Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J_RnI7MR7L-mPQDGdDK3V30jjBo.roa
File: J_RnI7MR7L-mPQDGdDK3V30jjBo.roa (raw, json)
Hash identifier: gS7r4ieUcLrn1OPcOEoAIob6F67bNDtP+a1wMb6CbUw=
Subject key identifier: 27:F4:67:23:B3:11:EC:BF:A6:3D:00:C6:74:32:B7:57:7D:23:8C:1A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192BA77F6BAFE7DB734AE96DD22A2C24561
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J_RnI7MR7L-mPQDGdDK3V30jjBo.roa
Signing time: Wed 23 Oct 2024 17:41:17 +0000
ROA not before: Wed 23 Oct 2024 17:41:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:9280::/32 maxlen: 32
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 27 Oct 2024 12:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:77:f6:ba:fe:7d:b7:34:ae:96:dd:22:a2:c2:45:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 23 17:41:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27f46723b311ecbfa63d00c67432b7577d238c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:81:76:9a:89:a9:5c:c4:16:8b:c1:e8:43:
ef:fc:e7:25:2b:62:ec:65:68:f3:b2:ef:38:e6:e1:
a7:1d:95:6c:56:a1:6c:4b:e0:0a:91:73:67:47:63:
74:98:87:01:c8:02:d7:2d:c6:a3:8a:83:58:7f:06:
61:ee:c2:23:10:1a:6e:36:3f:9b:62:3a:03:c8:70:
2d:9e:29:14:25:21:b9:68:c6:77:c3:eb:dc:4c:7d:
15:3d:d0:2f:e4:5e:b0:9c:cd:55:a8:4e:58:d6:fd:
cb:6b:6d:2c:d4:2f:e5:8d:76:11:50:2a:a3:64:a0:
e8:06:ab:3e:77:51:de:d4:4d:89:22:65:65:51:25:
8b:66:47:0f:80:8d:ca:dc:22:ff:c1:a2:e9:0e:bf:
d9:9a:c8:57:0d:32:cb:20:df:09:18:90:8f:07:89:
3e:00:4e:6c:05:d4:54:8a:0a:09:4b:b0:95:a6:bd:
3e:14:a9:64:01:82:d6:90:16:06:3c:bd:71:ef:3d:
40:55:17:0d:22:55:08:80:85:bd:94:ce:ff:bd:bd:
48:bf:4d:05:b5:cf:66:b3:02:17:55:61:61:22:42:
8f:3a:40:a4:79:af:a3:d2:25:93:24:9d:7b:4a:98:
e4:e1:a5:76:ec:4e:b5:b6:ec:15:18:6e:a6:c5:e4:
a8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F4:67:23:B3:11:EC:BF:A6:3D:00:C6:74:32:B7:57:7D:23:8C:1A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/J_RnI7MR7L-mPQDGdDK3V30jjBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:1a83:66::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:9280::/32
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
95:85:66:4d:31:15:bf:8e:3e:ff:a6:b8:40:fe:c2:03:7f:06:
4a:55:3d:c5:85:f9:e7:5f:ef:cd:39:a6:6f:16:ac:54:1d:7c:
1b:75:1a:d5:dc:96:f2:80:b1:68:f3:27:93:56:60:d7:79:12:
91:45:f5:26:6b:5c:ac:31:3d:68:23:d9:75:b1:3e:2b:62:77:
8c:66:e2:bd:b9:d5:be:07:b4:4f:f6:50:ce:ee:a6:bd:e9:f6:
01:04:16:8f:b3:8a:fc:da:fe:30:ca:8d:00:57:71:48:d2:4d:
fe:dc:b1:a8:7e:c1:c7:07:b3:e7:38:2f:4f:a5:0d:d2:a2:d5:
16:09:4f:b5:ad:e1:93:51:1e:e0:c1:41:b1:54:e4:09:81:33:
09:a7:1f:00:87:dc:a2:7f:ea:90:70:c9:49:1b:87:73:ca:66:
a3:a1:23:2f:da:bb:df:0a:5f:7a:4f:6d:eb:9d:d4:c6:ec:82:
23:08:76:96:61:3d:5a:a7:e9:43:d8:b8:7e:94:9f:a5:14:87:
d1:ae:0b:e2:40:52:35:a9:79:3d:cd:5d:3f:08:10:30:a7:24:
cb:10:bf:64:98:2d:60:dc:e9:be:0e:99:99:26:78:49:c4:31:
de:13:15:f0:f7:d7:f3:4e:d8:45:21:bd:d1:c9:26:e8:3f:7e:
c1:90:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:50 2025 by rpki-client