Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ASs5OazyiRUY0UWM0Pf1O3JfPyA.roa
File: ASs5OazyiRUY0UWM0Pf1O3JfPyA.roa (raw, json)
Hash identifier: AptsU9AsIylpYYlH+Xy0cNKLQd7vbd9Ty2QUKulQfro=
Subject key identifier: 01:2B:39:39:AC:F2:89:15:18:D1:45:8C:D0:F7:F5:3B:72:5F:3F:20
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190FFAF6B7AD7B57DCDA16C2C0FC194C792
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ASs5OazyiRUY0UWM0Pf1O3JfPyA.roa
Signing time: Mon 29 Jul 2024 18:10:04 +0000
ROA not before: Mon 29 Jul 2024 18:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ac44:8426::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 31 Jul 2024 06:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ff:af:6b:7a:d7:b5:7d:cd:a1:6c:2c:0f:c1:94:c7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 29 18:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=012b3939acf2891518d1458cd0f7f53b725f3f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:24:a0:b9:59:1f:eb:6e:6c:07:c3:6e:19:
12:f6:46:a8:74:ca:79:ab:aa:4f:26:9e:42:45:8c:
5f:b0:28:e7:a3:88:2a:00:d3:08:2c:89:82:c5:8c:
34:67:de:b8:63:44:11:b8:bf:be:f5:9e:f7:25:59:
f4:c5:74:ba:76:85:53:8f:3d:02:22:c5:ce:1e:7e:
e7:59:1f:a0:17:5f:24:b0:0d:cf:d1:07:98:bf:3d:
88:0b:34:38:a5:ce:59:b4:c5:6d:fb:26:b7:66:5a:
6c:74:c9:f8:60:77:16:a9:ed:bb:29:da:1a:05:ed:
c6:d9:4c:1e:cd:47:2a:c0:ad:5d:0c:74:36:6d:47:
ec:20:32:08:67:a6:8d:d3:53:19:f8:a0:ad:e5:f5:
ae:c4:a0:c1:6d:bd:ea:c7:37:7c:a0:0d:ec:6d:82:
78:a6:f1:f7:54:11:78:99:bc:22:11:3b:4d:4d:d1:
bf:c3:4c:5c:7b:38:6d:9c:30:00:0b:17:49:15:de:
89:9c:53:da:1b:bd:74:2f:26:73:7c:fa:2f:fd:f6:
ef:ba:02:a1:90:98:c2:61:8b:aa:32:02:4a:4f:f0:
00:64:53:cc:14:2b:f5:a8:0d:54:61:7f:a4:51:1b:
c4:41:11:9d:a0:d8:86:c4:3a:c8:33:d0:88:e4:da:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:39:39:AC:F2:89:15:18:D1:45:8C:D0:F7:F5:3B:72:5F:3F:20
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ASs5OazyiRUY0UWM0Pf1O3JfPyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ac44:8426::/48
2a12:f540::/29
2a13:18c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
33:07:5e:39:e5:d1:be:31:c8:78:6e:59:43:d9:95:ff:31:ef:
bf:b8:b2:66:2e:0e:9f:c8:12:35:59:66:38:91:31:76:cc:a6:
2c:f7:6f:03:42:d6:a1:e6:94:4c:94:d4:e7:17:dd:55:46:38:
c7:6a:75:36:ca:e5:49:f8:0d:c2:11:1b:ad:7e:79:fb:4d:13:
e9:47:a4:e7:2e:36:0b:c6:69:db:cc:b5:3a:eb:62:a6:5c:95:
22:ba:08:d9:57:32:61:69:3b:42:52:8b:df:3b:a4:b2:6c:a4:
e3:d7:42:17:2b:2b:15:0b:48:50:4f:95:aa:91:c8:5a:aa:11:
81:72:6e:bd:f8:24:6f:6c:58:f5:c8:bf:a8:bc:b1:23:dd:b3:
cd:b2:52:16:e7:d8:9d:fc:12:fb:1d:aa:0f:32:ee:e1:4f:6d:
e2:75:1e:9a:85:84:35:fd:68:61:4e:e3:50:59:ca:b4:cb:46:
e2:08:9e:f4:47:39:56:d8:6a:6f:ff:64:52:3e:c3:89:2f:45:
d7:c3:00:a0:55:5f:15:0d:bd:ae:12:2f:b7:30:59:c4:ec:37:
7d:d1:0e:6a:ef:3e:46:3f:5a:c1:c2:95:99:ca:5b:af:59:8c:
e9:cf:d8:2f:69:99:aa:fe:da:22:92:af:bd:99:a2:d8:7d:c7:
d7:94:c5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:58 2025 by rpki-client