Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L51m2Jll4Dl5VgKBpEOEDlNNz8I.roa
File: L51m2Jll4Dl5VgKBpEOEDlNNz8I.roa (raw, json)
Hash identifier: P8b5djX7FtQuvH4cn1qb2FsG4Mqq+SyTMH8l3dLFchs=
Subject key identifier: 2F:9D:66:D8:99:65:E0:39:79:56:02:81:A4:43:84:0E:53:4D:CF:C2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01910773F21B6DE8B71FB988AD55348284BF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L51m2Jll4Dl5VgKBpEOEDlNNz8I.roa
Signing time: Wed 31 Jul 2024 06:22:04 +0000
ROA not before: Wed 31 Jul 2024 06:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ac44:8426::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 31 Jul 2024 20:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:07:73:f2:1b:6d:e8:b7:1f:b9:88:ad:55:34:82:84:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 31 06:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f9d66d89965e03979560281a443840e534dcfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:c3:85:69:e3:38:f2:30:29:66:9a:99:f3:
cb:2b:60:c4:ae:df:80:76:71:bd:8c:82:29:f0:d7:
11:cf:dc:16:00:f9:80:12:b1:9c:ac:10:e1:e6:56:
bf:b2:d9:04:f8:55:60:ad:2d:78:65:78:ac:52:89:
aa:d6:53:4a:be:b7:b2:f1:22:ec:8a:a4:fb:69:94:
b8:b5:e3:bd:1f:00:4f:43:2c:7a:7e:97:90:a7:88:
e9:20:72:fc:9c:73:68:df:ff:55:15:0b:71:74:fd:
2b:4e:46:d7:c2:da:8f:e6:1e:06:ff:6b:47:fe:2f:
fa:7b:f1:20:f7:7a:6c:24:dd:14:76:f6:c9:de:19:
cc:3a:fe:02:79:b9:49:4b:e8:ea:cd:f7:c8:9b:6c:
6f:f1:70:13:06:40:4d:ef:c4:32:41:e1:bd:64:f9:
c5:3e:86:9c:10:6c:d8:e0:38:8d:f9:b5:83:a0:c8:
c8:a5:6f:2a:eb:68:60:92:a3:ac:07:e3:e6:4d:7e:
7b:a2:ee:4e:59:95:1f:57:6c:06:30:1c:3d:17:c6:
8e:c6:5c:57:39:ce:d9:0d:6f:b1:0d:a6:1e:82:74:
0b:8b:fe:a6:27:51:59:d8:5e:9b:31:d2:9e:e0:1c:
5b:e2:27:e3:0f:a8:a5:04:6d:de:53:b8:9e:23:9d:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9D:66:D8:99:65:E0:39:79:56:02:81:A4:43:84:0E:53:4D:CF:C2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L51m2Jll4Dl5VgKBpEOEDlNNz8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ac44:8426::/48
2a12:f540::/29
2a13:18c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
9d:be:b6:a5:89:51:da:42:84:2e:04:4c:ea:ca:6b:38:68:10:
8c:40:de:00:34:00:81:31:cd:bb:90:89:03:9a:95:f3:d2:f7:
40:46:80:0d:81:1e:76:ce:0e:bb:28:80:91:a3:08:44:44:0a:
97:9a:bc:19:4d:ac:17:50:12:db:4f:bc:3b:c1:a7:d4:a6:8b:
e2:fe:89:39:bb:f7:f7:e2:c2:97:f1:0a:a5:95:f3:c2:2d:6c:
9d:d4:a3:fc:8a:23:ad:7a:25:d0:7a:f0:cc:e9:82:95:d2:5b:
86:34:b0:f0:ef:9e:4c:89:cf:16:b7:0e:a1:fc:87:ec:a0:9e:
28:69:4d:ae:b0:63:88:4c:8f:0b:67:27:8f:93:9b:a5:68:ee:
4a:db:75:49:d0:f4:2c:56:43:98:b7:bc:f8:ea:f3:56:22:b4:
e7:74:66:42:ab:2b:3b:42:ce:fd:0a:b6:20:8b:78:2e:dd:e7:
7f:db:c2:1d:26:b3:11:2b:ad:c4:ab:15:cb:ff:69:7c:cb:78:
65:6c:f2:0d:6b:c6:77:dd:da:c9:fb:91:7f:55:b1:97:de:15:
db:1f:28:23:14:28:9f:e2:57:c7:87:02:55:75:dc:20:cf:30:
4b:21:6b:74:fd:69:db:ea:2c:95:76:64:78:02:71:50:2d:24:
02:96:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:01:40 2025 by rpki-client