Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9LoHRz__PDCZM77i0iqntYZW93I.roa
File: 9LoHRz__PDCZM77i0iqntYZW93I.roa (raw, json)
Hash identifier: rVUnvrew8mLpaR5izs9SwY7sIlHvIe9uj2I3K6MVT4Q=
Subject key identifier: F4:BA:07:47:3F:FF:3C:30:99:33:BE:E2:D2:2A:A7:B5:86:56:F7:72
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01955621A385021D5975371D4667B2B130AA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9LoHRz__PDCZM77i0iqntYZW93I.roa
Signing time: Sun 02 Mar 2025 09:13:19 +0000
ROA not before: Sun 02 Mar 2025 09:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 04 Mar 2025 17:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:56:21:a3:85:02:1d:59:75:37:1d:46:67:b2:b1:30:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 2 09:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ba07473fff3c309933bee2d22aa7b58656f772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:3f:cf:c1:86:e9:a5:d1:c9:5e:6f:5f:4a:
2d:c2:ae:6b:36:dd:47:4d:c6:5f:11:1a:7e:a1:f2:
8a:90:37:f4:8e:e6:c2:6b:6d:5a:1f:5a:1e:9f:32:
5a:6b:3b:96:0e:1c:8a:c9:19:99:ee:16:b9:ad:73:
16:4c:f2:9d:ea:f5:01:eb:7b:40:94:e1:dc:a7:b7:
85:ee:8c:c0:ff:d2:7b:60:03:70:67:1d:69:77:ca:
82:d5:4d:eb:94:48:60:0e:0b:b4:f3:c9:b4:ab:5d:
42:74:14:76:ac:2c:2b:19:fe:a0:82:b1:85:77:d4:
46:48:85:47:1e:ff:3d:3d:76:92:b2:4f:7f:5a:d3:
7d:e1:12:e3:f4:b2:82:90:d1:ec:80:90:de:5d:3b:
b8:5b:3e:4a:3e:72:6d:b2:88:93:f5:5e:52:57:5b:
35:3c:c6:20:99:52:09:71:74:92:9b:e7:c0:69:77:
64:f7:6f:24:d3:4d:4a:d7:de:ba:53:e8:fc:69:15:
63:9f:a1:97:42:a3:e2:db:18:66:f2:f6:1a:2c:3a:
77:95:06:3c:99:e1:cc:6a:e5:23:5b:1e:6b:92:6b:
e7:5c:b6:06:87:ed:3c:d2:5d:86:3a:d2:46:0e:0c:
a8:fc:4b:2e:8b:ae:2f:ed:e1:97:4c:27:b1:8f:f8:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BA:07:47:3F:FF:3C:30:99:33:BE:E2:D2:2A:A7:B5:86:56:F7:72
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9LoHRz__PDCZM77i0iqntYZW93I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
7f:03:65:e3:9f:b9:ee:fa:bf:c5:1d:63:8c:a9:23:3e:3f:e7:
2e:56:9a:da:bf:d2:55:b3:ef:ba:33:a7:13:f3:a8:cf:21:1d:
11:40:a1:67:f1:ad:bd:10:6b:c0:77:42:b7:1c:fa:dd:24:99:
4d:06:36:6e:b4:d4:ea:e4:c5:aa:92:9e:88:c4:70:ce:db:c0:
a9:bc:06:86:cb:f0:31:a1:7f:15:c0:c1:41:af:5f:5d:8a:4b:
f0:6e:b9:12:cb:20:82:40:12:01:2f:50:6b:10:c4:d2:b5:81:
c4:f1:63:7e:ac:b3:10:5c:8a:d8:9a:20:3e:33:4c:39:75:e8:
5d:15:76:8d:e5:cb:73:79:df:6d:15:22:9f:27:c1:dc:d6:f6:
32:03:b7:2b:e2:24:d6:b3:3f:ea:1c:24:69:13:bb:3d:da:2a:
bc:66:ed:0a:37:d9:17:0e:f7:1c:e9:f5:f3:63:1f:f5:09:4f:
86:31:aa:a8:5c:7e:e0:d8:f6:20:f5:ed:1f:6f:e2:36:9b:87:
79:de:c2:8e:cb:97:cd:72:a8:a4:e1:43:32:7e:cf:69:58:3b:
33:d1:0c:55:43:f5:87:d2:25:c7:27:0f:f4:41:45:07:5a:a2:
3b:cb:f6:6f:00:5b:e9:dd:5f:e9:da:4f:2b:d7:bc:dd:05:0a:
48:84:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:29 2025 by rpki-client