Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/F77NxJ9fHh07fwmXrR1Rg8tjG00.roa
File: F77NxJ9fHh07fwmXrR1Rg8tjG00.roa (raw, json)
Hash identifier: /yOy/K2C3cZNFHKLQvctiJeBQg+K4+n2l8TIuZB5pNc=
Subject key identifier: 17:BE:CD:C4:9F:5F:1E:1D:3B:7F:09:97:AD:1D:51:83:CB:63:1B:4D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195621F68A491A14F8CD655C0E106E536A2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/F77NxJ9fHh07fwmXrR1Rg8tjG00.roa
Signing time: Tue 04 Mar 2025 17:06:20 +0000
ROA not before: Tue 04 Mar 2025 17:06:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
80.253.250.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d84::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Mar 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:62:1f:68:a4:91:a1:4f:8c:d6:55:c0:e1:06:e5:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 4 17:06:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17becdc49f5f1e1d3b7f0997ad1d5183cb631b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:07:6d:a5:e7:c9:f0:be:6e:24:cf:ab:e8:
8f:6b:65:25:63:71:e6:ad:69:0a:4a:65:8a:a2:36:
f9:d7:84:7a:43:d2:9b:d0:67:2f:38:83:fb:52:38:
63:5e:65:9f:66:08:df:3e:2b:fc:48:3b:1a:96:89:
ed:f4:4b:70:e4:63:0d:ca:a1:03:7f:77:ee:35:e5:
48:ef:21:a7:be:6d:5c:8d:8a:38:18:aa:ee:ab:4d:
39:18:aa:9e:2f:4c:d2:92:8d:85:f7:25:16:d8:94:
fa:a2:fa:55:32:24:ff:ee:8c:e6:c9:95:f2:5a:ee:
42:f0:a7:33:ad:2a:62:db:5e:36:28:71:89:18:ae:
4f:91:de:1d:85:b7:3e:e9:9d:ad:e3:e6:bb:cc:e4:
dd:64:74:9a:53:8d:44:ed:c7:de:b9:8f:09:f3:72:
60:e0:61:6b:e5:e2:fb:75:ec:d0:66:67:a6:4b:0c:
f4:e2:77:5d:f5:0b:66:da:6c:b6:09:fc:b1:e0:8a:
75:4b:5a:c4:8f:a8:8c:17:f3:b0:1d:23:d9:14:26:
be:09:e5:0a:e0:74:81:b6:b4:59:0f:bd:46:dd:53:
1d:38:da:f9:25:58:fb:5a:55:1b:ac:fb:e9:4a:54:
aa:4a:6e:f2:dc:fb:64:0e:0b:a7:d6:54:b4:43:0b:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:CD:C4:9F:5F:1E:1D:3B:7F:09:97:AD:1D:51:83:CB:63:1B:4D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/F77NxJ9fHh07fwmXrR1Rg8tjG00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
80.253.250.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d84::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
5b:19:0d:51:0d:37:86:1a:be:fa:ab:e0:ad:62:29:94:a0:43:
2a:3f:24:94:c9:b5:42:99:b1:d5:66:6f:b5:6c:b1:b1:c5:fc:
a7:e3:48:53:b0:93:0e:e6:3a:4b:c8:c0:d9:5b:36:e8:9d:8e:
6e:7f:7b:00:a3:5f:77:ce:b1:d1:ee:b5:ce:2e:ad:74:77:f2:
67:09:36:dd:d2:81:92:1b:d2:6f:47:c3:74:7b:0f:3b:87:d4:
c5:97:74:d2:02:2e:b7:3d:f6:0b:fd:8f:0f:53:a1:4b:31:da:
38:73:90:3c:cc:df:a6:6a:9b:c0:7d:33:97:fb:87:27:57:a3:
d5:67:0a:ac:80:03:28:ff:3e:cd:dd:95:b2:cd:25:16:8f:41:
7a:9e:33:00:1e:78:64:ba:a0:86:6a:01:39:68:99:0e:b2:ec:
6f:d2:e0:0b:54:c1:87:7c:43:5d:30:25:aa:a9:70:53:ab:ae:
7e:32:6e:5e:59:2d:76:ba:d5:fb:eb:2c:80:2e:97:4e:40:ec:
f4:96:8b:ab:c4:30:d2:5e:03:bc:e6:b7:36:2b:bc:bd:e9:12:
f8:cb:da:42:11:01:47:86:5e:a6:02:7f:a7:bb:1a:50:6b:b2:
49:18:9f:b0:7b:9c:6a:8e:8a:2d:74:b5:43:52:95:5b:f4:c0:
62:d3:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:18:38 2025 by rpki-client