Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L_jkfSzC_DVjhTR1e01pirDjfd4.roa
File: L_jkfSzC_DVjhTR1e01pirDjfd4.roa (raw, json)
Hash identifier: RKjwWgQAI9MmuqqBUUb5h6M6JyiTFcrhfThIL2DiMZs=
Subject key identifier: 2F:F8:E4:7D:2C:C2:FC:35:63:85:34:75:7B:4D:69:8A:B0:E3:7D:DE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01923E902C952D803793F8756D15CB096F6B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L_jkfSzC_DVjhTR1e01pirDjfd4.roa
Signing time: Sun 29 Sep 2024 16:14:48 +0000
ROA not before: Sun 29 Sep 2024 16:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:1a83:66::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Oct 2024 18:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3e:90:2c:95:2d:80:37:93:f8:75:6d:15:cb:09:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 29 16:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ff8e47d2cc2fc35638534757b4d698ab0e37dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:f8:36:cf:22:60:c9:56:f3:a9:75:e1:18:
3b:b2:f3:5f:51:bd:f6:63:34:75:06:ff:d9:4f:53:
e1:95:b4:ff:b8:29:bf:f0:fb:47:1c:b6:e3:be:81:
ec:3c:b3:a7:7a:4d:a3:e7:a9:54:cb:15:24:68:f5:
ec:d3:99:52:fa:5b:2b:57:37:73:55:25:0e:66:57:
78:fe:a1:04:5b:35:84:fb:b4:95:2e:26:60:96:b9:
f2:14:0b:6f:47:74:c8:e3:7e:4c:2e:17:04:61:8f:
1d:d3:37:f2:21:30:d8:14:2d:9c:7c:00:56:3d:40:
00:14:0e:99:23:95:40:61:f0:c9:9b:57:06:f1:ef:
0e:4d:01:4f:7c:13:b9:e2:65:96:66:a2:eb:a8:f4:
dd:c7:ee:83:82:f9:43:c4:b1:19:4c:34:36:35:ef:
09:11:1b:5d:16:ef:b6:5c:c4:4c:9b:74:f8:20:6d:
8a:83:f8:39:38:29:a6:da:41:2f:3a:26:89:c6:02:
9b:69:d2:63:a1:e1:62:38:c8:56:17:e8:cf:02:ea:
e4:32:87:46:dd:98:ea:34:76:27:5a:7d:97:59:f4:
d8:3d:c8:cc:db:22:79:72:9e:25:0c:a7:41:41:47:
ef:23:56:e1:2e:4b:4c:2c:d5:3d:0f:13:d2:62:4c:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:E4:7D:2C:C2:FC:35:63:85:34:75:7B:4D:69:8A:B0:E3:7D:DE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L_jkfSzC_DVjhTR1e01pirDjfd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:1a83:66::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
b9:a9:bd:ce:51:f7:0c:24:3c:58:ac:48:27:5b:fd:e8:c3:0e:
34:ca:18:da:d9:e7:c8:43:53:5d:58:a8:42:f1:32:4a:8d:b4:
21:ef:d6:26:7c:ca:3f:38:f6:fc:a1:80:62:10:3a:6f:75:93:
26:32:1b:ac:d3:50:b3:0b:b2:28:77:f8:e2:2a:66:bb:c8:0c:
9e:52:21:63:38:c6:3f:67:53:3c:89:41:99:ae:41:0e:ed:46:
98:07:ae:e1:7e:c7:0f:59:f4:cd:10:5d:31:9f:fc:8d:d0:ee:
e1:de:97:3f:64:11:1a:f4:bd:67:b7:fc:41:69:42:cb:87:c1:
fb:87:b6:60:c0:9f:2b:dd:a8:09:3b:9b:c7:3a:1a:2d:d2:52:
a2:dd:c9:b6:13:89:be:d6:ca:1a:93:80:aa:6a:b4:3a:3c:72:
f8:c4:12:6a:d8:c6:bc:bc:b4:f2:cc:59:3a:fc:9b:ca:6c:98:
6d:14:3a:15:5a:29:fb:f7:2c:7e:e6:15:26:8b:c6:39:84:6b:
96:c9:d9:6c:b6:17:cc:2e:36:ce:ea:f8:ec:7f:72:39:31:5d:
02:51:ff:7a:c5:83:29:f2:e1:8e:c3:5a:86:0a:dd:05:c8:54:
4a:83:35:30:d2:61:4e:82:80:38:da:61:b3:59:5f:32:50:25:
06:67:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:55:41 2025 by rpki-client