Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6oGqvwB56Mqe1PhSZHTpEM7lG6U.roa
File: 6oGqvwB56Mqe1PhSZHTpEM7lG6U.roa (raw, json)
Hash identifier: AnboO2uhIh4/zlM0i2gIcmtPQLng4jXqqUC9t4cXgMM=
Subject key identifier: EA:81:AA:BF:00:79:E8:CA:9E:D4:F8:52:64:74:E9:10:CE:E5:1B:A5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D11F39B1F53430906F9BBD6E8CF096ED4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6oGqvwB56Mqe1PhSZHTpEM7lG6U.roa
Signing time: Tue 16 Jan 2024 11:06:34 +0000
ROA not before: Tue 16 Jan 2024 11:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a05:b900::/29 maxlen: 29
2a0e:1a80::/32 maxlen: 32
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2100::/29 maxlen: 29
2a0f:3d80:123::/48 maxlen: 48
2a0f:3d82::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
2a0f:3d87::/32 maxlen: 32
2a0f:7d01::/32 maxlen: 32
2a0f:e940::/29 maxlen: 29
2a10:6d40::/29 maxlen: 29
2a12:ac41::/32 maxlen: 32
2a13:18c0:1::/48 maxlen: 48
2a13:18c3::/32 maxlen: 32
2a13:4900::/29 maxlen: 29
2a13:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 16 Jan 2024 15:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:f3:9b:1f:53:43:09:06:f9:bb:d6:e8:cf:09:6e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 16 11:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea81aabf0079e8ca9ed4f8526474e910cee51ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:af:e8:a8:f1:b7:0c:d4:22:73:a7:03:96:
5e:ab:52:ef:85:3b:58:71:21:81:5d:40:5e:89:bc:
bf:de:22:19:9f:42:b9:e5:67:0f:b2:b4:ec:8c:bd:
7e:3e:0f:2e:10:12:da:22:9d:8b:c1:ea:be:e7:fd:
da:14:2a:47:2e:9d:86:b7:32:42:1c:db:e9:fc:6e:
81:b4:0b:03:7f:8f:8c:a9:1a:0c:22:9a:e9:ba:a7:
e1:c0:ab:a4:9f:56:0a:20:7d:07:51:2d:d3:df:67:
0c:69:4d:76:ae:15:ee:d1:ba:f0:46:d8:50:10:a5:
6d:db:c3:cc:4e:39:ed:72:a2:7e:72:55:36:03:01:
00:df:0f:ec:c9:58:7e:30:9d:2f:b3:d5:b2:c7:ab:
c7:2b:63:0b:56:49:ca:17:83:22:d9:3c:12:c3:95:
c2:70:41:06:0a:ef:f4:c8:71:d5:55:4f:a6:2d:64:
c9:f5:75:0c:d7:9d:c4:6d:e7:8a:84:f5:ee:09:9e:
d3:5d:4f:13:6b:9e:cd:bf:13:fd:82:ac:84:0e:6f:
64:3b:60:01:7c:51:af:da:95:d0:84:93:ae:c2:99:
71:32:4f:8f:dc:55:69:af:d8:b2:d7:ca:94:78:86:
3a:ea:75:67:47:74:72:30:b1:1d:f0:41:50:2f:ef:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:81:AA:BF:00:79:E8:CA:9E:D4:F8:52:64:74:E9:10:CE:E5:1B:A5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6oGqvwB56Mqe1PhSZHTpEM7lG6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
193.164.199.0/24
IPv6:
2a05:b900::/29
2a0e:1a80::/32
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2100::/29
2a0f:3d80:123::/48
2a0f:3d82::-2a0f:3d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:3d87::/32
2a0f:7d01::/32
2a0f:e940::/29
2a10:6d40::/29
2a12:ac41::/32
2a13:18c0:1::/48
2a13:18c3::/32
2a13:4900::/29
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
b2:dc:c8:6a:47:9f:71:2b:74:6d:91:45:fd:97:dd:f9:80:74:
21:5f:1b:e4:ef:0a:49:0f:0e:a8:61:42:96:d8:23:ef:86:1f:
ec:76:1f:15:be:43:10:b8:5e:73:7b:22:84:73:b4:a9:cf:54:
e6:00:64:71:ab:15:f8:68:f2:1c:d8:34:19:d3:af:51:f6:3d:
50:e4:55:0d:3e:59:66:ce:e2:37:e9:ca:43:67:83:58:e3:b2:
a2:f4:4c:17:36:be:01:87:f8:01:4f:e7:7d:73:50:1c:66:17:
ad:3d:87:26:63:21:f9:c4:a1:15:34:41:ff:ae:f4:2c:40:8c:
07:a1:27:6f:80:78:14:d1:00:08:92:c0:53:f6:2a:0b:37:ce:
e7:10:84:ed:95:7e:2e:58:af:89:5a:1b:f4:65:27:00:ef:27:
13:e5:4f:d3:6e:b5:ba:40:cf:fd:aa:8a:aa:d3:97:d4:17:95:
95:d8:cd:d6:3f:6d:0c:66:6a:f0:85:ae:36:cc:db:91:97:7f:
06:46:ad:7b:ad:e3:7d:05:f9:6d:3e:ea:0f:51:dd:72:68:f4:
c0:6d:a1:47:ab:02:5f:a7:0e:85:28:69:3e:7d:ce:10:67:d2:
e1:f2:73:ef:de:d7:63:36:1e:7e:cd:20:28:ae:10:d1:9d:45:
97:c0:13:c5
-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgISAY0R85sfU0MJBvm71ujPCW7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMTE2MTEwNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTgxYWFiZjAwNzllOGNhOWVkNGY4NTI2NDc0ZTkxMGNlZTUxYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy22v6KjxtwzUInOnA5Zeq1LvhTtY
cSGBXUBeiby/3iIZn0K55WcPsrTsjL1+Pg8uEBLaIp2Lweq+5/3aFCpHLp2GtzJC
HNvp/G6BtAsDf4+MqRoMIprpuqfhwKukn1YKIH0HUS3T32cMaU12rhXu0brwRthQ
EKVt28PMTjntcqJ+clU2AwEA3w/syVh+MJ0vs9Wyx6vHK2MLVknKF4Mi2TwSw5XC
cEEGCu/0yHHVVU+mLWTJ9XUM153EbeeKhPXuCZ7TXU8Ta57NvxP9gqyEDm9kO2AB
fFGv2pXQhJOuwplxMk+P3FVpr9iy18qUeIY66nVnR3RyMLEd8EFQL+/92QIDAQAB
o4IDEDCCAwwwHQYDVR0OBBYEFOqBqr8AeejKntT4UmR06RDO5RulMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvNm9HcXZ3QjU2TXFlMVBoU1pIVHBFTTdsRzZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBJAYIKwYBBQUHAQcBAf8EggETMIIBDzAYBAIAATASAwQA
LYF/AwQALYclAwQAwaTHMIHyBAIAAjCB6wMFAyoFuQADBQAqDhqAAwUAKg7HgAMH
ACoO8gEAAQMHACoPHgABIwMHACoPHgAEVgMHACoPHgAJhwMHACoPHgAKvAMHACoP
HgDe+QMHACoPHgEAAQMHACoPHoEAAgMHACoPHoESkwMHACoPHoFDGQMHACoPHoGS
6AMHACoPHoGj0AMHACoPHoHNrgMFAyoPIQADBwAqDz2AASMwDgMFASoPPYIDBQAq
Dz2EAwUAKg89hwMFACoPfQEDBQMqD+lAAwUDKhBtQAMFACoSrEEDBwAqExjAAAED
BQAqExjDAwUDKhNJAAMFAyoT/AAwDQYJKoZIhvcNAQELBQADggEBALLcyGpHn3Er
dG2RRf2X3fmAdCFfG+TvCkkPDqhhQpbYI++GH+x2HxW+QxC4XnN7IoRztKnPVOYA
ZHGrFfho8hzYNBnTr1H2PVDkVQ0+WWbO4jfpykNng1jjsqL0TBc2vgGH+AFP531z
UBxmF609hyZjIfnEoRU0Qf+u9CxAjAehJ2+AeBTRAAiSwFP2Kgs3zucQhO2Vfi5Y
r4laG/RlJwDvJxPlT9NutbpAz/2qiqrTl9QXlZXYzdY/bQxmavCFrjbM25GXfwZG
rXut430F+W0+6g9R3XJo9MBtoUerAl+nDoUoaT59zhBn0uHyc+/e12M2Hn7NICiu
ENGdRZfAE8U=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:01 2025 by rpki-client