Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Om0DbcB3hmmXVuDYoUCUrPW4kxs.roa
File: Om0DbcB3hmmXVuDYoUCUrPW4kxs.roa (raw, json)
Hash identifier: dnS/ovnpBcQP2zs8jHks3ImIuqET8i5bJyxCjO/+ZEk=
Subject key identifier: 3A:6D:03:6D:C0:77:86:69:97:56:E0:D8:A1:40:94:AC:F5:B8:93:1B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01915674C9723E75132D9EEC88D00B45D397
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Om0DbcB3hmmXVuDYoUCUrPW4kxs.roa
Signing time: Thu 15 Aug 2024 14:32:59 +0000
ROA not before: Thu 15 Aug 2024 14:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30633
IP address blocks: 45.129.127.0/24 maxlen: 24
45.135.37.0/24 maxlen: 24
103.139.50.0/24 maxlen: 24
193.164.199.0/24 maxlen: 24
2a06:1184:33::/48 maxlen: 48
2a0a:2d06:33::/48 maxlen: 48
2a0a:2d06:55::/48 maxlen: 48
2a0c:7886:33::/48 maxlen: 48
2a0e:1a80:2541::/48 maxlen: 48
2a0e:c780::/32 maxlen: 32
2a0e:f201:1::/48 maxlen: 48
2a0e:f600:6c::/48 maxlen: 48
2a0f:1e00:123::/48 maxlen: 48
2a0f:1e00:456::/48 maxlen: 48
2a0f:1e00:987::/48 maxlen: 48
2a0f:1e00:abc::/48 maxlen: 48
2a0f:1e00:def9::/48 maxlen: 48
2a0f:1e01:1::/48 maxlen: 48
2a0f:1e81:2::/48 maxlen: 48
2a0f:1e81:1293::/48 maxlen: 48
2a0f:1e81:4319::/48 maxlen: 48
2a0f:1e81:92e8::/48 maxlen: 48
2a0f:1e81:a3d0::/48 maxlen: 48
2a0f:1e81:cdae::/48 maxlen: 48
2a0f:2e80::/29 maxlen: 29
2a0f:3d86:1::/48 maxlen: 48
2a0f:3d87::/32 maxlen: 32
2a0f:7d02:1::/48 maxlen: 48
2a0f:7d04:1::/48 maxlen: 48
2a0f:e1c6::/32 maxlen: 32
2a10:6d40::/29 maxlen: 29
2a11:fd80::/29 maxlen: 29
2a12:ac40::/32 maxlen: 32
2a12:ac41::/32 maxlen: 32
2a12:ecc4:2213::/48 maxlen: 48
2a12:f540::/29 maxlen: 29
2a13:18c0:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Aug 2024 16:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:74:c9:72:3e:75:13:2d:9e:ec:88:d0:0b:45:d3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 15 14:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a6d036dc07786699756e0d8a14094acf5b8931b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:40:b8:a6:0c:69:eb:d3:51:46:13:d1:ed:
67:c0:5a:ae:89:db:98:fe:8e:50:b4:ea:4b:29:98:
f8:89:8b:02:33:8f:94:03:e8:66:e3:85:65:88:df:
02:a1:ea:77:0b:4b:23:f5:27:fa:fa:94:45:1c:64:
24:d1:b6:0b:34:9e:b2:8a:34:25:80:64:21:a7:cc:
c6:0b:a1:75:a2:1b:ec:b6:ff:ad:71:6b:27:3a:15:
f0:1f:56:7e:2e:6b:2d:44:61:96:82:b3:01:3f:fe:
a9:b7:43:ff:67:db:d1:45:90:14:18:18:09:71:06:
6f:bd:50:50:56:4e:6c:fe:41:bb:c5:5f:4a:26:b9:
a3:64:85:6c:a2:23:96:8a:8b:12:da:38:fb:38:23:
18:79:87:a6:f4:f6:91:fd:fc:3f:b8:a7:10:79:ac:
dd:6f:52:33:d5:d1:f8:8c:bf:76:e1:72:25:1a:f1:
90:b5:27:a9:54:64:5f:cd:c2:db:ba:f9:3f:7d:f1:
af:4f:ab:47:44:56:a3:24:4d:92:a3:b2:d7:a2:27:
c9:60:ee:2d:9f:db:4a:6e:27:0b:d2:1b:e3:96:5f:
9c:77:97:06:74:1e:e1:bc:1f:58:f0:e4:97:0d:cd:
a6:f7:ba:c0:61:a6:e8:82:4a:52:c5:07:49:6a:f2:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:03:6D:C0:77:86:69:97:56:E0:D8:A1:40:94:AC:F5:B8:93:1B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Om0DbcB3hmmXVuDYoUCUrPW4kxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.127.0/24
45.135.37.0/24
103.139.50.0/24
193.164.199.0/24
IPv6:
2a06:1184:33::/48
2a0a:2d06:33::/48
2a0a:2d06:55::/48
2a0c:7886:33::/48
2a0e:1a80:2541::/48
2a0e:c780::/32
2a0e:f201:1::/48
2a0e:f600:6c::/48
2a0f:1e00:123::/48
2a0f:1e00:456::/48
2a0f:1e00:987::/48
2a0f:1e00:abc::/48
2a0f:1e00:def9::/48
2a0f:1e01:1::/48
2a0f:1e81:2::/48
2a0f:1e81:1293::/48
2a0f:1e81:4319::/48
2a0f:1e81:92e8::/48
2a0f:1e81:a3d0::/48
2a0f:1e81:cdae::/48
2a0f:2e80::/29
2a0f:3d86:1::/48
2a0f:3d87::/32
2a0f:7d02:1::/48
2a0f:7d04:1::/48
2a0f:e1c6::/32
2a10:6d40::/29
2a11:fd80::/29
2a12:ac40::/31
2a12:ecc4:2213::/48
2a12:f540::/29
2a13:18c0:1::/48
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
13:de:1b:39:bd:a8:10:85:3c:14:85:3d:dd:2d:7e:51:cf:ee:
97:04:d6:eb:44:02:74:62:4c:16:64:b1:a3:bf:e0:8b:e3:b7:
38:93:92:90:74:25:46:0b:4f:20:d4:f3:2c:b5:40:a3:cc:4f:
5b:f9:f7:e8:65:a4:35:36:e2:8e:25:d1:63:95:7b:1a:d5:82:
e8:12:0d:ec:66:a2:15:ab:35:a8:2f:84:a1:23:6c:b3:e2:4e:
17:c7:0b:b8:05:60:65:8e:a9:63:fb:4b:f3:4d:25:e4:39:d2:
9f:49:89:99:f9:72:39:d4:25:06:78:bb:6b:e1:4b:76:7c:b5:
65:1b:a9:df:b2:6b:01:1d:8c:49:9b:5e:03:33:35:1f:a8:a0:
cc:df:22:f9:a2:4f:0f:0f:41:56:d3:4b:25:84:96:0a:a1:34:
3f:95:55:80:58:92:69:46:6b:74:c0:04:cb:6d:2a:2f:3d:a0:
7e:2d:0b:54:76:87:cf:e9:d4:43:b7:c5:ca:87:70:8b:36:cb:
b5:60:3b:3d:ad:d0:c9:c6:0f:e0:10:a2:4b:ed:7a:32:c9:09:
7e:82:86:a2:2b:81:97:27:d6:6b:51:cd:02:5a:c5:81:19:fe:
4c:db:73:67:36:33:1f:03:d6:66:35:37:36:89:87:66:5b:dc:
65:3f:58:17
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgISAZFWdMlyPnUTLZ7siNALRdOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwODE1MTQzMjU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTZkMDM2ZGMwNzc4NjY5OTc1NmUwZDhhMTQwOTRhY2Y1Yjg5MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleZAuKYMaevTUUYT0e1nwFquiduY
/o5QtOpLKZj4iYsCM4+UA+hm44VliN8Coep3C0sj9Sf6+pRFHGQk0bYLNJ6yijQl
gGQhp8zGC6F1ohvstv+tcWsnOhXwH1Z+LmstRGGWgrMBP/6pt0P/Z9vRRZAUGBgJ
cQZvvVBQVk5s/kG7xV9KJrmjZIVsoiOWiosS2jj7OCMYeYem9PaR/fw/uKcQeazd
b1Iz1dH4jL924XIlGvGQtSepVGRfzcLbuvk/ffGvT6tHRFajJE2So7LXoifJYO4t
n9tKbicL0hvjll+cd5cGdB7hvB9Y8OSXDc2m97rAYabogkpSxQdJavLsaQIDAQAB
o4IDRjCCA0IwHQYDVR0OBBYEFDptA23Ad4Zpl1bg2KFAlKz1uJMbMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvT20wRGJjQjNobW1YVnVEWW9VQ1VyUFc0a3hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWgYIKwYBBQUHAQcBAf8EggFJMIIBRTAeBAIAATAYAwQA
LYF/AwQALYclAwQAZ4syAwQAwaTHMIIBIQQCAAIwggEZAwcAKgYRhAAzAwcAKgot
BgAzAwcAKgotBgBVAwcAKgx4hgAzAwcAKg4agCVBAwUAKg7HgAMHACoO8gEAAQMH
ACoO9gAAbAMHACoPHgABIwMHACoPHgAEVgMHACoPHgAJhwMHACoPHgAKvAMHACoP
HgDe+QMHACoPHgEAAQMHACoPHoEAAgMHACoPHoESkwMHACoPHoFDGQMHACoPHoGS
6AMHACoPHoGj0AMHACoPHoHNrgMFAyoPLoADBwAqDz2GAAEDBQAqDz2HAwcAKg99
AgABAwcAKg99BAABAwUAKg/hxgMFAyoQbUADBQMqEf2AAwUBKhKsQAMHACoS7MQi
EwMFAyoS9UADBwAqExjAAAEDBwAqE+EBAAIwDQYJKoZIhvcNAQELBQADggEBABPe
Gzm9qBCFPBSFPd0tflHP7pcE1utEAnRiTBZksaO/4IvjtziTkpB0JUYLTyDU8yy1
QKPMT1v59+hlpDU24o4l0WOVexrVgugSDexmohWrNagvhKEjbLPiThfHC7gFYGWO
qWP7S/NNJeQ50p9JiZn5cjnUJQZ4u2vhS3Z8tWUbqd+yawEdjEmbXgMzNR+ooMzf
IvmiTw8PQVbTSyWElgqhND+VVYBYkmlGa3TABMttKi89oH4tC1R2h8/p1EO3xcqH
cIs2y7VgOz2t0MnGD+AQokvtejLJCX6ChqIrgZcn1mtRzQJaxYEZ/kzbc2c2Mx8D
1mY1NzaJh2Zb3GU/WBc=
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:27:59 2025 by rpki-client