO078yr1K19U2nnxBFi5
d4m9Ekr6EjgY9FzxQZwUA40Y3qzl+uhhi6Gpy2jLHH6B9pSFJlgwbqTtBrN7DChP
FKxN9Vp0SU6oXTUoHqKyGgChzg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:26:05 2025 by rpki-client